last executing test programs: 1m3.280953649s ago: executing program 1 (id=2): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() socket$packet(0x11, 0x3, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x60040600) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = creat(0x0, 0xecf86c37d53049cc) write$binfmt_script(r5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close(r5) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, 0x0, 0x4040140) 59.626340321s ago: executing program 1 (id=12): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'bridge0\x00', {0x2, 0x0, @remote}}) r1 = syz_io_uring_setup(0x202e, &(0x7f0000000340)={0x0, 0x8000, 0x1, 0x0, 0x102}, &(0x7f0000000080)=0x0, &(0x7f00000003c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) open_tree(0xffffffffffffff9c, 0x0, 0x81000) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) listen(0xffffffffffffffff, 0xfff) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) eventfd2(0x1, 0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) waitid(0x0, r9, 0x0, 0x8, 0xfffffffffffffffd) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) 54.889064108s ago: executing program 1 (id=16): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000000)={[{@nogrpid}, {@nogrpid}, {@test_dummy_encryption}, {@debug}, {@nobarrier}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'macvtap0\x00', 0x112}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'veth0\x00', {0x2, 0x4e24, @broadcast}}) 51.876042761s ago: executing program 1 (id=20): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRESHEX, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES16, @ANYRES32=r2], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x61}, {0x6, 0x0, 0xfc, 0x9}]}) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$sock(r7, &(0x7f0000000300)={&(0x7f0000000040)=@isdn={0x22, 0x2, 0x80, 0x5, 0x3a}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)="449df18d098dfcd2c50c61580cd0ba7d5524fac46e641423b01613908be1e46241affd2884d0acb6cde2156c7cbad852c33bb67db850bf9a3869224683ba8cc2d245a2dd7efc089c7dffeff32aab05e5ce9b7eebe34bbea122e427915249b4b662c8d9aca64c9872ad5feb42cebac0b127da8481bc0cf7fc83b057eee475bec953683a7b054d25f30cbfc72e629b217baa6df41c78bf8c328cdb786149a18fbe6e09f6e52e38e6a84a62150d6ee0240e01b2fa467c204a0d", 0xb8}, {&(0x7f00000000c0)="2bc9d0ab0a0169d6a88f99466c2904", 0xf}, {&(0x7f0000000440)="543a9a82b0ddaf4e28041970cb4a94cb3fd34be39b47bff70298a3750a875f445474a9144ae1c33a74ba15afa1ddc5750643c9f4db3b710c327bcb901225181f03fc254ca2c43f5e40aed38a6aad8acfd6ed7a3287b828bcfe087fbe4364e06e858883d7e13f68185ea008236571099482c60211f12d2aabc4ef99d44c7deb646fdd8ba8cee489afb1a56e8b185cc02922eb4499bec899a195e299f24e5be663", 0xa0}, {&(0x7f0000000500)="1723ef612486b918945fc9531d73c06c3eb2bf978afb5feaeb3825058e5e8b10c1247a31d772aa348005d54c79094049f029986ddb1ab18190d67bd4be2746f210a944be6999b102706bb6ace08bcc8160a7e8a3de852bad413db730e6b2afc90fe7e8a9de0a3c893637eb65308f72a2eec15a95aeec262a0bdef7104c4cd88cddb650df6f23a7dc3705b676d6317cdc5a5c545ce2f5023450958171a2970c4b2c3c7cbc93c82e405556b8bb2b28f5", 0xaf}], 0x4, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}, 0x8000) bind$802154_dgram(r7, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r7, &(0x7f0000000640)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) 48.487282819s ago: executing program 1 (id=23): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = getpgid(r1) kcmp(r1, r6, 0x0, r2, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) fallocate(r8, 0x8, 0x4000, 0x4000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) 32.475803227s ago: executing program 32 (id=23): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = getpgid(r1) kcmp(r1, r6, 0x0, r2, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) fallocate(r8, 0x8, 0x4000, 0x4000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) 14.74473576s ago: executing program 0 (id=77): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRESHEX, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES16, @ANYRES32], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x61}, {0x6, 0x0, 0xfc, 0x9}]}) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000300)={&(0x7f0000000040)=@isdn={0x22, 0x2, 0x80, 0x5, 0x3a}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)="449df18d098dfcd2c50c61580cd0ba7d5524fac46e641423b01613908be1e46241affd2884d0acb6cde2156c7cbad852c33bb67db850bf9a3869224683ba8cc2d245a2dd7efc089c7dffeff32aab05e5ce9b7eebe34bbea122e427915249b4b662c8d9aca64c9872ad5feb42cebac0b127da8481bc0cf7fc83b057eee475bec953683a7b054d25f30cbfc72e629b217baa6df41c78bf8c328cdb786149a18fbe6e09f6e52e38e6a84a62150d6ee0240e01b2fa467c204a0d", 0xb8}, {&(0x7f00000000c0)="2bc9d0ab0a0169d6a88f99466c2904", 0xf}, {&(0x7f0000000440)="543a9a82b0ddaf4e28041970cb4a94cb3fd34be39b47bff70298a3750a875f445474a9144ae1c33a74ba15afa1ddc5750643c9f4db3b710c327bcb901225181f03fc254ca2c43f5e40aed38a6aad8acfd6ed7a3287b828bcfe087fbe4364e06e858883d7e13f68185ea008236571099482c60211f12d2aabc4ef99d44c7deb646fdd8ba8cee489afb1a56e8b185cc02922eb4499bec899a195e299f24e5be663", 0xa0}, {&(0x7f0000000500)="1723ef612486b918945fc9531d73c06c3eb2bf978afb5feaeb3825058e5e8b10c1247a31d772aa348005d54c79094049f029986ddb1ab18190d67bd4be2746f210a944be6999b102706bb6ace08bcc8160a7e8a3de852bad413db730e6b2afc90fe7e8a9de0a3c893637eb65308f72a2eec15a95aeec262a0bdef7104c4cd88cddb650df6f23a7dc3705b676d6317cdc5a5c545ce2f5023450958171a2970c4b2c3c7cbc93c82e405556b8bb2b28f5", 0xaf}], 0x4, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}, 0x8000) bind$802154_dgram(r6, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r6, &(0x7f0000000640)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) 12.559242511s ago: executing program 0 (id=81): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001800", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) fallocate(r2, 0x8, 0x4000, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200e, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000081ab09c9f7f6d9ca261e252a996890"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfa, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8006}, 0x0) 12.557839051s ago: executing program 4 (id=82): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r1 = dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYRES8, @ANYRESHEX, @ANYRES8, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES16, @ANYRES16, @ANYRES32=r1], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x61}, {0x6, 0x0, 0xfc, 0x9}]}) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000300)={&(0x7f0000000040)=@isdn={0x22, 0x2, 0x80, 0x5, 0x3a}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)="449df18d098dfcd2c50c61580cd0ba7d5524fac46e641423b01613908be1e46241affd2884d0acb6cde2156c7cbad852c33bb67db850bf9a3869224683ba8cc2d245a2dd7efc089c7dffeff32aab05e5ce9b7eebe34bbea122e427915249b4b662c8d9aca64c9872ad5feb42cebac0b127da8481bc0cf7fc83b057eee475bec953683a7b054d25f30cbfc72e629b217baa6df41c78bf8c328cdb786149a18fbe6e09f6e52e38e6a84a62150d6ee0240e01b2fa467c204a0d", 0xb8}, {&(0x7f00000000c0)="2bc9d0ab0a0169d6a88f99466c2904", 0xf}, {&(0x7f0000000440)="543a9a82b0ddaf4e28041970cb4a94cb3fd34be39b47bff70298a3750a875f445474a9144ae1c33a74ba15afa1ddc5750643c9f4db3b710c327bcb901225181f03fc254ca2c43f5e40aed38a6aad8acfd6ed7a3287b828bcfe087fbe4364e06e858883d7e13f68185ea008236571099482c60211f12d2aabc4ef99d44c7deb646fdd8ba8cee489afb1a56e8b185cc02922eb4499bec899a195e299f24e5be663", 0xa0}, {&(0x7f0000000500)="1723ef612486b918945fc9531d73c06c3eb2bf978afb5feaeb3825058e5e8b10c1247a31d772aa348005d54c79094049f029986ddb1ab18190d67bd4be2746f210a944be6999b102706bb6ace08bcc8160a7e8a3de852bad413db730e6b2afc90fe7e8a9de0a3c893637eb65308f72a2eec15a95aeec262a0bdef7104c4cd88cddb650df6f23a7dc3705b676d6317cdc5a5c545ce2f5023450958171a2970c4b2c3c7cbc93c82e405556b8bb2b28f5", 0xaf}], 0x4, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}, 0x8000) connect$802154_dgram(r6, &(0x7f0000000640)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) 10.998276144s ago: executing program 4 (id=84): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00?