last executing test programs: 2m6.384453993s ago: executing program 2 (id=163): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000001000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x3ffff, 0x0, 0x0, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000780)=[{}, {}, {}, {}], 0x4, &(0x7f00000007c0)={0x0, 0x989680}, &(0x7f0000000800)={[0x4]}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) 2m5.30854959s ago: executing program 2 (id=164): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e21e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e21e0000002"], 0x20000) 2m5.247177181s ago: executing program 2 (id=166): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0x100000000}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) read(r2, &(0x7f0000000380)=""/1, 0x1) 2m4.08439879s ago: executing program 2 (id=174): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 2m3.956500992s ago: executing program 2 (id=176): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000080601140000000000000000030000040500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x60000854) 2m3.896966672s ago: executing program 2 (id=178): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m48.121981592s ago: executing program 32 (id=178): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m40.432685943s ago: executing program 0 (id=300): syz_usb_connect(0x3, 0x24, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04ee352009"], 0x7) 1m39.874605522s ago: executing program 0 (id=301): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0x0, 0xfffffffe, 0x5}) fstat(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1m37.148171375s ago: executing program 0 (id=304): bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xfffffffffffff000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execve(0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 1m35.335442913s ago: executing program 0 (id=307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1m32.352660761s ago: executing program 0 (id=315): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) 1m30.52055978s ago: executing program 0 (id=316): socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 1m15.263582481s ago: executing program 33 (id=316): socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 16.354849361s ago: executing program 5 (id=527): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 15.300490408s ago: executing program 5 (id=532): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x3804410, &(0x7f0000000100)={[{@quota}, {@mblk_io_submit}, {@minixdf}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x1, 0x585, &(0x7f0000000580)="$eJzs3U1rG9caAOB35K98XjsQwr2Xy60hi6akkWO7Hwl0ka5KaUMD7T41tmKC5ShYcojdQJNFs+mmhEIpDZSs2+67DP0D/RWBNhBKMC2lG5eRR45iS5bqyLYSPQ9Mcs7M2O95NXMOZ3wkFEDPGk3/yUX8JyK+SCKG6471R3ZwdO28lcc3ptMtidXVD39LIsn21c5Psv8PZpV/R8RPn0WczG2OW15anpsqFgsLWX2sMn91rLy0fOry/NRsYbZwZWJy8szrkxNn33yjY7m+cuGPrz+4/+6Zz4+vfPXDwyN3kjgXh7Jj9Xk8g5v1ldEYzV6TgTi34cTxDgTrJsleN4Bt6cv6+UCkY8Bw9GW9HnjxfRoRq0CPSvR/6FG1eUDt2b5Dz8HPjUdvrz0Abc6/f+1vI7Gv+mx0YCV56skofd4d6UD8NMaPv969k27Rub9DALR081ZEnO7v3zz+Jdn4t32n2zhnYwzjH+ye++n859VG85/c+vwnGsx/Djbou9vRuv/nHnYgTFPp/O+thvPf9UWrkb6sdrg65xtILl0uFtKx7V8RcSIGhtL6Vus5Z1YerDY7Vj//S7c0fm0umLXjYf/Q0z8zM1WZepac6z26FfHfhvPfZP36Jw2uf/p6XGgzxrHC3f83O9Y6/521ei/i5YbX/8mKVrL1+uRY9X4Yq90Vm/1++9jPzeLvdf7p9T+wlv+f2SPhhvxrN1+2Xlv+5zG+3fdXodmxtu//wSd70vt/MPmoWq7tvj5VqSyMRwwm72/eP/HkZ2v12vlp/ieObz3+Nbr/90fEx23mf/vo9//bfv47K81/Zuv7fySpX6/fRuHBe5980yx+e9f/tWrpRLannfGv3QY+y2sHAAAAAAAA3SYXEYciyeXXy7lcPr/2/o6jcSBXLJUrJy+VFq/MRPWzsiMxkKutdA/XvR9iPHs/bK0+saE+GRFHIuLLvv3Ven66VJzZ6+QBAAAAAAAAAAAAAAAAAACgSxxs8vn/1C99e906YMe1+srvey/tUkOAXdfyK/878U1PQFdq2f+BF5b+D71L/4fepf9D79L/oXfp/9C79H/oXfo/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNSF8+fTbXXl8Y3ptD5zbWlxrnTt1EyhPJefX5zOT5cWruZnS6XZYiE/XZpv9fuKpdLV8YlYvD5WKZQrY+Wl5YvzpcUrlYuX5787HFEY2JWsAAAAAAAAAAAAAAAAAAAA4PlSXlqemyoWCwvdXRjMmrvjsYZ2PsQ2CsPRFc1oWOjvjmb0UmEodiFW/Shx9p29GZ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYM3fAQAA//+7aTSM") bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='proc\x00', 0x1) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f00000003c0)=""/28, 0xffd2) 9.283721943s ago: executing program 4 (id=553): r0 = syz_open_dev$vim2m(&(0x7f0000003c00), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x51, 0x1, 0x1, "fbe237e7f323890000df4832c30600"}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x1a0, 0x4c, 0x1a, 0x1a0, 0x73, 0x300, 0x258, 0x258, 0x300, 0x258, 0x3, 0x0, {[{{@ipv6={@remote, @local, [0x0, 0x0, 0xff], [0x0, 0xffffff00], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xe, 0xb, 0xc, 0xc07, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "fc84"}}, @common=@icmp6={{0x28}, {0x0, "e1f6", 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x8000, 0x7, 0x18d, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x7fff, 0xfffffffffffffffe, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x9, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) 9.249789114s ago: executing program 3 (id=554): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x40000000004) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000040)="a6047207d9") 8.976401978s ago: executing program 1 (id=555): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) write$sndseq(r4, 0x0, 0x0) r5 = dup(r4) r6 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66642cf235353100695bd6a1fc184a", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r7 = eventfd2(0x8000, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_route(0x10, 0x3, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000000c0)={0x0, r7}) 8.878335849s ago: executing program 3 (id=557): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x3, [@int={0x5, 0x0, 0x0, 0x1, 0x0, 0x12, 0x0, 0x5f, 0x2}, @volatile={0x2, 0x0, 0x0, 0x9, 0x2}, @fwd={0xe}, @var={0x5, 0x0, 0x0, 0xe, 0x5, 0x1}, @var={0x2, 0x0, 0x0, 0xe, 0x1}, @var={0x3, 0x0, 0x0, 0xe, 0x1, 0x2}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x5, 0x2}, @float={0x6, 0x0, 0x0, 0x10, 0xc}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x7fffffff}}]}, {0x0, [0x2e]}}, &(0x7f0000000dc0)=""/4096, 0xa7, 0x1000, 0x1, 0xa7e, 0x0, @void, @value}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="09000000faea0000e27f00000100000020020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095003b29299a03ea0ed9d378bd8d01d5000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x4}, {0x10000000, 0x4, 0x10008, 0x5}], 0x10, 0xfffffff4, @void, @value}, 0x94) socket$kcm(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000005b80)={@loopback={0xfec0ffffffffffff}, 0x32, r2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$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") r3 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180)={'fscrypt:', @auto=[0x0, 0x74, 0x0, 0x0, 0x0, 0x62, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62]}, &(0x7f00000001c0)={0x0, "e2030013d278a1fc4a8d8c8eb43087655e4365991c3e1e6f89550928b7bc882f37d43e4bd36e0000438c04419900"}, 0x48, 0xffffffffffffffff) keyctl$search(0xa, r3, &(0x7f0000000140)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, r3) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@ifindex=r2, 0x26, 0x1, 0x642e, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300), &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) 7.828958986s ago: executing program 1 (id=558): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='btrfs_sync_file\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x300}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x7c00, 0x0, 0x3) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000800)=""/231, 0xe7, 0x0, &(0x7f00000004c0)=""/170, 0xaa}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000ec0)=ANY=[@ANYRES32=r0, @ANYBLOB="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", @ANYRES64=r1, @ANYBLOB="d4d200bae9a80b753c78f5d1c370315161a61a2965e1e4ee6b364c2fa120f3d2099ca65a643a322b46fe7bfcf3f08cd90fa886a699d3f09310c3315f51b3e47322f092284d81ad9fe64aff99b0e8ecc2c9b8038674a48d243f85bddf162da4bb591be620c1644f5297", @ANYRES16=r3, @ANYRESDEC=r1, @ANYRES16=r1, @ANYRESDEC=r2], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r6}, 0x9) 7.783881577s ago: executing program 1 (id=559): getpgid(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 7.740263928s ago: executing program 4 (id=560): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) add_key$user(&(0x7f00000000c0), &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000280)="fdda04e458fef0e7ae24e32f4bdeec837f25852ef4d741f503d6759a4df163498574d6e755149391973e76050c9a3c516851aa7c625b1fa94f19f793131c204a8e6fa2526660ae5503ca7bbdf0b90f507b36e77304433857", 0x58, 0xfffffffffffffffd) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_RMID(0x0, 0x0, 0x0) read(r0, 0x0, 0x5d) write$ppp(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r5, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000080)="93", 0x1}, {&(0x7f0000002400)="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", 0x4e4}], 0x2}}, {{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000780)="e4", 0x1}], 0x1}}], 0x2, 0x0) 6.436503188s ago: executing program 4 (id=561): setreuid(0xee01, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 5.450517914s ago: executing program 1 (id=562): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socketpair(0x2b, 0x2, 0x26f, &(0x7f0000000040)) setrlimit(0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x6) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x400000001, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}, r7}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000780), r7, 0x2}}, 0x18) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f00000001c0)=[0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r9, r8], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r10, 0xc01464a6, &(0x7f0000000000)={r11}) 5.446203014s ago: executing program 6 (id=563): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) r3 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f0000001380)=@udp=r3}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 5.386049215s ago: executing program 3 (id=564): socket$can_bcm(0x1d, 0x2, 0x2) fsopen(&(0x7f00000007c0)='erofs\x00', 0x1) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 5.296512336s ago: executing program 4 (id=565): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0x100000000}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) read(r2, &(0x7f0000000380)=""/1, 0x1) 4.526307998s ago: executing program 6 (id=566): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000140)={0x14, r2, 0x405, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 4.39605386s ago: executing program 1 (id=567): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x20, 0x1}, 0x0, 0x0, 0x0, 0x0}) 4.276296873s ago: executing program 6 (id=568): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r4, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0x5}, {0x6, 0xffff}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}}, {0x4}}, {{0x1c, 0x1, {0xd, 0x4, 0xc, 0x487, 0x1, 0x0, 0xfffffffc}}, {0x4}}]}]}, 0x68}}, 0x0) 3.229937479s ago: executing program 5 (id=569): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='btrfs_sync_file\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x300}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x7c00, 0x0, 0x3) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000800)=""/231, 0xe7, 0x0, &(0x7f00000004c0)=""/170, 0xaa}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000ec0)=ANY=[@ANYRES32=r0, @ANYBLOB="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", @ANYRES64=r1, @ANYBLOB="d4d200bae9a80b753c78f5d1c370315161a61a2965e1e4ee6b364c2fa120f3d2099ca65a643a322b46fe7bfcf3f08cd90fa886a699d3f09310c3315f51b3e47322f092284d81ad9fe64aff99b0e8ecc2c9b8038674a48d243f85bddf162da4bb591be620c1644f5297", @ANYRES16=r3, @ANYRESDEC=r1, @ANYRES16=r1, @ANYRESDEC=r2], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r6}, 0x9) 3.17350719s ago: executing program 3 (id=570): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2, 0x36}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 3.096763271s ago: executing program 1 (id=571): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @multicast2}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 2.973413263s ago: executing program 6 (id=572): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="0198000000000000200012800800", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x78, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}]}, @TCA_CGROUP_ACT={0x34, 0x1, [@m_gact={0x30, 0x7, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) 2.959152363s ago: executing program 5 (id=573): getpgid(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2.958074214s ago: executing program 3 (id=574): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQES(&(0x7f000055e000/0x4000)=nil, 0x4000, 0x300000b, 0x11, r3, 0x10000000) r4 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc4c85513, &(0x7f0000000000)={0x2, 0x5, 0x1, 0x0, 'syz1\x00'}) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(ccm(compress_null-generic),sha1-ce)\x00'}, 0x41) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x20000000) dup3(r0, r0, 0x0) 2.735443747s ago: executing program 6 (id=575): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x3, [@int={0x5, 0x0, 0x0, 0x1, 0x0, 0x12, 0x0, 0x5f, 0x2}, @volatile={0x2, 0x0, 0x0, 0x9, 0x2}, @fwd={0xe}, @var={0x5, 0x0, 0x0, 0xe, 0x5, 0x1}, @var={0x2, 0x0, 0x0, 0xe, 0x1}, @var={0x3, 0x0, 0x0, 0xe, 0x1, 0x2}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x5, 0x2}, @float={0x6, 0x0, 0x0, 0x10, 0xc}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x7fffffff}}]}, {0x0, [0x2e]}}, &(0x7f0000000dc0)=""/4096, 0xa7, 0x1000, 0x1, 0xa7e, 0x0, @void, @value}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="09000000faea0000e27f00000100000020020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095003b29299a03ea0ed9d378bd8d01d5000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x4}, {0x10000000, 0x4, 0x10008, 0x5}], 0x10, 0xfffffff4, @void, @value}, 0x94) socket$kcm(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000005b80)={@loopback={0xfec0ffffffffffff}, 0x32, r2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$eJzs3c9vI1cdAPDvOL+cNG3S0gMgoEspLGi1TuJto6oHWE4IoUqIHkHahsQbRbHjKHZKE/aQ/g9IVOIER/4Azj1x54LgxmU5IPEjAm1W4mA040nWm7U3ZpPYUfz5SKN5b2bs73trzXv21xu/AEbWjYg4iIjJiPgwIuby40m+xd32ll736PDB6tHhg9UkWq0P/plk59Nj0fGY1Ev5cxYj4kffi/hp8mzcxt7+5kq1WtlpV6cXmrXthcbe/u2N2sp6Zb2yVS4vLy0vvnvnnfKF9fWN2mRe+vLDPxx86+dps2bzI539uEjtrk+cxEmNR8QPLiPYEIzl/ZkcdkN4IYWIeC0i3szu/7kYy15NAOA6a7XmojXXWQcArrtClgNLCqU8FzAbhUKp1M7hvR4zhWq90bx1v767tdbOlc3HROH+RrWymOcK52MiSetLWflJvXyqficiXo2IX0xNZ/XSar26Nsw3PgAwwl46Nf//Z6o9/wMA11xx2A0AAAbO/A8Ao8f8DwCjx/wPAKPnyfx/d6jtAAAGx+d/ABg95n8AGCk/fP/9dGsd5b9/vfbR3u5m/aPba5XGZqm2u1pare9sl9br9fXsN3tqZz1ftV7fXno7dj+e//Z2o7nQ2Nu/V6vvbjXvZb/rfa8yMZBeAQDP8+obn/05iYiD96azLTrWcjBXw/VWGHYDgKEZG3YDgKGx2heMrnN8xpcegGuiyxK9TylGxPTpg61Wq3V5TQIu2c0vyP/DqOrI//tfwDBi5P9hdMn/w+hqtZJ+1/yPfi8EAK42OX6gx/f/r+X73+ZfDvxk7fQVn15mqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBqO17/t5SvBT4bhUKpFPFyRMzHRHJ/o1pZjIhXIuJPUxNTaX1pyG0GAM6r8LckX//r5txbs6fPTiaPp7J9RPzsVx/88uOVZnPnj+nxf50cb36aHy8Po/0AwFmO5+ls3/FB/tHhg9XjbZDt+ft3I6LYjn90OBlHJ/HHYzzbF2MiImb+neT1tqQjd3EeB59ExOe79T+J2SwH0l759HT8NPbLA41feCp+ITvX3qf/Fp+7gLbAqPksHX/udrv/CnEj23e//4vZCHV++fiXPtXqUTYGPol/PP6N9Rj/bvQb4+3ff79dmn723CcRXxyPOI591DH+HMdPesR/q8/4f/nSV97sda7164ib0T1+Z6yFZm17obG3f3ujtrJeWa9slcvLS8uL7955p7yQ5agXes8G/3jv1itZocslaf9nesQvntH/r/fZ/9/898Mff7XHuTT+N7/WLX4hXn9O/HRO/Eaf8VdmflfsdS6Nv9aj/2e9/rf6jP/wr/vPLBsOAAxPY29/c6VarewMsnD8RmKgQRX6K0zlL85Vac9ThSvbsM2V6ncGFWsy/q9HtVovFKvXiHERWTfgKji56SPi8bAbAwAAAAAAAAAAAAAAdHWpf6iUtAvD7iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADX1/8CAAD//8jOyzo=") r3 