\b\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, r8, 0x1, 0x4, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 10.738063437s ago: executing program 2 (id=85): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRESHEX, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES16, @ANYRES32], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x61}, {0x6, 0x0, 0xfc, 0x9}]}) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000300)={&(0x7f0000000040)=@isdn={0x22, 0x2, 0x80, 0x5, 0x3a}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)="449df18d098dfcd2c50c61580cd0ba7d5524fac46e641423b01613908be1e46241affd2884d0acb6cde2156c7cbad852c33bb67db850bf9a3869224683ba8cc2d245a2dd7efc089c7dffeff32aab05e5ce9b7eebe34bbea122e427915249b4b662c8d9aca64c9872ad5feb42cebac0b127da8481bc0cf7fc83b057eee475bec953683a7b054d25f30cbfc72e629b217baa6df41c78bf8c328cdb786149a18fbe6e09f6e52e38e6a84a62150d6ee0240e01b2fa467c204a0d", 0xb8}, {&(0x7f00000000c0)="2bc9d0ab0a0169d6a88f99466c2904", 0xf}, {&(0x7f0000000440)="543a9a82b0ddaf4e28041970cb4a94cb3fd34be39b47bff70298a3750a875f445474a9144ae1c33a74ba15afa1ddc5750643c9f4db3b710c327bcb901225181f03fc254ca2c43f5e40aed38a6aad8acfd6ed7a3287b828bcfe087fbe4364e06e858883d7e13f68185ea008236571099482c60211f12d2aabc4ef99d44c7deb646fdd8ba8cee489afb1a56e8b185cc02922eb4499bec899a195e299f24e5be663", 0xa0}, {&(0x7f0000000500)="1723ef612486b918945fc9531d73c06c3eb2bf978afb5feaeb3825058e5e8b10c1247a31d772aa348005d54c79094049f029986ddb1ab18190d67bd4be2746f210a944be6999b102706bb6ace08bcc8160a7e8a3de852bad413db730e6b2afc90fe7e8a9de0a3c893637eb65308f72a2eec15a95aeec262a0bdef7104c4cd88cddb650df6f23a7dc3705b676d6317cdc5a5c545ce2f5023450958171a2970c4b2c3c7cbc93c82e405556b8bb2b28f5", 0xaf}], 0x4, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}, 0x8000) bind$802154_dgram(r6, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r6, &(0x7f0000000640)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) 9.247378468s ago: executing program 2 (id=86): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = dup(0xffffffffffffffff) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRESHEX, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES16, @ANYRES32=r2], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x61}, {0x6, 0x0, 0xfc, 0x9}]}) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$sock(r7, &(0x7f0000000300)={&(0x7f0000000040)=@isdn={0x22, 0x2, 0x80, 0x5, 0x3a}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)="449df18d098dfcd2c50c61580cd0ba7d5524fac46e641423b01613908be1e46241affd2884d0acb6cde2156c7cbad852c33bb67db850bf9a3869224683ba8cc2d245a2dd7efc089c7dffeff32aab05e5ce9b7eebe34bbea122e427915249b4b662c8d9aca64c9872ad5feb42cebac0b127da8481bc0cf7fc83b057eee475bec953683a7b054d25f30cbfc72e629b217baa6df41c78bf8c328cdb786149a18fbe6e09f6e52e38e6a84a62150d6ee0240e01b2fa467c204a0d", 0xb8}, {&(0x7f00000000c0)="2bc9d0ab0a0169d6a88f99466c2904", 0xf}, {&(0x7f0000000440)="543a9a82b0ddaf4e28041970cb4a94cb3fd34be39b47bff70298a3750a875f445474a9144ae1c33a74ba15afa1ddc5750643c9f4db3b710c327bcb901225181f03fc254ca2c43f5e40aed38a6aad8acfd6ed7a3287b828bcfe087fbe4364e06e858883d7e13f68185ea008236571099482c60211f12d2aabc4ef99d44c7deb646fdd8ba8cee489afb1a56e8b185cc02922eb4499bec899a195e299f24e5be663", 0xa0}, {&(0x7f0000000500)="1723ef612486b918945fc9531d73c06c3eb2bf978afb5feaeb3825058e5e8b10c1247a31d772aa348005d54c79094049f029986ddb1ab18190d67bd4be2746f210a944be6999b102706bb6ace08bcc8160a7e8a3de852bad413db730e6b2afc90fe7e8a9de0a3c893637eb65308f72a2eec15a95aeec262a0bdef7104c4cd88cddb650df6f23a7dc3705b676d6317cdc5a5c545ce2f5023450958171a2970c4b2c3c7cbc93c82e405556b8bb2b28f5", 0xaf}], 0x4, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}, 0x8000) bind$802154_dgram(r7, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r7, &(0x7f0000000640)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) 7.940489627s ago: executing program 3 (id=87): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRESHEX, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES16, @ANYRES32=r2], 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x61}, {0x6, 0x0, 0xfc, 0x9}]}) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$sock(r7, &(0x7f0000000300)={&(0x7f0000000040)=@isdn={0x22, 0x2, 0x80, 0x5, 0x3a}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)="449df18d098dfcd2c50c61580cd0ba7d5524fac46e641423b01613908be1e46241affd2884d0acb6cde2156c7cbad852c33bb67db850bf9a3869224683ba8cc2d245a2dd7efc089c7dffeff32aab05e5ce9b7eebe34bbea122e427915249b4b662c8d9aca64c9872ad5feb42cebac0b127da8481bc0cf7fc83b057eee475bec953683a7b054d25f30cbfc72e629b217baa6df41c78bf8c328cdb786149a18fbe6e09f6e52e38e6a84a62150d6ee0240e01b2fa467c204a0d", 0xb8}, {&(0x7f00000000c0)="2bc9d0ab0a0169d6a88f99466c2904", 0xf}, {&(0x7f0000000440)="543a9a82b0ddaf4e28041970cb4a94cb3fd34be39b47bff70298a3750a875f445474a9144ae1c33a74ba15afa1ddc5750643c9f4db3b710c327bcb901225181f03fc254ca2c43f5e40aed38a6aad8acfd6ed7a3287b828bcfe087fbe4364e06e858883d7e13f68185ea008236571099482c60211f12d2aabc4ef99d44c7deb646fdd8ba8cee489afb1a56e8b185cc02922eb4499bec899a195e299f24e5be663", 0xa0}, {&(0x7f0000000500)="1723ef612486b918945fc9531d73c06c3eb2bf978afb5feaeb3825058e5e8b10c1247a31d772aa348005d54c79094049f029986ddb1ab18190d67bd4be2746f210a944be6999b102706bb6ace08bcc8160a7e8a3de852bad413db730e6b2afc90fe7e8a9de0a3c893637eb65308f72a2eec15a95aeec262a0bdef7104c4cd88cddb650df6f23a7dc3705b676d6317cdc5a5c545ce2f5023450958171a2970c4b2c3c7cbc93c82e405556b8bb2b28f5", 0xaf}], 0x4, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}, 0x8000) bind$802154_dgram(r7, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r7, &(0x7f0000000640)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) 7.936197267s ago: executing program 2 (id=88): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r1, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040)='{(:\x00'}, 0x30) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB='ya\x00?\b\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x4, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 6.601215946s ago: executing program 0 (id=89): socket(0x1e, 0x4, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000000100000000fddbdf250000ffff", @ANYRES32=r2, @ANYBLOB="000000000000000016001280090081007866726d00000000040002801400030076657468311a0000006e000000000000"], 0x48}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x30, 0x10, 0xa9, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MTU={0x8, 0x4, 0x7c}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r6}, 0x10) r7 = io_uring_setup(0xf41, &(0x7f0000000000)={0x0, 0xc675, 0x40, 0x2, 0x21a}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, 0x0) 5.658674119s ago: executing program 3 (id=90): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="000001"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.062267218s ago: executing program 2 (id=91): syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7020000200000008500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0) ftruncate(r1, 0x8800000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) sendfile(r2, r1, 0x0, 0x558410e9) 5.054285578s ago: executing program 4 (id=92): mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative'}}}]}) 4.845805431s ago: executing program 4 (id=93): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='tlb_flush\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x1c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffff}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 4.756107362s ago: executing program 0 (id=94): r0 = socket(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000000100000000fddbdf250000ffff", @ANYRES32=r3, @ANYBLOB="000000000000000016001280090081007866726d00000000040002801400030076657468311a0000006e000000000000"], 0x48}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x30, 0x10, 