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180)={'fscrypt:', @auto=[0x0, 0x74, 0x0, 0x0, 0x0, 0x62, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62]}, &(0x7f00000001c0)={0x0, "e2030013d278a1fc4a8d8c8eb43087655e4365991c3e1e6f89550928b7bc882f37d43e4bd36e0000438c04419900"}, 0x48, 0xffffffffffffffff) keyctl$search(0xa, r3, &(0x7f0000000140)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, r3) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@ifindex=r2, 0x26, 0x1, 0x642e, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300), &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) 1.589694495s ago: executing program 3 (id=576): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x23, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_submit(0x0, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x5, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c0000"], 0x7c}}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)=0x100, 0x9, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000100)={0x14, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.588450255s ago: executing program 5 (id=577): syz_open_dev$usbmon(&(0x7f00000021c0), 0x8000000000000000, 0x100) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}], 0x2, 0x48800) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) shutdown(r0, 0x2) 1.208481611s ago: executing program 4 (id=578): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}], 0x1) 266.325156ms ago: executing program 5 (id=579): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = accept(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x1d}], 0x1, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x6799615df2d1bc8a}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x41) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r5, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) 140.573468ms ago: executing program 4 (id=580): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb", @ANYBLOB="4e2e0b89a02402cc7320d8e204daab87838c"], 0xfdef) 0s ago: executing program 6 (id=581): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x3804410, &(0x7f0000000100)={[{@quota}, {@mblk_io_submit}, {@minixdf}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x1, 0x585, &(0x7f0000000580)="$eJzs3U1rG9caAOB35K98XjsQwr2Xy60hi6akkWO7Hwl0ka5KaUMD7T41tmKC5ShYcojdQJNFs+mmhEIpDZSs2+67DP0D/RWBNhBKMC2lG5eRR45iS5bqyLYSPQ9Mcs7M2O95NXMOZ3wkFEDPGk3/yUX8JyK+SCKG6471R3ZwdO28lcc3ptMtidXVD39LIsn21c5Psv8PZpV/R8RPn0WczG2OW15anpsqFgsLWX2sMn91rLy0fOry/NRsYbZwZWJy8szrkxNn33yjY7m+cuGPrz+4/+6Zz4+vfPXDwyN3kjgXh7Jj9Xk8g5v1ldEYzV6TgTi34cTxDgTrJsleN4Bt6cv6+UCkY8Bw9GW9HnjxfRoRq0CPSvR/6FG1eUDt2b5Dz8HPjUdvrz0Abc6/f+1vI7Gv+mx0YCV56skofd4d6UD8NMaPv969k27Rub9DALR081ZEnO7v3zz+Jdn4t32n2zhnYwzjH+ye++n859VG85/c+vwnGsx/Djbou9vRuv/nHnYgTFPp/O+thvPf9UWrkb6sdrg65xtILl0uFtKx7V8RcSIGhtL6Vus5Z1YerDY7Vj//S7c0fm0umLXjYf/Q0z8zM1WZepac6z26FfHfhvPfZP36Jw2uf/p6XGgzxrHC3f83O9Y6/521ei/i5YbX/8mKVrL1+uRY9X4Yq90Vm/1++9jPzeLvdf7p9T+wlv+f2SPhhvxrN1+2Xlv+5zG+3fdXodmxtu//wSd70vt/MPmoWq7tvj5VqSyMRwwm72/eP/HkZ2v12vlp/ieObz3+Nbr/90fEx23mf/vo9//bfv47K81/Zuv7fySpX6/fRuHBe5980yx+e9f/tWrpRLannfGv3QY+y2sHAAAAAAAA3SYXEYciyeXXy7lcPr/2/o6jcSBXLJUrJy+VFq/MRPWzsiMxkKutdA/XvR9iPHs/bK0+saE+GRFHIuLLvv3Ven66VJzZ6+QBAAAAAAAAAAAAAAAAAACgSxxs8vn/1C99e906YMe1+srvey/tUkOAXdfyK/878U1PQFdq2f+BF5b+D71L/4fepf9D79L/oXfp/9C79H/oXfo/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNSF8+fTbXXl8Y3ptD5zbWlxrnTt1EyhPJefX5zOT5cWruZnS6XZYiE/XZpv9fuKpdLV8YlYvD5WKZQrY+Wl5YvzpcUrlYuX5787HFEY2JWsAAAAAAAAAAAAAAAAAAAA4PlSXlqemyoWCwvdXRjMmrvjsYZ2PsQ2CsPRFc1oWOjvjmb0UmEodiFW/Shx9p29GZ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYM3fAQAA//+7aTSM") bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f00000003c0)=""/28, 0xffd2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.240' (ED25519) to the list of known hosts. [ 39.174839][ T4015] cgroup: Unknown subsys name 'net' [ 39.418808][ T4015] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 39.780633][ T4015] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 41.305320][ T4026] chnl_net:caif_netlink_parms(): no params data found [ 41.369971][ T4031] chnl_net:caif_netlink_parms(): no params data found [ 41.397902][ T4025] chnl_net:caif_netlink_parms(): no params data found [ 41.415220][ T4035] chnl_net:caif_netlink_parms(): no params data found [ 41.468489][ T4026] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.470658][ T4026] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.474210][ T4026] device bridge_slave_0 entered promiscuous mode [ 41.484096][ T4034] chnl_net:caif_netlink_parms(): no params data found [ 41.502195][ T4026] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.505546][ T4026] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.508259][ T4026] device bridge_slave_1 entered promiscuous mode [ 41.589227][ T4025] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.591249][ T4025] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.594029][ T4025] device bridge_slave_0 entered promiscuous mode [ 41.611019][ T4026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.614200][ T4031] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.616283][ T4031] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.619162][ T4031] device bridge_slave_0 entered promiscuous mode [ 41.636491][ T4025] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.638518][ T4025] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.641257][ T4025] device bridge_slave_1 entered promiscuous mode [ 41.651617][ T4026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.654582][ T4035] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.656546][ T4035] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.659354][ T4035] device bridge_slave_0 entered promiscuous mode [ 41.669134][ T4031] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.671179][ T4031] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.674277][ T4031] device bridge_slave_1 entered promiscuous mode [ 41.676924][ T4034] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.679037][ T4034] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.681726][ T4034] device bridge_slave_0 entered promiscuous mode [ 41.696871][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.698826][ T4035] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.701510][ T4035] device bridge_slave_1 entered promiscuous mode [ 41.709923][ T4034] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.711873][ T4034] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.714765][ T4034] device bridge_slave_1 entered promiscuous mode [ 41.748107][ T4025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.758196][ T4026] team0: Port device team_slave_0 added [ 41.768040][ T4035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.772831][ T4031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.776792][ T4025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.780540][ T4026] team0: Port device team_slave_1 added [ 41.790109][ T4035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.794421][ T4034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.798659][ T4031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.826796][ T4034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.842601][ T4025] team0: Port device team_slave_0 added [ 41.857461][ T4035] team0: Port device team_slave_0 added [ 41.871998][ T4025] team0: Port device team_slave_1 added [ 41.880498][ T4026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.888573][ T4026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.896193][ T4026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.915027][ T4035] team0: Port device team_slave_1 added [ 41.918770][ T4034] team0: Port device team_slave_0 added [ 41.929165][ T4031] team0: Port device team_slave_0 added [ 41.937349][ T4026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.939271][ T4026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.946721][ T4026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.951325][ T4034] team0: Port device team_slave_1 added [ 41.971783][ T4031] team0: Port device team_slave_1 added [ 41.974156][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.976186][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.983549][ T4025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.987855][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.989845][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.997440][ T4025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.016837][ T4035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.018824][ T4035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.027032][ T4035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.041425][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.043667][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.050837][ T4034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.055202][ T4035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.057201][ T4035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.064936][ T4035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.078739][ T4031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.080784][ T4031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.092750][ T4031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.106415][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.108366][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.116734][ T4034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.121918][ T4031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.124349][ T4031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.131549][ T4031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.194747][ T4026] device hsr_slave_0 entered promiscuous mode [ 42.232826][ T4026] device hsr_slave_1 entered promiscuous mode [ 42.334581][ T4025] device hsr_slave_0 entered promiscuous mode [ 42.372775][ T4025] device hsr_slave_1 entered promiscuous mode [ 42.412652][ T4025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.414955][ T4025] Cannot create hsr debugfs directory [ 42.544612][ T4034] device hsr_slave_0 entered promiscuous mode [ 42.582838][ T4034] device hsr_slave_1 entered promiscuous mode [ 42.632544][ T4034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.634665][ T4034] Cannot create hsr debugfs directory [ 42.664368][ T4035] device hsr_slave_0 entered promiscuous mode [ 42.712863][ T4035] device hsr_slave_1 entered promiscuous mode [ 42.752459][ T4035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.754537][ T4035] Cannot create hsr debugfs directory [ 42.794425][ T4031] device hsr_slave_0 entered promiscuous mode [ 42.832884][ T4031] device hsr_slave_1 entered promiscuous mode [ 42.872630][ T4031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.874781][ T4031] Cannot create hsr debugfs directory [ 43.013061][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 43.015109][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 43.092951][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 43.094825][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 43.102777][ T4038] Bluetooth: hci3: command 0x0409 tx timeout [ 43.129365][ T4025] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 43.184815][ T4025] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 43.225787][ T4025] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 43.268442][ T4025] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 43.345260][ T4035] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 43.401041][ T4035] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 43.464273][ T4035] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 43.514654][ T4035] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 43.560399][ T4026] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 43.609175][ T4026] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 43.669429][ T4026] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 43.726231][ T4026] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 43.805216][ T4034] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 43.877626][ T4034] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 43.915238][ T4034] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 43.971330][ T4034] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 44.031794][ T4025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.084301][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.088326][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.097477][ T4025] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.118410][ T4031] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.150322][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.153318][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.156559][ T437] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.158719][ T437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.161799][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.165012][ T4031] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.234600][ T4031] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 44.289692][ T4031] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.329725][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.332905][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.335591][ T437] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.337478][ T437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.347457][ T4035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.351587][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.375829][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.389105][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.399307][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.402424][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.405109][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.407856][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.413979][ T4035] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.421924][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.425156][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.427876][ T437] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.429891][ T437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.433516][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.452252][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.456519][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.467772][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.470739][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.476145][ T1832] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.478296][ T1832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.491938][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.496408][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.499159][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.511385][ T4025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.516834][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.527161][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.529983][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.534039][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.537645][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.540739][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.546038][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.558393][ T4034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.571365][ T4026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.578768][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.581912][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.606839][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.610377][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.618331][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.621218][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.628144][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.630905][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.641178][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.648325][ T4034] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.657451][ T4026] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.661920][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.667663][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.679920][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.683540][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.688776][ T437] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.690733][ T437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.698459][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.712494][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.715432][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.717972][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.719985][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.725834][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.728747][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.731739][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.733837][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.740207][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.771014][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.779702][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.783993][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.786173][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.788670][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.797758][ T4025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.800020][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.803120][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.810495][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.825972][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.829005][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.834222][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.839210][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.842503][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.860165][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.867147][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.870025][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.875009][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.877881][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.890838][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.895658][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.901808][ T4031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.921369][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.924737][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.927510][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.930455][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.934704][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.937099][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.951438][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.959238][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.962166][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.971444][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.976117][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.992259][ T4035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.004762][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.007450][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.019330][ T4025] device veth0_vlan entered promiscuous mode [ 45.028399][ T4031] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.030548][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.034161][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.037638][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.040838][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.050477][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.054655][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.058644][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.093631][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 45.095358][ T4025] device veth1_vlan entered promiscuous mode [ 45.096927][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 45.100000][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.103365][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.107074][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.114013][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.117154][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.119671][ T437] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.121687][ T437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.135643][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.139099][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.141399][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.146724][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.149554][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.152123][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.154091][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.173437][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 45.175447][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 45.177302][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 45.196988][ T4026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.209431][ T1738] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.212175][ T1738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.215824][ T1738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.218654][ T1738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.227761][ T4035] device veth0_vlan entered promiscuous mode [ 45.230261][ T1738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.233800][ T1738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.236322][ T1738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.239095][ T1738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.245360][ T4025] device veth0_macvtap entered promiscuous mode [ 45.251321][ T4025] device veth1_macvtap entered promiscuous mode [ 45.263569][ T1738] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.266562][ T1738] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.269275][ T1738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.280605][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.284442][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.287910][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.296897][ T4035] device veth1_vlan entered promiscuous mode [ 45.316069][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.318892][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.322091][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.325426][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.328326][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.331048][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.336054][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.344070][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.346293][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.361615][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.374029][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.376795][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.379662][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.385175][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.388060][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.396014][ T4034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.399818][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.402105][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.405544][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.416637][ T4025] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.419307][ T4025] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.421725][ T4025] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.430454][ T4025] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.440258][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.449695][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.453244][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.456311][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.459310][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.476052][ T4026] device veth0_vlan entered promiscuous mode [ 45.488050][ T4026] device veth1_vlan entered promiscuous mode [ 45.523552][ T4035] device veth0_macvtap entered promiscuous mode [ 45.530926][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.534504][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.537296][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.541145][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.547029][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.566716][ T4035] device veth1_macvtap entered promiscuous mode [ 45.615670][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.632651][ T4026] device veth0_macvtap entered promiscuous mode [ 45.639316][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.645553][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.653527][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.658111][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.661135][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.669226][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.679911][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.684151][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.690368][ T4026] device veth1_macvtap entered promiscuous mode [ 45.720779][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.724119][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.726352][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.728544][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.731546][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.748329][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.748520][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.751373][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.760528][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.763121][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.773588][ T4031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.779008][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.783256][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.786470][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.799511][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.803064][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.805804][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.808584][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.812824][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.831106][ T1738] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.834833][ T1738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.839417][ T4035] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.841877][ T4035] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.848150][ T4035] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.850541][ T4035] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.855644][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.858541][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.861188][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.864988][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.868976][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.876242][ T4026] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.878654][ T4026] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.881051][ T4026] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.884587][ T4026] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.893505][ T1738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.893918][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.895857][ T1738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.898725][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.906531][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.920762][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.924110][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.951758][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.955242][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.976504][ T4034] device veth0_vlan entered promiscuous mode [ 45.999861][ T4034] device veth1_vlan entered promiscuous mode [ 46.057625][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.060478][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.065494][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.068734][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.169325][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.171631][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.179734][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.204729][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.207652][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.210628][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.215784][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.220355][ T4031] device veth0_vlan entered promiscuous mode [ 46.239782][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.244229][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.265702][ T4106] tipc: Started in network mode [ 46.267346][ T4106] tipc: Node identity 7f000001, cluster identity 4711 [ 46.271372][ T4106] tipc: Enabled bearer , priority 10 [ 46.279311][ T4034] device veth0_macvtap entered promiscuous mode [ 46.290142][ T4031] device veth1_vlan entered promiscuous mode [ 46.297766][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.299926][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.303830][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.306464][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.309250][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.329571][ T4034] device veth1_macvtap entered promiscuous mode [ 46.332130][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.335818][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.345408][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.348150][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.351413][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.361156][ T4106] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 46.365412][ T4106] tipc: Enabled bearer , priority 10 [ 46.423717][ T437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.426023][ T437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.429287][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.446479][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.449231][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.451796][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.482769][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.485656][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.488579][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.500138][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.506314][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.509440][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.563955][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.567080][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.569773][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.592394][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.595095][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.598065][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.608594][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.630110][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.635183][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.638179][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.641082][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.664757][ T4031] device veth0_macvtap entered promiscuous mode [ 46.688716][ T4034] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.691259][ T4034] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.713468][ T4034] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.715941][ T4034] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.746676][ T26] audit: type=1326 audit(46.690:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4113 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1e28a8 code=0x7ffc0000 [ 46.761890][ T26] audit: type=1326 audit(46.700:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4113 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1e28a8 code=0x7ffc0000 [ 46.786640][ T4031] device veth1_macvtap entered promiscuous mode [ 46.801563][ T4114] loop3: detected capacity change from 0 to 1024 [ 46.802534][ T26] audit: type=1326 audit(46.700:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4113 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8f1e28a8 code=0x7ffc0000 [ 46.811385][ T26] audit: type=1326 audit(46.700:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4113 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1e28a8 code=0x7ffc0000 [ 46.829489][ T4114] ======================================================= [ 46.829489][ T4114] WARNING: The mand mount option has been deprecated and [ 46.829489][ T4114] and is ignored by this kernel. Remove the mand [ 46.829489][ T4114] option from the mount to silence this warning. [ 46.829489][ T4114] ======================================================= [ 46.867406][ T26] audit: type=1326 audit(46.700:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4113 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1e28a8 code=0x7ffc0000 [ 46.878070][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.881125][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.892715][ T26] audit: type=1326 audit(46.700:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4113 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8f1e28a8 code=0x7ffc0000 [ 46.908339][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.912100][ T26] audit: type=1326 audit(46.700:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4113 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1e28a8 code=0x7ffc0000 [ 46.926788][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.927446][ T4114] EXT4-fs (loop3): inline encryption not supported [ 46.929865][ T26] audit: type=1326 audit(46.700:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4113 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1e28a8 code=0x7ffc0000 [ 46.931364][ T4114] EXT4-fs (loop3): Ignoring removed bh option [ 46.955076][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.958090][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.961018][ T26] audit: type=1326 audit(46.700:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4113 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8f1e28a8 code=0x7ffc0000 [ 46.971160][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.979747][ T26] audit: type=1326 audit(46.700:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4113 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1e28a8 code=0x7ffc0000 [ 46.986006][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.022794][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.144888][ T4114] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 47.165205][ T1738] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.169946][ T1738] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.173315][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 47.175054][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 48.085276][ T4125] loop1: detected capacity change from 0 to 8192 [ 48.266849][ T1738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.680971][ T4124] Can't find ip_set type hash:net,por [ 48.942323][ C0] sched: RT throttling activated [ 48.944882][ T3607] Bluetooth: hci4: command 0x040f tx timeout [ 48.948054][ T3607] Bluetooth: hci2: command 0x040f tx timeout [ 48.949877][ T3607] Bluetooth: hci3: command 0x040f tx timeout [ 48.951866][ T3607] tipc: Node number set to 2130706433 [ 48.963988][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.966929][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.981478][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.985311][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.988062][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.991038][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.993933][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.996822][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.694451][ T4133] loop2: detected capacity change from 0 to 128 [ 49.738867][ T4070] Bluetooth: hci0: command 0x0419 tx timeout [ 49.741553][ T4070] Bluetooth: hci1: command 0x0419 tx timeout [ 49.953351][ T4133] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,acl,,errors=continue. Quota mode: writeback. [ 49.968082][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.241637][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.244815][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.253022][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.255308][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.258417][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.012552][ T4070] Bluetooth: hci3: command 0x0419 tx timeout [ 51.014372][ T4070] Bluetooth: hci2: command 0x0419 tx timeout [ 51.016118][ T4070] Bluetooth: hci4: command 0x0419 tx timeout [ 51.051814][ T4146] loop3: detected capacity change from 0 to 1024 [ 51.418736][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.420575][ T4031] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.422381][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.423671][ T4031] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.427889][ T4031] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.430242][ T4031] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.456839][ T1738] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.508206][ T4146] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 51.574909][ T4146] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3876: comm syz.3.12: Allocating blocks 481-513 which overlap fs metadata [ 52.325036][ T1738] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.327465][ T1738] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.331001][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.441741][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.472852][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.531307][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.625208][ T4180] devtmpfs: Too few inodes for current use [ 52.635600][ T4175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21'. [ 52.663466][ T4175] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.666140][ T4175] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.668595][ T4175] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.671072][ T4175] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.772659][ T4182] loop4: detected capacity change from 0 to 128 [ 52.951827][ T4182] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,acl,,errors=continue. Quota mode: writeback. [ 54.003223][ T4175] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 54.003269][ T4175] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 54.003291][ T4175] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 54.003313][ T4175] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 54.096733][ T4183] netlink: 'syz.1.20': attribute type 11 has an invalid length. [ 54.099152][ T4183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20'. [ 55.486646][ T4200] loop4: detected capacity change from 0 to 512 [ 55.623408][ T4200] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 55.817797][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 55.817810][ T26] audit: type=1326 audit(55.760:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4222 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1e28a8 code=0x7ffc0000 [ 55.843068][ T26] audit: type=1326 audit(55.780:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4222 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8f1e28a8 code=0x7ffc0000 [ 55.871771][ T4223] capability: warning: `syz.3.31' uses deprecated v2 capabilities in a way that may be insecure [ 55.944285][ T26] audit: type=1326 audit(55.800:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4222 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1e28a8 code=0x7ffc0000 [ 56.163866][ T4232] process 'syz.2.34' launched '/dev/fd/3' with NULL argv: empty string added [ 57.055403][ T4241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'. [ 57.756350][ T4223] loop8: detected capacity change from 0 to 16384 [ 57.808031][ T26] audit: type=1326 audit(55.800:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4222 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1e28a8 code=0x7ffc0000 [ 57.814583][ T26] audit: type=1326 audit(55.800:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4222 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8f1e28a8 code=0x7ffc0000 [ 57.824715][ T26] audit: type=1326 audit(55.800:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4222 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1e28a8 code=0x7ffc0000 [ 57.842458][ T26] audit: type=1326 audit(55.810:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4222 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1e28a8 code=0x7ffc0000 [ 57.848677][ T26] audit: type=1326 audit(55.810:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4222 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8f1e28a8 code=0x7ffc0000 [ 57.861481][ T26] audit: type=1326 audit(55.810:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4222 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1e28a8 code=0x7ffc0000 [ 57.937141][ T7] cfg80211: failed to load regulatory.db [ 57.947363][ T4248] futex_wake_op: syz.2.36 tries to shift op by -1; fix this program [ 57.954954][ T26] audit: type=1326 audit(55.810:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4222 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1e28a8 code=0x7ffc0000 [ 58.934347][ T4264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 59.140317][ T4279] netlink: 24 bytes leftover after parsing attributes in process `syz.0.44'. [ 59.484774][ T4291] loop0: detected capacity change from 0 to 8192 [ 59.523731][ T4284] loop1: detected capacity change from 0 to 8192 [ 59.534485][ T4296] syz.2.50 uses obsolete (PF_INET,SOCK_PACKET) [ 59.537037][ T4296] device syzkaller1 entered promiscuous mode [ 59.673380][ T4300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'. [ 59.919367][ T4306] loop0: detected capacity change from 0 to 4096 [ 60.072394][ T4306] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 60.250940][ T4329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 60.390044][ T4335] xt_CT: You must specify a L4 protocol and not use inversions on it [ 60.554244][ T4342] hub 8-0:1.0: USB hub found [ 60.556431][ T4342] hub 8-0:1.0: 8 ports detected [ 60.712918][ T4329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 62.281317][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 62.281331][ T26] audit: type=1326 audit(62.190:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.0.80" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf3cb8a8 code=0x0 [ 62.344107][ T4385] loop2: detected capacity change from 0 to 512 [ 62.500133][ T4389] netlink: 'syz.1.83': attribute type 2 has an invalid length. [ 62.508503][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.515764][ T7] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 62.541022][ T4385] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.81: inode #1: comm syz.2.81: iget: illegal inode # [ 62.550391][ T4385] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.81: error while reading EA inode 1 err=-117 [ 62.558126][ T4389] netlink: 'syz.1.83': attribute type 1 has an invalid length. [ 62.560653][ T4389] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.83'. [ 62.581122][ T4392] hub 8-0:1.0: USB hub found [ 62.582848][ T4392] hub 8-0:1.0: 8 ports detected [ 62.648580][ T4385] EXT4-fs (loop2): 1 orphan inode deleted [ 62.653114][ T4385] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 62.913582][ T4398] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 63.049850][ T4380] loop0: detected capacity change from 0 to 32768 [ 63.220826][ T4325] loop0: p1 p2 p3 < > [ 63.232668][ T4325] loop0: p1 size 242222080 extends beyond EOD, truncated [ 63.272852][ T4325] loop0: p2 start 4294967295 is beyond EOD, truncated [ 63.286012][ T4380] loop0: p1 p2 p3 < > [ 63.287638][ T4380] loop0: p1 size 242222080 extends beyond EOD, truncated [ 63.304800][ T4380] loop0: p2 start 4294967295 is beyond EOD, truncated [ 63.407056][ T4415] loop4: detected capacity change from 0 to 1024 [ 63.603513][ T4415] EXT4-fs (loop4): Ignoring removed orlov option [ 63.605286][ T4415] EXT4-fs (loop4): blocks per group (0) and clusters per group (32) inconsistent [ 63.954982][ T4424] hub 8-0:1.0: USB hub found [ 63.960279][ T4424] hub 8-0:1.0: 8 ports detected [ 64.514839][ T26] audit: type=1326 audit(64.460:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4426 comm="syz.3.100" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1e28a8 code=0x7ffc0000 [ 64.520995][ T26] audit: type=1326 audit(64.460:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4426 comm="syz.3.100" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1e28a8 code=0x7ffc0000 [ 64.601675][ T26] audit: type=1326 audit(64.470:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4426 comm="syz.3.100" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8f1e28a8 code=0x7ffc0000 [ 64.647736][ T26] audit: type=1326 audit(64.470:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4426 comm="syz.3.100" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1e28a8 code=0x7ffc0000 [ 64.701686][ T26] audit: type=1326 audit(64.470:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4426 comm="syz.3.100" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1e28a8 code=0x7ffc0000 [ 64.724606][ T26] audit: type=1326 audit(64.470:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4426 comm="syz.3.100" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8f1e28a8 code=0x7ffc0000 [ 64.730629][ T26] audit: type=1326 audit(64.470:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4426 comm="syz.3.100" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1e28a8 code=0x7ffc0000 [ 64.745196][ T26] audit: type=1326 audit(64.470:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4426 comm="syz.3.100" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1e28a8 code=0x7ffc0000 [ 64.761266][ T26] audit: type=1326 audit(64.470:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4426 comm="syz.3.100" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8f1e28a8 code=0x7ffc0000 [ 64.959140][ T4443] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 64.962157][ T4443] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 65.525450][ T4450] loop1: detected capacity change from 0 to 1024 [ 65.726142][ T4442] fido_id[4442]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 65.816696][ T4450] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 65.834293][ T4450] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #15: block 1: comm +}[@: lblock 1 mapped to illegal pblock 1 (length 4) [ 65.884682][ T4450] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 4 with error 117 [ 65.942105][ T4471] loop2: detected capacity change from 0 to 1024 [ 65.947172][ T4450] EXT4-fs (loop1): This should not happen!! Data will be lost [ 65.947172][ T4450] [ 65.959299][ T4466] loop4: detected capacity change from 0 to 1024 [ 65.992579][ T4450] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 66.004414][ T4466] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 66.007770][ T4471] EXT4-fs (loop2): Ignoring removed orlov option [ 66.009716][ T4471] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 66.032007][ T4466] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,mblk_io_submit,minixdf,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 66.051898][ T4471] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 66.321497][ T4472] loop3: detected capacity change from 0 to 8192 [ 67.040905][ T4507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.127'. [ 67.071285][ T4507] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 67.094789][ T4507] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 67.833864][ T4250] udevd[4250]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 67.855491][ T4017] udevd[4017]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 67.861775][ T4519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.133'. [ 67.878861][ T4519] syz.2.133 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 67.999356][ T4524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.135'. [ 68.018649][ T4525] loop1: detected capacity change from 0 to 512 [ 68.114451][ T4525] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 68.590698][ T4532] loop3: detected capacity change from 0 to 1024 [ 69.034396][ T4532] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.098140][ T4017] udevd[4017]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 69.117505][ T4325] udevd[4325]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 69.656410][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.658458][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.845685][ T4554] loop4: detected capacity change from 0 to 2048 [ 69.922608][ T4554] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.399493][ T4574] loop4: detected capacity change from 0 to 1024 [ 70.456463][ T4574] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 70.489806][ T4574] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,mblk_io_submit,minixdf,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 70.935737][ T26] kauditd_printk_skb: 80 callbacks suppressed [ 70.935751][ T26] audit: type=1326 audit(70.880:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4596 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a1878a8 code=0x7ffc0000 [ 70.982781][ T26] audit: type=1326 audit(70.880:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4596 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffff8a1878a8 code=0x7ffc0000 [ 71.004660][ T26] audit: type=1326 audit(70.890:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4596 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a1878a8 code=0x7ffc0000 [ 71.022645][ T26] audit: type=1326 audit(70.890:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4598 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff8a1b1fc8 code=0x7ffc0000 [ 71.042555][ T26] audit: type=1326 audit(70.900:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4596 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8a1878a8 code=0x7ffc0000 [ 71.048416][ T26] audit: type=1326 audit(70.900:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4596 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a1878a8 code=0x7ffc0000 [ 71.085092][ T26] audit: type=1326 audit(70.900:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4596 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8a1878a8 code=0x7ffc0000 [ 71.123189][ T26] audit: type=1326 audit(70.900:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4596 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a1878a8 code=0x7ffc0000 [ 71.149817][ T26] audit: type=1326 audit(70.900:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4596 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8a1878a8 code=0x7ffc0000 [ 71.169367][ T26] audit: type=1326 audit(70.900:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4596 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a1878a8 code=0x7ffc0000 [ 73.104250][ T4620] loop1: detected capacity change from 0 to 2048 [ 73.185020][ T4612] device syzkaller0 entered promiscuous mode [ 73.200505][ T4620] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.840265][ T4642] xt_hashlimit: size too large, truncated to 1048576 [ 73.969714][ T4649] loop4: detected capacity change from 0 to 1024 [ 73.999456][ T4653] netlink: 'syz.3.182': attribute type 21 has an invalid length. [ 74.014164][ T4653] netlink: 'syz.3.182': attribute type 1 has an invalid length. [ 74.015033][ T4649] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 74.023187][ T4653] netlink: 144 bytes leftover after parsing attributes in process `syz.3.182'. [ 74.046746][ T4649] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,mblk_io_submit,minixdf,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 74.598981][ T4664] hub 8-0:1.0: USB hub found [ 74.613335][ T4664] hub 8-0:1.0: 8 ports detected [ 75.654125][ T4676] loop1: detected capacity change from 0 to 1756 [ 75.823420][ T4680] netlink: 36 bytes leftover after parsing attributes in process `syz.0.189'. [ 76.297418][ T4696] loop0: detected capacity change from 0 to 512 [ 76.454040][ T4696] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.779690][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 76.779705][ T26] audit: type=1107 audit(76.720:259): pid=4708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 77.867489][ T4738] loop4: detected capacity change from 0 to 128 [ 78.115212][ T4744] attempt to access beyond end of device [ 78.115212][ T4744] loop4: rw=2049, want=953, limit=128 [ 78.229626][ T4747] loop1: detected capacity change from 0 to 1024 [ 78.540618][ T4747] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.812708][ T26] audit: type=1326 audit(78.760:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4757 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98fc68a8 code=0x7ffc0000 [ 78.844701][ T26] audit: type=1326 audit(78.790:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4757 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff98fc68a8 code=0x7ffc0000 [ 78.858229][ T26] audit: type=1326 audit(78.790:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4757 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98fc68a8 code=0x7ffc0000 [ 78.882493][ T26] audit: type=1326 audit(78.790:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4757 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff98fc68a8 code=0x7ffc0000 [ 78.901782][ T26] audit: type=1326 audit(78.790:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4757 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98fc68a8 code=0x7ffc0000 [ 78.927845][ T26] audit: type=1326 audit(78.790:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4757 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff98fc68a8 code=0x7ffc0000 [ 78.942841][ T26] audit: type=1326 audit(78.790:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4757 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98fc68a8 code=0x7ffc0000 [ 78.961174][ T26] audit: type=1326 audit(78.790:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4757 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=428 compat=0 ip=0xffff98fc68a8 code=0x7ffc0000 [ 78.977146][ T26] audit: type=1326 audit(78.800:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4757 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98fc68a8 code=0x7ffc0000 [ 79.032148][ T4767] loop1: detected capacity change from 0 to 1024 [ 79.122810][ T4767] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 79.186401][ T4767] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,mblk_io_submit,minixdf,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 80.016173][ T4778] loop0: detected capacity change from 0 to 2048 [ 80.104917][ T4778] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 80.125178][ T4778] EXT4-fs (loop0): shut down requested (0) [ 80.328632][ T4786] loop4: detected capacity change from 0 to 512 [ 80.441382][ T4786] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 80.449659][ T4788] netlink: 'syz.3.218': attribute type 3 has an invalid length. [ 80.823105][ T4801] bridge: RTM_NEWNEIGH with invalid ether address [ 81.167293][ T4818] loop3: detected capacity change from 0 to 256 [ 81.278862][ T4818] FAT-fs (loop3): Directory bread(block 64) failed [ 81.281029][ T4818] FAT-fs (loop3): Directory bread(block 65) failed [ 81.302600][ T4818] FAT-fs (loop3): Directory bread(block 66) failed [ 81.312657][ T4818] FAT-fs (loop3): Directory bread(block 67) failed [ 81.325208][ T4818] FAT-fs (loop3): Directory bread(block 68) failed [ 81.327151][ T4818] FAT-fs (loop3): Directory bread(block 69) failed [ 81.329182][ T4818] FAT-fs (loop3): Directory bread(block 70) failed [ 81.331001][ T4818] FAT-fs (loop3): Directory bread(block 71) failed [ 81.355824][ T4818] FAT-fs (loop3): Directory bread(block 72) failed [ 81.357725][ T4818] FAT-fs (loop3): Directory bread(block 73) failed [ 81.634564][ T4828] loop0: detected capacity change from 0 to 512 [ 81.689653][ T4828] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 81.692275][ T4828] EXT4-fs (loop0): failed to open journal device unknown-block(8,3) -6 [ 83.445393][ T4861] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 83.501559][ T4867] loop0: detected capacity change from 0 to 128 [ 83.506174][ T4864] loop4: detected capacity change from 0 to 2048 [ 83.564981][ T4864] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 83.846526][ T4882] loop1: detected capacity change from 0 to 512 [ 83.934928][ T4882] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.256: casefold flag without casefold feature [ 83.943513][ T4874] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 83.947108][ T4882] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.256: couldn't read orphan inode 15 (err -117) [ 83.965892][ T4882] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.973038][ T4874] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 294 with error 28 [ 83.976443][ T4874] EXT4-fs (loop4): This should not happen!! Data will be lost [ 83.976443][ T4874] [ 83.979069][ T4874] EXT4-fs (loop4): Total free blocks count 0 [ 83.980799][ T4874] EXT4-fs (loop4): Free/Dirty block details [ 83.984639][ T4874] EXT4-fs (loop4): free_blocks=2415919104 [ 83.986311][ T4874] EXT4-fs (loop4): dirty_blocks=304 [ 83.987745][ T4874] EXT4-fs (loop4): Block reservation details [ 83.989390][ T4874] EXT4-fs (loop4): i_reserved_data_blocks=19 [ 84.120950][ T4888] netlink: 'syz.3.257': attribute type 1 has an invalid length. [ 84.135395][ T4888] netlink: 224 bytes leftover after parsing attributes in process `syz.3.257'. [ 84.450562][ T4853] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 84.470440][ T4853] EXT4-fs (loop4): This should not happen!! Data will be lost [ 84.470440][ T4853] [ 86.012215][ T4909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.262'. [ 86.210496][ T4911] loop6: detected capacity change from 0 to 7 [ 86.250507][ T4911] Dev loop6: unable to read RDB block 7 [ 86.252231][ T4911] loop6: AHDI p3 p4 [ 86.260435][ T4911] loop6: partition table partially beyond EOD, truncated [ 86.270948][ T4911] loop6: p3 start 1886353253 is beyond EOD, truncated [ 87.203552][ T4931] loop1: detected capacity change from 0 to 1024 [ 87.817932][ T4933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.271'. [ 87.916412][ T4931] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.240738][ T3607] Bluetooth: hci5: command 0x0409 tx timeout [ 95.055547][ T5025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.291'. [ 95.058364][ T5025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.941144][ T5039] ODEBUG: Out of memory. ODEBUG disabled [ 96.130943][ T5025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.299796][ T4984] chnl_net:caif_netlink_parms(): no params data found [ 96.302817][ T13] Bluetooth: hci5: command 0x041b tx timeout [ 96.444026][ T5047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.294'. [ 96.712537][ T5048] netlink: 'syz.4.292': attribute type 39 has an invalid length. [ 96.908410][ T4984] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.910587][ T4984] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.935068][ T4984] device bridge_slave_0 entered promiscuous mode [ 96.982482][ T4984] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.988197][ T4027] Bluetooth: unknown link type 9 [ 96.992174][ T4984] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.007206][ T4984] device bridge_slave_1 entered promiscuous mode [ 97.193647][ T4984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.243171][ T4984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.343788][ T4984] team0: Port device team_slave_0 added [ 97.347373][ T4984] team0: Port device team_slave_1 added [ 97.428170][ T4984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.430067][ T4984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.482463][ T4984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.487663][ T4984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.499896][ T4984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.522427][ T4984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.634286][ T4984] device hsr_slave_0 entered promiscuous mode [ 97.672752][ T4984] device hsr_slave_1 entered promiscuous mode [ 97.712421][ T4984] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.714637][ T4984] Cannot create hsr debugfs directory [ 97.829527][ T5058] device syzkaller0 entered promiscuous mode [ 97.996010][ T5071] loop0: detected capacity change from 0 to 512 [ 98.372566][ T3607] Bluetooth: hci5: command 0x040f tx timeout [ 98.649211][ T5071] EXT4-fs (loop0): orphan cleanup on readonly fs [ 98.693573][ T5071] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.301: bg 0: block 248: padding at end of block bitmap is not set [ 98.703990][ T5071] __quota_error: 79 callbacks suppressed [ 98.704068][ T5071] Quota error (device loop0): write_blk: dquota write failed [ 98.708314][ T5071] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 98.711418][ T5071] EXT4-fs error (device loop0): ext4_acquire_dquot:6204: comm syz.0.301: Failed to acquire dquot type 1 [ 98.746450][ T5071] EXT4-fs (loop0): 1 truncate cleaned up [ 98.752088][ T5071] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 99.278876][ T4984] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 99.461689][ T5075] loop3: detected capacity change from 0 to 512 [ 99.465450][ T4984] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 99.507000][ T4984] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 99.634490][ T4984] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 99.644145][ T5075] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 100.084757][ T4984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.145517][ T4984] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.174247][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.177017][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.183384][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.186447][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.188994][ T437] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.190868][ T437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.227384][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.267952][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.273717][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.283090][ T437] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.285144][ T437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.287562][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.399694][ T5080] netlink: 20 bytes leftover after parsing attributes in process `syz.3.303'. [ 100.482075][ T4134] Bluetooth: hci5: command 0x0419 tx timeout [ 100.548389][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.551569][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.564395][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.573102][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.581584][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.624888][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.723603][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.726412][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.809682][ T4984] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.817118][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.655852][ T227] block nbd1: Attempted send on invalid socket [ 101.671266][ T227] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.674891][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.676002][ T5088] hpfs: hpfs_map_sector(): read error [ 101.704523][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.448798][ T5085] netlink: 27 bytes leftover after parsing attributes in process `syz.3.306'. [ 102.517711][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.524085][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.535746][ T4984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.634299][ T5102] netlink: 'syz.3.308': attribute type 10 has an invalid length. [ 102.685042][ T5102] batman_adv: batadv0: Adding interface: team0 [ 102.694303][ T5102] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.711097][ T5102] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 102.919217][ T5110] netlink: 28 bytes leftover after parsing attributes in process `syz.3.310'. [ 102.983803][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.986995][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.051244][ T4984] device veth0_vlan entered promiscuous mode [ 103.076449][ T4984] device veth1_vlan entered promiscuous mode [ 103.104480][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.109914][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.117232][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 103.130651][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 103.158252][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.167830][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.189937][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.196553][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.202090][ T4984] device veth0_macvtap entered promiscuous mode [ 103.220457][ T4984] device veth1_macvtap entered promiscuous mode [ 104.044882][ T4984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.048250][ T4984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.056507][ T5120] loop1: detected capacity change from 0 to 512 [ 104.080015][ T4984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.083543][ T4984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.086294][ T4984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.089254][ T4984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.107769][ T4984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.110735][ T4984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.122514][ T4984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.133030][ T4984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.137632][ T4984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.142795][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.146603][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.307684][ T5124] loop4: detected capacity change from 0 to 512 [ 104.616922][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.246353][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.280073][ T4984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.287060][ T4984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.290882][ T4984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.470780][ T4984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.594478][ T4984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.818345][ T4984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.954249][ T4984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.076423][ T4984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.266103][ T4984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.274098][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.709691][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.089161][ T4984] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.108596][ T4984] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.123586][ T4984] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.143393][ T4984] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.237078][ T5120] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 107.265718][ T5124] EXT4-fs: failed to create workqueue [ 107.267249][ T5124] EXT4-fs (loop4): mount failed [ 107.476161][ T5133] ipt_CLUSTERIP: Please specify destination IP [ 107.567337][ T4185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.569903][ T4185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.607931][ T1738] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 107.617500][ T4667] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.619766][ T4667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.673874][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 109.905236][ T5162] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 110.217354][ T5168] loop4: detected capacity change from 0 to 512 [ 110.972818][ T5169] device veth0_to_team entered promiscuous mode [ 111.079182][ T5168] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 112.373564][ T5187] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 1, id = 0 [ 113.604302][ T5201] udc-core: couldn't find an available UDC or it's busy [ 113.632391][ T5201] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 114.015016][ T5206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.337'. [ 114.042373][ T5206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.337'. [ 114.770913][ T5184] device syzkaller0 entered promiscuous mode [ 118.029276][ T5230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.343'. [ 118.032453][ T5230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.343'. [ 118.035413][ T5230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.343'. [ 118.038169][ T5230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.343'. [ 118.040930][ T5230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.343'. [ 118.043921][ T5230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.343'. [ 118.046615][ T5230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.343'. [ 118.049428][ T5230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.343'. [ 121.531125][ T5259] loop5: detected capacity change from 0 to 512 [ 122.864528][ T13] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 122.873282][ T13] Bluetooth: hci5: Injecting HCI hardware error event [ 122.998583][ T4033] Bluetooth: hci5: hardware error 0x00 [ 123.566981][ T5259] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 126.372431][ T4069] Bluetooth: hci6: command 0x0409 tx timeout [ 126.428885][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 126.434898][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.437123][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.440588][ T5310] device bridge_slave_0 left promiscuous mode [ 126.443943][ T5310] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.491078][ T5324] loop5: detected capacity change from 0 to 512 [ 126.497693][ T5310] device bridge_slave_1 left promiscuous mode [ 126.499483][ T5310] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.553112][ T5310] bond0: (slave bond_slave_0): Releasing backup interface [ 126.617808][ T5324] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 126.636700][ T5310] bond0: (slave bond_slave_1): Releasing backup interface [ 126.738593][ T5310] team0: Port device team_slave_0 removed [ 126.789241][ T5310] team0: Port device team_slave_1 removed [ 126.791500][ T5310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.819317][ T5310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.836490][ T5310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.838671][ T5310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.875285][ T5313] netlink: 'syz.1.367': attribute type 10 has an invalid length. [ 126.911227][ T5313] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 127.447451][ T5340] Device name cannot be null; rc = [-22] [ 127.472661][ T5340] 9pnet: Insufficient options for proto=fd [ 128.452420][ T4069] Bluetooth: hci6: command 0x041b tx timeout [ 128.670396][ T5284] chnl_net:caif_netlink_parms(): no params data found [ 129.044398][ T5284] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.052692][ T5284] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.055849][ T5284] device bridge_slave_0 entered promiscuous mode [ 129.151202][ T5284] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.153418][ T5284] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.157513][ T5284] device bridge_slave_1 entered promiscuous mode [ 129.288844][ T5284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.323655][ T5284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.484108][ T5284] team0: Port device team_slave_0 added [ 129.499112][ T5284] team0: Port device team_slave_1 added [ 129.585206][ T5284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.594622][ T5284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.658445][ T5284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.663648][ T5284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.665522][ T5284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.676162][ T5284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.894734][ T5284] device hsr_slave_0 entered promiscuous mode [ 129.953454][ T5284] device hsr_slave_1 entered promiscuous mode [ 130.142571][ T5284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.145728][ T5284] Cannot create hsr debugfs directory [ 130.776763][ T4071] Bluetooth: hci6: command 0x040f tx timeout [ 131.075444][ T5386] udc-core: couldn't find an available UDC or it's busy [ 131.099053][ T5390] ksmbd: Unknown IPC event: 6, ignore. [ 131.104182][ T5386] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 131.104484][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.108086][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.162737][ T5390] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 131.164895][ T5390] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 131.202763][ T5390] vhci_hcd vhci_hcd.0: Device attached [ 131.207477][ T5394] vhci_hcd: connection closed [ 131.210137][ T4776] vhci_hcd: stop threads [ 131.214400][ T4776] vhci_hcd: release socket [ 131.215771][ T4776] vhci_hcd: disconnect device [ 131.323561][ T5400] loop4: detected capacity change from 0 to 512 [ 131.421001][ T5400] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 131.428935][ T5284] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 131.514261][ T5284] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 131.564337][ T5284] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 131.595283][ T5284] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 132.032608][ T5284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.396347][ T4069] Bluetooth: hci6: command 0x0419 tx timeout [ 133.435234][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.437937][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.458421][ T5284] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.487178][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.490261][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.528100][ T4776] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.530106][ T4776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.580935][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.611955][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.631836][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.494253][ T4776] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.496292][ T4776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.498707][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 134.576440][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.579855][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.593747][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.607126][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.617327][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.674790][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 134.677794][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.680495][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.701436][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.733293][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.753841][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 136.932171][ T5463] __nla_validate_parse: 46 callbacks suppressed [ 136.932187][ T5463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.393'. [ 137.005200][ T5463] batman_adv: batadv0: Removing interface: team0 [ 137.224517][ T5471] loop4: detected capacity change from 0 to 512 [ 137.234378][ T5463] team0 (unregistering): Port device team_slave_0 removed [ 137.248392][ T5463] team0 (unregistering): Port device team_slave_1 removed [ 137.337281][ T5471] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 137.543902][ T5284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.601348][ T5481] binder: 5472:5481 tried to acquire reference to desc 0, got 1 instead [ 137.803754][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.813028][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.265060][ T4134] binder: undelivered transaction 5, process died. [ 138.283141][ T4038] binder: undelivered TRANSACTION_COMPLETE [ 139.437061][ T5503] netlink: 76 bytes leftover after parsing attributes in process `syz.4.399'. [ 139.496904][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.499913][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.771370][ T5284] device veth0_vlan entered promiscuous mode [ 140.794459][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.797583][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.800712][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.100267][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.317909][ T5284] device veth1_vlan entered promiscuous mode [ 142.523932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.527072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.539258][ T5284] device veth0_macvtap entered promiscuous mode [ 142.552196][ T5535] loop4: detected capacity change from 0 to 512 [ 143.084728][ T5284] device veth1_macvtap entered promiscuous mode [ 143.176812][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.179637][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.186470][ T5535] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 143.301571][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.327056][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.332708][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.335522][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.364983][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.367940][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.370731][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.419195][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.451588][ T5284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.470481][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 143.481219][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 143.503490][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.529460][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.542511][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.545605][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.548249][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.551065][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.631189][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.671438][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.519703][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.543417][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.603560][ T5284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.683481][ T5558] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 145.690180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 145.731462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.926849][ T5284] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.929376][ T5284] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.931860][ T5284] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.946373][ T5284] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.074155][ T5593] udc-core: couldn't find an available UDC or it's busy [ 146.076314][ T5593] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 146.896428][ T5600] loop5: detected capacity change from 0 to 512 [ 147.867011][ T5600] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 147.949434][ T437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.951932][ T437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.083187][ T5612] udc-core: couldn't find an available UDC or it's busy [ 148.085367][ T5612] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 148.086564][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.089846][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.104511][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 148.126499][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 149.358977][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.747163][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.751882][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.754076][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.096785][ T5644] hub 8-0:1.0: USB hub found [ 151.099361][ T5644] hub 8-0:1.0: 8 ports detected [ 154.401633][ T5662] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 154.771777][ T5676] udc-core: couldn't find an available UDC or it's busy [ 154.781401][ T5676] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 156.778795][ T5693] udc-core: couldn't find an available UDC or it's busy [ 156.816643][ T5693] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 157.628521][ T136] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.767283][ T136] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.927226][ T136] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.015588][ T136] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.899459][ T5730] input: syz0 as /devices/virtual/input/input2 [ 161.203874][ T5728] infiniband syz!: set down [ 161.205444][ T5728] infiniband syz!: added team_slave_0 [ 161.214255][ T5728] infiniband syz!: Couldn't open port 1 [ 161.234885][ T5728] RDS/IB: syz!: added [ 161.236409][ T5728] smc: adding ib device syz! with port count 1 [ 161.238346][ T5728] smc: ib device syz! port 1 has pnetid [ 162.507729][ T5774] vhci_hcd: invalid port number 96 [ 162.509330][ T5774] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 162.676675][ T5776] device wireguard0 entered promiscuous mode [ 163.553864][ T5782] netlink: 156 bytes leftover after parsing attributes in process `syz.3.466'. [ 163.556328][ T5782] netlink: 32 bytes leftover after parsing attributes in process `syz.3.466'. [ 163.624413][ T5791] netlink: 24 bytes leftover after parsing attributes in process `syz.5.468'. [ 163.902531][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 163.905792][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 163.916626][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 164.896080][ T5813] netlink: 8 bytes leftover after parsing attributes in process `syz.5.473'. [ 166.222720][ T5838] tipc: Started in network mode [ 166.240689][ T5838] tipc: Node identity 7f000001, cluster identity 4711 [ 166.263335][ T5838] tipc: Enabled bearer , priority 10 [ 167.314301][ T21] tipc: Node number set to 2130706433 [ 167.850403][ T5862] udc-core: couldn't find an available UDC or it's busy [ 167.852549][ T5858] hub 8-0:1.0: USB hub found [ 167.878882][ T5858] hub 8-0:1.0: 8 ports detected [ 167.882509][ T5862] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 168.077136][ T136] device hsr_slave_0 left promiscuous mode [ 168.122773][ T136] device hsr_slave_1 left promiscuous mode [ 168.233163][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.235394][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.238236][ T136] device bridge_slave_1 left promiscuous mode [ 168.241433][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.296505][ T136] device bridge_slave_0 left promiscuous mode [ 168.298360][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.482855][ T136] device veth1_macvtap left promiscuous mode [ 168.485100][ T136] device veth0_macvtap left promiscuous mode [ 168.486987][ T136] device veth1_vlan left promiscuous mode [ 168.488849][ T136] device veth0_vlan left promiscuous mode [ 170.823122][ T5891] udc-core: couldn't find an available UDC or it's busy [ 170.835677][ T5891] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 170.876987][ T5891] udc-core: couldn't find an available UDC or it's busy [ 170.879097][ T5891] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 171.197299][ T5895] ubi31: attaching mtd0 [ 171.210634][ T5895] ubi31: scanning is finished [ 171.212058][ T5895] ubi31: empty MTD device detected [ 171.570280][ T5895] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 171.572855][ T5895] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 171.575256][ T5895] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 171.577471][ T5895] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 171.579700][ T5895] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 171.582057][ T5895] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 171.584551][ T5895] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3325473503 [ 171.587617][ T5895] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 171.652294][ T5896] ubi31: background thread "ubi_bgt31d" started, PID 5896 [ 171.974148][ T136] team0 (unregistering): Port device team_slave_1 removed [ 171.993342][ T136] team0 (unregistering): Port device team_slave_0 removed [ 172.012808][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.066064][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.232014][ T136] bond0 (unregistering): Released all slaves [ 172.483934][ T5900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.488'. [ 173.969390][ T5921] loop4: detected capacity change from 0 to 512 [ 174.171653][ T5928] udc-core: couldn't find an available UDC or it's busy [ 174.182465][ T5928] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 174.811781][ T5921] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 176.205819][ T5952] virtio-fs: tag not found [ 176.811229][ T5954] netlink: 32 bytes leftover after parsing attributes in process `syz.3.501'. [ 177.889612][ T5970] udc-core: couldn't find an available UDC or it's busy [ 177.908987][ T5970] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 178.335861][ T5992] loop4: detected capacity change from 0 to 512 [ 179.243395][ T5992] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 179.270269][ T6009] udc-core: couldn't find an available UDC or it's busy [ 179.272129][ T6009] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 179.306391][ T6012] netlink: 32 bytes leftover after parsing attributes in process `syz.3.514'. [ 181.121389][ T6061] hub 8-0:1.0: USB hub found [ 181.165695][ T6061] hub 8-0:1.0: 8 ports detected [ 181.552764][ T6071] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 181.555687][ T6071] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 182.068002][ T4038] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 182.070324][ T4038] Bluetooth: hci4: Injecting HCI hardware error event [ 182.072791][ T4032] Bluetooth: hci4: hardware error 0x00 [ 182.202929][ T6075] netlink: 32 bytes leftover after parsing attributes in process `syz.1.528'. [ 183.383075][ T6090] loop5: detected capacity change from 0 to 1024 [ 183.605835][ T6090] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 184.369413][ T6105] udc-core: couldn't find an available UDC or it's busy [ 184.390706][ T6105] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 184.469137][ T6106] tipc: Started in network mode [ 184.506279][ T6106] tipc: Node identity 1e943901cf67, cluster identity 4711 [ 184.508410][ T6106] tipc: Enabled bearer , priority 0 [ 184.515044][ T6090] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,mblk_io_submit,minixdf,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 184.552730][ T6106] syzkaller0: MTU too low for tipc bearer [ 184.611376][ T6106] tipc: Disabling bearer [ 186.112150][ T7] libceph: connect (1)[c::]:6789 error -101 [ 186.114969][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 186.119180][ T7] libceph: connect (1)[c::]:6789 error -101 [ 186.120976][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 186.523252][ T7] libceph: connect (1)[c::]:6789 error -101 [ 186.581465][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 186.761867][ T6142] ceph: No mds server is up or the cluster is laggy [ 187.224911][ T7] libceph: connect (1)[c::]:6789 error -101 [ 187.226797][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 188.771226][ T6189] udc-core: couldn't find an available UDC or it's busy [ 188.796821][ T6189] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 188.799430][ T6186] 9pnet: Insufficient options for proto=fd [ 189.848389][ T6198] loop3: detected capacity change from 0 to 512 [ 190.998263][ T6219] hub 8-0:1.0: USB hub found [ 191.000698][ T6219] hub 8-0:1.0: 8 ports detected [ 191.276410][ T6198] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 192.547843][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.551902][ T6229] device veth0_to_team entered promiscuous mode [ 192.572553][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.334073][ T6244] udc-core: couldn't find an available UDC or it's busy [ 193.336212][ T6244] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 194.732160][ T6261] netlink: 20 bytes leftover after parsing attributes in process `syz.6.572'. [ 195.496967][ T6274] hub 8-0:1.0: USB hub found [ 195.499043][ T6274] hub 8-0:1.0: 8 ports detected [ 196.115812][ T6279] loop6: detected capacity change from 0 to 512 [ 196.208848][ T6279] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 196.313063][ T6289] udc-core: couldn't find an available UDC or it's busy [ 196.315057][ T6289] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 197.395225][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.571'. [ 197.397783][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.571'. [ 197.400363][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.571'. [ 197.568805][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.571'. [ 197.571338][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.571'. [ 197.574396][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.571'. [ 197.576925][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.571'. [ 197.579395][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.571'. [ 197.581918][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.571'. [ 198.452423][ C0] ------------[ cut here ]------------ [ 198.454333][ C0] refcount_t: addition on 0; use-after-free. [ 198.455907][ T136] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.456190][ C0] WARNING: CPU: 0 PID: 6312 at lib/refcount.c:25 refcount_warn_saturate+0x134/0x1f8 [ 198.461298][ C0] Modules linked in: [ 198.462404][ C0] CPU: 0 PID: 6312 Comm: syz.5.579 Not tainted 5.15.185-syzkaller #0 [ 198.464628][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 198.467501][ C0] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 198.469686][ C0] pc : refcount_warn_saturate+0x134/0x1f8 [ 198.471285][ C0] lr : refcount_warn_saturate+0x134/0x1f8 [ 198.472909][ C0] sp : ffff800008007800 [ 198.474049][ C0] x29: ffff800008007800 x28: ffff0000e7fd6400 x27: ffff0000da66e200 [ 198.476296][ C0] x26: 1fffe00018fc56d1 x25: dfff800000000000 x24: 1fffe0001b4cdc41 [ 198.478519][ C0] x23: ffff0000e9c4e400 x22: ffff0000c1930154 x21: ffff0000d0269080 [ 198.481002][ C0] x20: ffff0000c1930154 x19: ffff80001659e000 x18: 0000000000000102 [ 198.483270][ C0] x17: 0000000000000000 x16: ffff8000111a97c4 x15: 00000000ffffffff [ 198.485527][ C0] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 198.487779][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : 49db67ce81f3e000 [ 198.490020][ C0] x8 : 49db67ce81f3e000 x7 : 0000000000000001 x6 : 0000000000000001 [ 198.492303][ C0] x5 : ffff8000080070f8 x4 : ffff80001423f280 x3 : ffff800008503958 [ 198.494567][ C0] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 000000000000002a [ 198.496885][ C0] Call trace: [ 198.497789][ C0] refcount_warn_saturate+0x134/0x1f8 [ 198.499364][ C0] tipc_crypto_xmit+0x1634/0x2220 [ 198.500836][ C0] tipc_bearer_xmit_skb+0x1f0/0x384 [ 198.502329][ C0] tipc_disc_timeout+0x4c8/0x608 [ 198.503683][ C0] call_timer_fn+0x19c/0x858 [ 198.505002][ C0] __run_timers+0x46c/0x6c4 [ 198.506294][ C0] run_timer_softirq+0x7c/0x114 [ 198.507658][ C0] handle_softirqs+0x344/0xbf0 [ 198.508937][ C0] __irq_exit_rcu+0x240/0x440 [ 198.510252][ C0] irq_exit+0x14/0x88 [ 198.511371][ C0] handle_domain_irq+0x14c/0x1fc [ 198.512721][ C0] gic_handle_irq+0x78/0x1c8 [ 198.513938][ C0] call_on_irq_stack+0x24/0x4c [ 198.515327][ C0] do_interrupt_handler+0x6c/0x88 [ 198.516773][ C0] el1_interrupt+0x30/0x58 [ 198.518031][ C0] el1h_64_irq_handler+0x18/0x24 [ 198.519438][ C0] el1h_64_irq+0x78/0x7c [ 198.520668][ C0] __sanitizer_cov_trace_pc+0x18/0xac [ 198.522216][ C0] check_preemption_disabled+0x38/0x164 [ 198.523807][ C0] debug_smp_processor_id+0x20/0x2c [ 198.524091][ T6319] loop6: detected capacity change from 0 to 1024 [ 198.525321][ C0] rcu_lockdep_current_cpu_online+0x7c/0x1e0 [ 198.528612][ C0] rcu_read_lock_held+0x20/0x50 [ 198.529979][ C0] xas_reload+0x18c/0x448 [ 198.531222][ C0] find_get_entry+0x1bc/0x254 [ 198.532535][ C0] find_lock_entries+0x4ec/0x828 [ 198.533901][ C0] shmem_undo_range+0x1dc/0x1234 [ 198.535304][ C0] shmem_evict_inode+0x1c0/0x838 [ 198.536712][ C0] evict+0x3c8/0x810 [ 198.537823][ C0] iput+0x6c4/0x77c [ 198.538886][ C0] dentry_unlink_inode+0x360/0x438 [ 198.540323][ C0] __dentry_kill+0x320/0x598 [ 198.541672][ C0] dentry_kill+0xc8/0x248 [ 198.542873][ C0] dput+0x23c/0x458 [ 198.543886][ C0] __fput+0x494/0x7f8 [ 198.545064][ C0] ____fput+0x20/0x30 [ 198.546230][ C0] task_work_run+0x12c/0x1e0 [ 198.547525][ C0] do_exit+0x67c/0x1f58 [ 198.548677][ C0] do_group_exit+0x100/0x268 [ 198.550016][ C0] get_signal+0x73c/0x1340 [ 198.551254][ C0] do_notify_resume+0x35c/0x3128 [ 198.552571][ C0] el0_svc+0xf0/0x1e0 [ 198.553716][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 198.555122][ C0] el0t_64_sync+0x1a0/0x1a4 [ 198.556424][ C0] irq event stamp: 169467 [ 198.557564][ C0] hardirqs last enabled at (169466): [] __up_console_sem+0xb4/0x100 [ 198.560250][ C0] hardirqs last disabled at (169467): [] el1_dbg+0x24/0x80 [ 198.562771][ C0] softirqs last enabled at (166962): [] handle_softirqs+0xa4c/0xbf0 [ 198.565503][ C0] softirqs last disabled at (169423): [] __irq_exit_rcu+0x240/0x440 [ 198.568232][ C0] ---[ end trace 590f5ac4643b8129 ]--- [ 198.569838][ C0] ------------[ cut here ]------------ [ 198.571273][ C0] refcount_t: underflow; use-after-free. [ 198.572092][ T6319] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 198.573152][ C0] WARNING: CPU: 0 PID: 6312 at lib/refcount.c:28 refcount_warn_saturate+0x154/0x1f8 [ 198.577504][ C0] Modules linked in: [ 198.578542][ C0] CPU: 0 PID: 6312 Comm: syz.5.579 Tainted: G W 5.15.185-syzkaller #0 [ 198.581141][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 198.583822][ C0] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 198.586150][ C0] pc : refcount_warn_saturate+0x154/0x1f8 [ 198.587751][ C0] lr : refcount_warn_saturate+0x154/0x1f8 [ 198.589274][ C0] sp : ffff800008007800 [ 198.590409][ C0] x29: ffff800008007800 x28: ffff0000e7fd6400 x27: 0000000000000000 [ 198.592557][ C0] x26: 1fffe00018fc56d1 x25: dfff800000000000 x24: 1fffe0001b4cdc41 [ 198.594767][ C0] x23: ffff0000dc956b38 x22: ffff0000c1930000 x21: ffff0000d0269080 [ 198.597026][ C0] x20: ffff0000c1930154 x19: ffff80001659e000 x18: 0000000000000102 [ 198.599191][ C0] x17: 0000000000000000 x16: ffff8000111a97c4 x15: 0000000000000012 [ 198.601378][ C0] x14: 0000000000000000 x13: 1ffff0000282c06b x12: 0000000000ff0100 [ 198.603574][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : 49db67ce81f3e000 [ 198.605850][ C0] x8 : 49db67ce81f3e000 x7 : 0000000000000000 x6 : 0000000000000000 [ 198.608079][ C0] x5 : 0000000000000080 x4 : 0000000000000000 x3 : ffff80000a732684 [ 198.610201][ C0] x2 : ffff0001a10e9d10 x1 : 0000000000000101 x0 : 0000000000000026 [ 198.612345][ C0] Call trace: [ 198.613207][ C0] refcount_warn_saturate+0x154/0x1f8 [ 198.614604][ C0] tipc_crypto_xmit+0x177c/0x2220 [ 198.615920][ C0] tipc_bearer_xmit_skb+0x1f0/0x384 [ 198.617360][ C0] tipc_disc_timeout+0x4c8/0x608 [ 198.618657][ C0] call_timer_fn+0x19c/0x858 [ 198.619953][ C0] __run_timers+0x46c/0x6c4 [ 198.621222][ C0] run_timer_softirq+0x7c/0x114 [ 198.622571][ C0] handle_softirqs+0x344/0xbf0 [ 198.623858][ C0] __irq_exit_rcu+0x240/0x440 [ 198.625130][ C0] irq_exit+0x14/0x88 [ 198.626168][ C0] handle_domain_irq+0x14c/0x1fc [ 198.627488][ C0] gic_handle_irq+0x78/0x1c8 [ 198.628695][ C0] call_on_irq_stack+0x24/0x4c [ 198.629938][ C0] do_interrupt_handler+0x6c/0x88 [ 198.631326][ C0] el1_interrupt+0x30/0x58 [ 198.632490][ C0] el1h_64_irq_handler+0x18/0x24 [ 198.633812][ C0] el1h_64_irq+0x78/0x7c [ 198.634920][ C0] __sanitizer_cov_trace_pc+0x18/0xac [ 198.636351][ C0] check_preemption_disabled+0x38/0x164 [ 198.637817][ C0] debug_smp_processor_id+0x20/0x2c [ 198.639187][ C0] rcu_lockdep_current_cpu_online+0x7c/0x1e0 [ 198.640802][ C0] rcu_read_lock_held+0x20/0x50 [ 198.642073][ C0] xas_reload+0x18c/0x448 [ 198.643273][ C0] find_get_entry+0x1bc/0x254 [ 198.644489][ C0] find_lock_entries+0x4ec/0x828 [ 198.645807][ C0] shmem_undo_range+0x1dc/0x1234 [ 198.647180][ C0] shmem_evict_inode+0x1c0/0x838 [ 198.648523][ C0] evict+0x3c8/0x810 [ 198.649548][ C0] iput+0x6c4/0x77c [ 198.650598][ C0] dentry_unlink_inode+0x360/0x438 [ 198.651965][ C0] __dentry_kill+0x320/0x598 [ 198.653337][ C0] dentry_kill+0xc8/0x248 [ 198.654496][ C0] dput+0x23c/0x458 [ 198.655515][ C0] __fput+0x494/0x7f8 [ 198.656658][ C0] ____fput+0x20/0x30 [ 198.656886][ T6319] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,mblk_io_submit,minixdf,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 198.657816][ C0] task_work_run+0x12c/0x1e0 [ 198.663739][ C0] do_exit+0x67c/0x1f58 [ 198.664920][ C0] do_group_exit+0x100/0x268 [ 198.666238][ C0] get_signal+0x73c/0x1340 [ 198.667454][ C0] do_notify_resume+0x35c/0x3128 [ 198.668896][ C0] el0_svc+0xf0/0x1e0 [ 198.670006][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 198.671402][ C0] el0t_64_sync+0x1a0/0x1a4 [ 198.672647][ C0] irq event stamp: 169497 [ 198.673856][ C0] hardirqs last enabled at (169496): [] exit_to_kernel_mode+0xe0/0x168 [ 198.676573][ C0] hardirqs last disabled at (169497): [] el1_dbg+0x24/0x80 [ 198.679008][ C0] softirqs last enabled at (166962): [] handle_softirqs+0xa4c/0xbf0 [ 198.681659][ C0] softirqs last disabled at (169423): [] __irq_exit_rcu+0x240/0x440 [ 198.684378][ C0] ---[ end trace 590f5ac4643b812a ]--- [ 198.686120][ C0] ------------[ cut here ]------------ [ 198.687626][ C0] refcount_t: saturated; leaking memory. [ 198.689470][ C0] WARNING: CPU: 0 PID: 6312 at lib/refcount.c:22 refcount_warn_saturate+0x1b4/0x1f8 [ 198.692185][ C0] Modules linked in: [ 198.693297][ C0] CPU: 0 PID: 6312 Comm: syz.5.579 Tainted: G W 5.15.185-syzkaller #0 [ 198.695923][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 198.698713][ C0] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 198.700883][ C0] pc : refcount_warn_saturate+0x1b4/0x1f8 [ 198.702478][ C0] lr : refcount_warn_saturate+0x1b4/0x1f8 [ 198.704069][ C0] sp : ffff800008007800 [ 198.705285][ C0] x29: ffff800008007800 x28: ffff0000e7fd6000 x27: ffff0000da66e200 [ 198.707469][ C0] x26: 1fffe00018fc56d1 x25: dfff800000000000 x24: 1fffe0001b4cdc41 [ 198.709714][ C0] x23: ffff0000e9d10800 x22: ffff0000c1930154 x21: 000000007ffffffe [ 198.711881][ C0] x20: ffff0000c1930154 x19: ffff80001659e000 x18: 0000000000000102 [ 198.714111][ C0] x17: 0000000000000000 x16: ffff8000111a97c4 x15: 00000000ffffffff [ 198.716350][ C0] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 198.718583][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : 49db67ce81f3e000 [ 198.720764][ C0] x8 : 49db67ce81f3e000 x7 : 0000000000000001 x6 : 0000000000000001 [ 198.722877][ C0] x5 : ffff8000080070f8 x4 : ffff80001423f280 x3 : ffff800008503958 [ 198.725040][ C0] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000026 [ 198.727255][ C0] Call trace: [ 198.728138][ C0] refcount_warn_saturate+0x1b4/0x1f8 [ 198.729601][ C0] tipc_crypto_xmit+0x1634/0x2220 [ 198.731009][ C0] tipc_bearer_xmit_skb+0x1f0/0x384 [ 198.732440][ C0] tipc_disc_timeout+0x4c8/0x608 [ 198.733790][ C0] call_timer_fn+0x19c/0x858 [ 198.735094][ C0] __run_timers+0x46c/0x6c4 [ 198.736329][ C0] run_timer_softirq+0x7c/0x114 [ 198.737668][ C0] handle_softirqs+0x344/0xbf0 [ 198.738989][ C0] __irq_exit_rcu+0x240/0x440 [ 198.740304][ C0] irq_exit+0x14/0x88 [ 198.741499][ C0] handle_domain_irq+0x14c/0x1fc [ 198.742822][ C0] gic_handle_irq+0x78/0x1c8 [ 198.744095][ C0] call_on_irq_stack+0x24/0x4c [ 198.745392][ C0] do_interrupt_handler+0x6c/0x88 [ 198.746744][ C0] el1_interrupt+0x30/0x58 [ 198.747944][ C0] el1h_64_irq_handler+0x18/0x24 [ 198.749300][ C0] el1h_64_irq+0x78/0x7c [ 198.750459][ C0] __sanitizer_cov_trace_pc+0x18/0xac [ 198.751895][ C0] check_preemption_disabled+0x38/0x164 [ 198.753505][ C0] debug_smp_processor_id+0x20/0x2c [ 198.754922][ C0] rcu_lockdep_current_cpu_online+0x7c/0x1e0 [ 198.756614][ C0] rcu_read_lock_held+0x20/0x50 [ 198.757937][ C0] xas_reload+0x18c/0x448 [ 198.759149][ C0] find_get_entry+0x1bc/0x254 [ 198.760446][ C0] find_lock_entries+0x4ec/0x828 [ 198.761819][ C0] shmem_undo_range+0x1dc/0x1234 [ 198.763204][ C0] shmem_evict_inode+0x1c0/0x838 [ 198.764549][ C0] evict+0x3c8/0x810 [ 198.765596][ C0] iput+0x6c4/0x77c [ 198.766641][ C0] dentry_unlink_inode+0x360/0x438 [ 198.768088][ C0] __dentry_kill+0x320/0x598 [ 198.769332][ C0] dentry_kill+0xc8/0x248 [ 198.770563][ C0] dput+0x23c/0x458 [ 198.771662][ C0] __fput+0x494/0x7f8 [ 198.772779][ C0] ____fput+0x20/0x30 [ 198.773878][ C0] task_work_run+0x12c/0x1e0 [ 198.775107][ C0] do_exit+0x67c/0x1f58 [ 198.776278][ C0] do_group_exit+0x100/0x268 [ 198.777582][ C0] get_signal+0x73c/0x1340 [ 198.778820][ C0] do_notify_resume+0x35c/0x3128 [ 198.780224][ C0] el0_svc+0xf0/0x1e0 [ 198.781318][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 198.782721][ C0] el0t_64_sync+0x1a0/0x1a4 [ 198.783978][ C0] irq event stamp: 169555 [ 198.785156][ C0] hardirqs last enabled at (169554): [] __up_console_sem+0xb4/0x100 [ 198.787781][ C0] hardirqs last disabled at (169555): [] el1_dbg+0x24/0x80 [ 198.790273][ C0] softirqs last enabled at (166962): [] handle_softirqs+0xa4c/0xbf0 [ 198.792893][ C0] softirqs last disabled at (169423): [] __irq_exit_rcu+0x240/0x440 [ 198.795544][ C0] ---[ end trace 590f5ac4643b812b ]--- [ 198.998684][ T136] ------------[ cut here ]------------ [ 199.000576][ T136] refcount_t: saturated; leaking memory. [ 199.002514][ T136] WARNING: CPU: 1 PID: 136 at lib/refcount.c:19 refcount_warn_saturate+0x174/0x1f8 [ 199.005170][ T136] Modules linked in: [ 199.006306][ T136] CPU: 1 PID: 136 Comm: kworker/u4:1 Tainted: G W 5.15.185-syzkaller #0 [ 199.009107][ T136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.011918][ T136] Workqueue: netns cleanup_net [ 199.013295][ T136] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 199.015468][ T136] pc : refcount_warn_saturate+0x174/0x1f8 [ 199.017064][ T136] lr : refcount_warn_saturate+0x174/0x1f8 [ 199.018626][ T136] sp : ffff80001b957260 [ 199.019868][ T136] x29: ffff80001b957260 x28: 1ffff0000372ae54 x27: dfff800000000000 [ 199.022096][ T136] x26: 00000000c0000000 x25: 00000000c0000000 x24: 0000000000000cc0 [ 199.024422][ T136] x23: ffff0000c1930154 x22: 0000000000000045 x21: 000000007ffffffe [ 199.026692][ T136] x20: ffff0000c1930154 x19: ffff80001659e000 x18: 0000000000000002 [ 199.028857][ T136] x17: 0000000040000000 x16: ffff8000111a97c4 x15: 0000000000000002 [ 199.031097][ T136] x14: 0000000000ff0100 x13: 1ffff0000282c06b x12: 0000000000ff0100 [ 199.033327][ T136] x11: 0000000000000000 x10: 0000000000000000 x9 : da59ff8467626a00 [ 199.035549][ T136] x8 : da59ff8467626a00 x7 : 0000000000000000 x6 : 0000000000000000 [ 199.037909][ T136] x5 : 0000000000000080 x4 : 0000000000000000 x3 : ffff800008503958 [ 199.040218][ T136] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000026 [ 199.042384][ T136] Call trace: [ 199.043269][ T136] refcount_warn_saturate+0x174/0x1f8 [ 199.044853][ T136] nf_nat_masq_schedule+0x48c/0x57c [ 199.046365][ T136] masq_device_event+0x9c/0xe0 [ 199.047687][ T136] raw_notifier_call_chain+0xd4/0x164 [ 199.049181][ T136] dev_close_many+0x2cc/0x440 [ 199.050428][ T136] unregister_netdevice_many+0x3d4/0x17d0 [ 199.051952][ T136] unregister_netdevice_queue+0x2ac/0x2f8 [ 199.053555][ T136] nsim_destroy+0x58/0x164 [ 199.054757][ T136] __nsim_dev_port_del+0x144/0x1a4 [ 199.056184][ T136] nsim_dev_reload_destroy+0x144/0x204 [ 199.057703][ T136] nsim_dev_reload_down+0xe8/0x154 [ 199.059165][ T136] devlink_reload+0x1e8/0x5c8 [ 199.060523][ T136] devlink_pernet_pre_exit+0x194/0x33c [ 199.062120][ T136] cleanup_net+0x470/0xa98 [ 199.063305][ T136] process_one_work+0x79c/0x1140 [ 199.064712][ T136] worker_thread+0x8f4/0x101c [ 199.066012][ T136] kthread+0x374/0x454 [ 199.067222][ T136] ret_from_fork+0x10/0x20 [ 199.068534][ T136] irq event stamp: 1984900 [ 199.069685][ T136] hardirqs last enabled at (1984899): [] finish_lock_switch+0xb0/0x1c4 [ 199.072466][ T136] hardirqs last disabled at (1984900): [] el1_dbg+0x24/0x80 [ 199.074870][ T136] softirqs last enabled at (1984874): [] pppoe_device_event+0x4a4/0x4d4 [ 199.077714][ T136] softirqs last disabled at (1984872): [] pppoe_device_event+0xdc/0x4d4 [ 199.080398][ T136] ---[ end trace 590f5ac4643b812c ]--- [ 199.224080][ T136] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.328589][ T136] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.455797][ T136] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.772855][ T136] tipc: Disabling bearer [ 199.775252][ T136] tipc: Disabling bearer [ 199.776879][ T136] tipc: Left network mode [ 201.514008][ T136] device hsr_slave_0 left promiscuous mode [ 201.554965][ T136] device hsr_slave_1 left promiscuous mode [ 201.632614][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.634922][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.637810][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.639866][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.643172][ T136] device bridge_slave_1 left promiscuous mode [ 201.645171][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.683747][ T136] device bridge_slave_0 left promiscuous mode [ 201.686396][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.792730][ T136] device veth1_macvtap left promiscuous mode [ 201.794537][ T136] device veth0_macvtap left promiscuous mode [ 201.796254][ T136] device veth1_vlan left promiscuous mode [ 201.797869][ T136] device veth0_vlan left promiscuous mode [ 202.304733][ T136] team0 (unregistering): Port device team_slave_1 removed [ 202.314671][ T136] team0 (unregistering): Port device team_slave_0 removed [ 202.326145][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.389603][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.540704][ T136] bond0 (unregistering): Released all slaves