0xa9, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MTU={0x8, 0x4, 0x7c}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0x34, 0x2, 0x41, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote, 0x40, 0x40, 0xffffff7f, 0x8000}}) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r7, 0xffffffffffffffff, 0x43) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r8}, 0x10) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) 4.291053649s ago: executing program 0 (id=95): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) fallocate(r2, 0x8, 0x4000, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200e, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000081ab09c9f7f6d9ca261e252a996890"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfa, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8006}, 0x0) 4.266391149s ago: executing program 3 (id=96): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={0x0, r0}, 0x18) r1 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x140, 0x0) 4.15457267s ago: executing program 4 (id=97): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x88281, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x1, 0x0, 0x2}, 0x8) 4.136285041s ago: executing program 2 (id=98): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) fallocate(r2, 0x8, 0x4000, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200e, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000081ab09c9f7f6d9ca261e252a996890"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfa, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8006}, 0x0) 3.787451586s ago: executing program 3 (id=99): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRESHEX, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES16, @ANYRES32=r2], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x61}, {0x6, 0x0, 0xfc, 0x9}]}) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$sock(r7, &(0x7f0000000300)={&(0x7f0000000040)=@isdn={0x22, 0x2, 0x80, 0x5, 0x3a}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)="449df18d098dfcd2c50c61580cd0ba7d5524fac46e641423b01613908be1e46241affd2884d0acb6cde2156c7cbad852c33bb67db850bf9a3869224683ba8cc2d245a2dd7efc089c7dffeff32aab05e5ce9b7eebe34bbea122e427915249b4b662c8d9aca64c9872ad5feb42cebac0b127da8481bc0cf7fc83b057eee475bec953683a7b054d25f30cbfc72e629b217baa6df41c78bf8c328cdb786149a18fbe6e09f6e52e38e6a84a62150d6ee0240e01b2fa467c204a0d", 0xb8}, {&(0x7f00000000c0)="2bc9d0ab0a0169d6a88f99466c2904", 0xf}, {&(0x7f0000000440)="543a9a82b0ddaf4e28041970cb4a94cb3fd34be39b47bff70298a3750a875f445474a9144ae1c33a74ba15afa1ddc5750643c9f4db3b710c327bcb901225181f03fc254ca2c43f5e40aed38a6aad8acfd6ed7a3287b828bcfe087fbe4364e06e858883d7e13f68185ea008236571099482c60211f12d2aabc4ef99d44c7deb646fdd8ba8cee489afb1a56e8b185cc02922eb4499bec899a195e299f24e5be663", 0xa0}, {&(0x7f0000000500)="1723ef612486b918945fc9531d73c06c3eb2bf978afb5feaeb3825058e5e8b10c1247a31d772aa348005d54c79094049f029986ddb1ab18190d67bd4be2746f210a944be6999b102706bb6ace08bcc8160a7e8a3de852bad413db730e6b2afc90fe7e8a9de0a3c893637eb65308f72a2eec15a95aeec262a0bdef7104c4cd88cddb650df6f23a7dc3705b676d6317cdc5a5c545ce2f5023450958171a2970c4b2c3c7cbc93c82e405556b8bb2b28f5", 0xaf}], 0x4, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}, 0x8000) bind$802154_dgram(r7, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r7, &(0x7f0000000640)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) 2.78474263s ago: executing program 4 (id=100): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) fallocate(r2, 0x8, 0x4000, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200e, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000081ab09c9f7f6d9ca261e252a996890"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfa, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8006}, 0x0) 1.582054177s ago: executing program 3 (id=101): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRESHEX, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES16, @ANYRES32=r2], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x61}, {0x6, 0x0, 0xfc, 0x9}]}) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$sock(r7, &(0x7f0000000300)={&(0x7f0000000040)=@isdn={0x22, 0x2, 0x80, 0x5, 0x3a}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)="449df18d098dfcd2c50c61580cd0ba7d5524fac46e641423b01613908be1e46241affd2884d0acb6cde2156c7cbad852c33bb67db850bf9a3869224683ba8cc2d245a2dd7efc089c7dffeff32aab05e5ce9b7eebe34bbea122e427915249b4b662c8d9aca64c9872ad5feb42cebac0b127da8481bc0cf7fc83b057eee475bec953683a7b054d25f30cbfc72e629b217baa6df41c78bf8c328cdb786149a18fbe6e09f6e52e38e6a84a62150d6ee0240e01b2fa467c204a0d", 0xb8}, {&(0x7f00000000c0)="2bc9d0ab0a0169d6a88f99466c2904", 0xf}, {&(0x7f0000000440)="543a9a82b0ddaf4e28041970cb4a94cb3fd34be39b47bff70298a3750a875f445474a9144ae1c33a74ba15afa1ddc5750643c9f4db3b710c327bcb901225181f03fc254ca2c43f5e40aed38a6aad8acfd6ed7a3287b828bcfe087fbe4364e06e858883d7e13f68185ea008236571099482c60211f12d2aabc4ef99d44c7deb646fdd8ba8cee489afb1a56e8b185cc02922eb4499bec899a195e299f24e5be663", 0xa0}, {&(0x7f0000000500)="1723ef612486b918945fc9531d73c06c3eb2bf978afb5feaeb3825058e5e8b10c1247a31d772aa348005d54c79094049f029986ddb1ab18190d67bd4be2746f210a944be6999b102706bb6ace08bcc8160a7e8a3de852bad413db730e6b2afc90fe7e8a9de0a3c893637eb65308f72a2eec15a95aeec262a0bdef7104c4cd88cddb650df6f23a7dc3705b676d6317cdc5a5c545ce2f5023450958171a2970c4b2c3c7cbc93c82e405556b8bb2b28f5", 0xaf}], 0x4, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}, 0x8000) bind$802154_dgram(r7, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r7, &(0x7f0000000640)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) 315.519755ms ago: executing program 3 (id=102): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) fallocate(r2, 0x8, 0x4000, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200e, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000081ab09c9f7f6d9ca261e252a996890"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfa, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8006}, 0x0) 103.696488ms ago: executing program 0 (id=103): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x1c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffff}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 40.62292ms ago: executing program 2 (id=104): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x48) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYRES8], 0x40}}, 0xc800) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000008d07e488c07741bb800425bac14a307ba86e785c3d41ced24dad93d2cb74c6328b66202b3b23e67c5fec6d13911fa5ce37801be8b4cfe0f734f1c06e5673f440c2365cbe04b8505201", @ANYRES16=r4, @ANYBLOB="270e000000000000000004070200"], 0x14}, 0x1, 0x40030000000000, 0x0, 0x20008044}, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYRESDEC=r2, @ANYRES16=r4, @ANYBLOB="000826bd7000fcdbdf250200000014000200776c616e3000"/34, @ANYBLOB="0b54cb03c2110e6f8aafbb6c4587e7cadc3ad4dc815a1967a3c6555c41e91b335efe5779b35b9b721e837901dc494c3eac3c618d41a22ab2f88d1ecd85b1e40e239bccdfad36d092816c9fb19b7dacf42c8c484a7f61a4a409122d7997873b88da607d0de2e4236402a22b5406b6f0c1"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x10) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) 0s ago: executing program 5 (id=47): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = getpgid(r1) kcmp(r1, r6, 0x0, r2, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) fallocate(r8, 0x8, 0x4000, 0x4000) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.17' (ED25519) to the list of known hosts. [ 73.240061][ T4240] cgroup: Unknown subsys name 'net' [ 73.377109][ T4240] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.886014][ T4240] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 76.366114][ T4256] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.374581][ T4256] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.382656][ T4256] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.390982][ T4256] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.398640][ T4256] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.399253][ T4261] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.406677][ T4256] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.415122][ T4261] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.421644][ T4263] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.428710][ T4261] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.443336][ T4263] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.443462][ T4261] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.464225][ T4265] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.464275][ T4261] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.474591][ T4268] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.481009][ T4261] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.494468][ T4261] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.502405][ T4261] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.510673][ T4261] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.518075][ T4261] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.523681][ T4265] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.532505][ T4265] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.532652][ T4261] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.546902][ T4269] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.551883][ T4261] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.554171][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.569077][ T4261] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.600875][ T4261] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.608447][ T4261] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.615992][ T4261] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.951209][ T4251] chnl_net:caif_netlink_parms(): no params data found [ 77.145506][ T4257] chnl_net:caif_netlink_parms(): no params data found [ 77.166671][ T4254] chnl_net:caif_netlink_parms(): no params data found [ 77.185365][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.202059][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.230455][ T4251] device bridge_slave_0 entered promiscuous mode [ 77.244310][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.251718][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.260087][ T4251] device bridge_slave_1 entered promiscuous mode [ 77.287251][ T4258] chnl_net:caif_netlink_parms(): no params data found [ 77.321121][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.331452][ T4255] chnl_net:caif_netlink_parms(): no params data found [ 77.356756][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.447008][ T4251] team0: Port device team_slave_0 added [ 77.485124][ T4251] team0: Port device team_slave_1 added [ 77.527764][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.535140][ T4257] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.544825][ T4257] device bridge_slave_0 entered promiscuous mode [ 77.552938][ T4254] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.560276][ T4254] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.568328][ T4254] device bridge_slave_0 entered promiscuous mode [ 77.579738][ T4258] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.586867][ T4258] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.595048][ T4258] device bridge_slave_0 entered promiscuous mode [ 77.611967][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.618968][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.645118][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.657296][ T4257] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.664975][ T4257] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.673451][ T4257] device bridge_slave_1 entered promiscuous mode [ 77.680774][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.687890][ T4254] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.696027][ T4254] device bridge_slave_1 entered promiscuous mode [ 77.711517][ T4258] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.718715][ T4258] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.727296][ T4258] device bridge_slave_1 entered promiscuous mode [ 77.734766][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.741964][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.768225][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.834484][ T4255] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.842022][ T4255] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.853811][ T4255] device bridge_slave_0 entered promiscuous mode [ 77.874290][ T4258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.887564][ T4258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.898778][ T4257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.911164][ T4257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.922670][ T4254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.932217][ T4255] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.939343][ T4255] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.950596][ T4255] device bridge_slave_1 entered promiscuous mode [ 77.982351][ T4254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.056406][ T4251] device hsr_slave_0 entered promiscuous mode [ 78.063487][ T4251] device hsr_slave_1 entered promiscuous mode [ 78.074558][ T4258] team0: Port device team_slave_0 added [ 78.086094][ T4257] team0: Port device team_slave_0 added [ 78.101696][ T4255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.116907][ T4255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.128288][ T4258] team0: Port device team_slave_1 added [ 78.136182][ T4257] team0: Port device team_slave_1 added [ 78.144851][ T4254] team0: Port device team_slave_0 added [ 78.153160][ T4254] team0: Port device team_slave_1 added [ 78.236511][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.243688][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.269948][ T4254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.281627][ T4258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.288621][ T4258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.314943][ T4258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.328890][ T4255] team0: Port device team_slave_0 added [ 78.335497][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.342600][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.368889][ T4257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.389097][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.396305][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.422385][ T4254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.433984][ T4258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.441323][ T4258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.467628][ T4258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.480209][ T4255] team0: Port device team_slave_1 added [ 78.486546][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.493735][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.520156][ T4257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.575452][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.582557][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.608637][ T4256] Bluetooth: hci2: command 0x0409 tx timeout [ 78.608900][ T4256] Bluetooth: hci4: command 0x0409 tx timeout [ 78.615217][ T4261] Bluetooth: hci1: command 0x0409 tx timeout [ 78.622054][ T4256] Bluetooth: hci0: command 0x0409 tx timeout [ 78.627663][ T4255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.670049][ T4259] Bluetooth: hci3: command 0x0409 tx timeout [ 78.684549][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.691723][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.717888][ T4255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.739423][ T4257] device hsr_slave_0 entered promiscuous mode [ 78.747250][ T4257] device hsr_slave_1 entered promiscuous mode [ 78.754473][ T4257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.762527][ T4257] Cannot create hsr debugfs directory [ 78.789078][ T4254] device hsr_slave_0 entered promiscuous mode [ 78.796402][ T4254] device hsr_slave_1 entered promiscuous mode [ 78.803523][ T4254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.811380][ T4254] Cannot create hsr debugfs directory [ 78.868276][ T4258] device hsr_slave_0 entered promiscuous mode [ 78.875371][ T4258] device hsr_slave_1 entered promiscuous mode [ 78.882967][ T4258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.890873][ T4258] Cannot create hsr debugfs directory [ 78.909000][ T4255] device hsr_slave_0 entered promiscuous mode [ 78.915875][ T4255] device hsr_slave_1 entered promiscuous mode [ 78.922839][ T4255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.930749][ T4255] Cannot create hsr debugfs directory [ 79.186206][ T4251] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.228060][ T4251] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.243222][ T4251] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.273234][ T4251] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.373776][ T4254] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.406956][ T4254] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.427047][ T4254] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.445391][ T4254] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.486803][ T4257] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.496851][ T4257] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.512670][ T4257] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.525745][ T4257] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.587066][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.607514][ T4258] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.620870][ T4258] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.631040][ T4258] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.656572][ T4258] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.676155][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.714794][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.725728][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.767310][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.777139][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.787563][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.794938][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.804939][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.815220][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.824071][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.832036][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.874494][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.883290][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.895107][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.914685][ T4254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.934751][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.948177][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.956909][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.968777][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.981998][ T4255] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.994565][ T4255] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.011604][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.021909][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.030569][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.040999][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.048813][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.068796][ T4254] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.076489][ T4255] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.089453][ T4255] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.101839][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.112150][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.134052][ T4257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.144641][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.156552][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.166548][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.175947][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.183334][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.209154][ T4257] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.233790][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.244917][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.254036][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.265869][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.273192][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.282930][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.291220][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.299210][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.316469][ T4258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.360099][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.369257][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.381862][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.391599][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.401752][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.411902][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.421108][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.429495][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.438606][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.447383][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.454572][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.462639][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.471683][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.480768][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.487931][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.519472][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.530131][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.538768][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.553459][ T4254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.566941][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.600429][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.614392][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.623576][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.633482][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.644525][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.654442][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.668698][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.676493][ T4259] Bluetooth: hci0: command 0x041b tx timeout [ 80.679873][ T4259] Bluetooth: hci1: command 0x041b tx timeout [ 80.683280][ T4256] Bluetooth: hci4: command 0x041b tx timeout [ 80.688671][ T4261] Bluetooth: hci2: command 0x041b tx timeout [ 80.707451][ T4258] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.750232][ T4259] Bluetooth: hci3: command 0x041b tx timeout [ 80.757333][ T4255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.774556][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.787753][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.799378][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.846366][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.861633][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.876413][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.886065][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.900962][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.908124][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.917872][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.928121][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.937393][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.944564][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.952948][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.961959][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.970739][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.978574][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.986825][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.998351][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.008568][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.023114][ T4255] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.045879][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.055400][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.087078][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.115813][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.125754][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.135436][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.146340][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.157709][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.168560][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.178310][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.188024][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.195268][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.204360][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.214357][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.223834][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.231040][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.241073][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.250667][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.318237][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.331642][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.340722][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.349485][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.358555][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.368981][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.377967][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.407451][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.421977][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.431834][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.441231][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.449823][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.458329][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.473652][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.489049][ T4255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.502176][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.528219][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.537664][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.558231][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.572845][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.584892][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.596867][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.640759][ T4254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.673713][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.710812][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.733491][ T4251] device veth0_vlan entered promiscuous mode [ 81.756686][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.790626][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.818193][ T4251] device veth1_vlan entered promiscuous mode [ 81.936040][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.954626][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.002930][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.041274][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.099896][ T4251] device veth0_macvtap entered promiscuous mode [ 82.151392][ T4257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.158990][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.189562][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.202313][ T4251] device veth1_macvtap entered promiscuous mode [ 82.260002][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.280222][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.305999][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.318893][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.342250][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.376287][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.407255][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.417516][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.444327][ T4251] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.476330][ T4251] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.501139][ T4251] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.533909][ T4251] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.565072][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.578628][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.616707][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.640684][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.663011][ T4257] device veth0_vlan entered promiscuous mode [ 82.716776][ T4257] device veth1_vlan entered promiscuous mode [ 82.735192][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.751004][ T4259] Bluetooth: hci2: command 0x040f tx timeout [ 82.751027][ T4261] Bluetooth: hci0: command 0x040f tx timeout [ 82.757059][ T4259] Bluetooth: hci1: command 0x040f tx timeout [ 82.763576][ T4263] Bluetooth: hci4: command 0x040f tx timeout [ 82.771904][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.800637][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.830160][ T4259] Bluetooth: hci3: command 0x040f tx timeout [ 82.857884][ T4258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.902538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.914459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.924920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.974144][ T4255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.997888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.013186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.064190][ T4257] device veth0_macvtap entered promiscuous mode [ 83.099271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.108163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.122098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.138670][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.148566][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.159318][ T4257] device veth1_macvtap entered promiscuous mode [ 83.208428][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.222653][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.233262][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.234632][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.251666][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.261032][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.278954][ T4255] device veth0_vlan entered promiscuous mode [ 83.296006][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.308506][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.321940][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.338251][ T4258] device veth0_vlan entered promiscuous mode [ 83.354008][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.363032][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.371184][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.379139][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.387735][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.396673][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.409297][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.421311][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.429438][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.453727][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.462102][ T4307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.473886][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.482067][ T4307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.500495][ T4258] device veth1_vlan entered promiscuous mode [ 83.508498][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.519257][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.536551][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.546651][ T4254] device veth0_vlan entered promiscuous mode [ 83.556253][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.564784][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.573324][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.581806][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.590300][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.598955][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.623277][ T4255] device veth1_vlan entered promiscuous mode [ 83.650389][ T4257] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.659164][ T4257] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.675417][ T4257] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.684524][ T4257] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.701987][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.718547][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.727297][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.736737][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.750700][ T4258] device veth0_macvtap entered promiscuous mode [ 83.794151][ T4254] device veth1_vlan entered promiscuous mode [ 83.813554][ T4258] device veth1_macvtap entered promiscuous mode [ 83.831784][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.853254][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.873281][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.883680][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.892207][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.903705][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.915672][ T4255] device veth0_macvtap entered promiscuous mode [ 83.948211][ T4255] device veth1_macvtap entered promiscuous mode [ 84.024237][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.096316][ T4343] loop3: detected capacity change from 0 to 512 [ 84.104728][ T4343] ======================================================= [ 84.104728][ T4343] WARNING: The mand mount option has been deprecated and [ 84.104728][ T4343] and is ignored by this kernel. Remove the mand [ 84.104728][ T4343] option from the mount to silence this warning. [ 84.104728][ T4343] ======================================================= [ 84.154111][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.208663][ T4343] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.323820][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.365077][ T4343] EXT4-fs (loop3): orphan cleanup on readonly fs [ 84.392556][ T4343] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.4: bg 0: block 248: padding at end of block bitmap is not set [ 84.425774][ T4343] Quota error (device loop3): write_blk: dquota write failed [ 84.434626][ T4343] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 84.445617][ T4343] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.4: Failed to acquire dquot type 1 [ 84.473772][ T4343] EXT4-fs (loop3): 1 truncate cleaned up [ 84.497842][ T4343] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 85.077724][ T4259] Bluetooth: hci1: command 0x0419 tx timeout [ 85.090894][ T4259] Bluetooth: hci2: command 0x0419 tx timeout [ 85.097406][ T4259] Bluetooth: hci3: command 0x0419 tx timeout [ 85.151610][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.305606][ T4258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.879622][ C1] sched: RT throttling activated [ 85.881245][ T4263] Bluetooth: hci0: command 0x0419 tx timeout [ 85.893077][ T4259] Bluetooth: hci4: command 0x0419 tx timeout [ 85.909951][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.918393][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.954668][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.966392][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.077441][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.228282][ T4343] syz.3.4 (4343) used greatest stack depth: 20864 bytes left [ 86.319112][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.348088][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.388763][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.397540][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.672404][ T14] cfg80211: failed to load regulatory.db [ 86.723219][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 86.752585][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.805985][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.817598][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.828557][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.841020][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.851560][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.863701][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.887672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.907567][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.918664][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.974590][ T4350] loop3: detected capacity change from 0 to 512 [ 87.015802][ T4350] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 87.102559][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.138227][ T4350] EXT4-fs (loop3): orphan cleanup on readonly fs [ 87.163118][ T4350] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.6: bg 0: block 248: padding at end of block bitmap is not set [ 87.181836][ T4350] Quota error (device loop3): write_blk: dquota write failed [ 87.189743][ T4350] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 87.199984][ T4350] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.6: Failed to acquire dquot type 1 [ 87.244943][ T4350] EXT4-fs (loop3): 1 truncate cleaned up [ 87.257755][ T4350] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 87.488379][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.564963][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.920096][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.072883][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.176291][ T4258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.257802][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.331612][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.424994][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.510699][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.603806][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.688510][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.788050][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.902292][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.919521][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.082277][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.173286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.223371][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.286495][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.384438][ T4258] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.414717][ T4258] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.423997][ T4258] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.438591][ T4258] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.563706][ T4344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.597797][ T4344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.644874][ T4344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.659243][ T4344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.816044][ T4254] device veth0_macvtap entered promiscuous mode [ 89.826848][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 89.861544][ T4255] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.889762][ T4255] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.909248][ T4255] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.926888][ T4255] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.090001][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.115651][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.124272][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.136546][ T4254] device veth1_macvtap entered promiscuous mode [ 90.290793][ T4360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 90.871303][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.885333][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.895789][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.907006][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.918605][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.929716][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.941155][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.966470][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.979452][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.012608][ T27] audit: type=1800 audit(1749763068.695:2): pid=4360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 91.013195][ T4360] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 91.043619][ T4360] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 91.053589][ T4360] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 91.070426][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.079438][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.201710][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.202379][ T4360] syz.3.7 (4360) used greatest stack depth: 20200 bytes left [ 91.243370][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.259949][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.270834][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.280774][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.297430][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.308146][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.327663][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.340899][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.353229][ T4254] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.362195][ T4254] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.372314][ T4254] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.381550][ T4254] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.415131][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.424427][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.463213][ T4344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.502599][ T4344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.388863][ T4374] process 'syz.1.2' launched './file0' with NULL argv: empty string added [ 93.491382][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.731408][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.781627][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.791737][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.814863][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.849151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.876785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.611715][ T4382] lo speed is unknown, defaulting to 1000 [ 94.614245][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.617804][ T4382] lo speed is unknown, defaulting to 1000 [ 94.688461][ T4382] lo speed is unknown, defaulting to 1000 [ 94.701143][ T4382] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 94.704351][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.715498][ T4382] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 94.734519][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.148940][ T4382] lo speed is unknown, defaulting to 1000 [ 97.962226][ T4382] lo speed is unknown, defaulting to 1000 [ 97.969936][ T4382] lo speed is unknown, defaulting to 1000 [ 97.976808][ T4382] lo speed is unknown, defaulting to 1000 [ 97.984018][ T4382] lo speed is unknown, defaulting to 1000 [ 97.990929][ T4382] lo speed is unknown, defaulting to 1000 [ 97.997828][ T4382] lo speed is unknown, defaulting to 1000 [ 98.093813][ T4398] loop0: detected capacity change from 0 to 1024 [ 98.132102][ T4398] EXT4-fs: Ignoring removed nobh option [ 98.199702][ T4398] EXT4-fs: Ignoring removed bh option [ 99.102646][ T4398] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.257973][ T4407] loop3: detected capacity change from 0 to 512 [ 99.292572][ T4407] EXT4-fs: Ignoring removed oldalloc option [ 99.319117][ T4407] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.354229][ T4407] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.356159][ T4398] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 99.474250][ T4414] tipc: Started in network mode [ 99.482474][ T4414] tipc: Node identity deffe57f2309, cluster identity 4711 [ 99.524961][ T4414] tipc: Enabled bearer , priority 0 [ 99.581024][ T4407] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.14: bg 0: block 64: padding at end of block bitmap is not set [ 99.642467][ T4417] device syzkaller0 entered promiscuous mode [ 99.665923][ T4421] loop1: detected capacity change from 0 to 512 [ 99.788787][ T4414] tipc: Resetting bearer [ 99.797802][ T4407] Quota error (device loop3): write_blk: dquota write failed [ 99.841213][ T4407] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 99.872307][ T4407] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.14: Failed to acquire dquot type 0 [ 99.893665][ T4413] tipc: Resetting bearer [ 99.953292][ T4407] EXT4-fs (loop3): 1 truncate cleaned up [ 99.959040][ T4407] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 99.981698][ T4413] tipc: Disabling bearer [ 100.217479][ T4421] EXT4-fs (loop1): Test dummy encryption mode enabled [ 100.224680][ T4421] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 100.237849][ T4421] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 100.285860][ T4421] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 100.294471][ T4421] System zones: 1-12 [ 100.304630][ T4421] EXT4-fs (loop1): 1 truncate cleaned up [ 100.310589][ T4421] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 101.958267][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 102.345135][ T4257] EXT4-fs (loop0): unmounting filesystem. [ 102.521929][ T4258] EXT4-fs (loop1): unmounting filesystem. [ 102.803342][ T4435] loop4: detected capacity change from 0 to 128 [ 102.852148][ T4435] EXT4-fs (loop4): Test dummy encryption mode enabled [ 102.970126][ T27] audit: type=1326 audit(1749763080.635:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4439 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb41f8e929 code=0x7ffc0000 [ 103.037888][ T4435] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 103.089434][ T4435] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.172130][ T27] audit: type=1326 audit(1749763080.635:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4439 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fdb41f8e929 code=0x7ffc0000 [ 105.001891][ T4453] siw: device registration error -23 [ 105.480130][ T27] audit: type=1326 audit(1749763080.635:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4439 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb41f8e929 code=0x7ffc0000 [ 105.508966][ T27] audit: type=1326 audit(1749763080.635:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4439 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb41f8e929 code=0x7ffc0000 [ 105.998735][ T27] audit: type=1326 audit(1749763080.635:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4439 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb41f8e929 code=0x7ffc0000 [ 106.083002][ T27] audit: type=1326 audit(1749763080.635:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4439 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb41f8e929 code=0x7ffc0000 [ 106.106160][ T27] audit: type=1326 audit(1749763080.635:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4439 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb41f8e929 code=0x7ffc0000 [ 106.256890][ T27] audit: type=1326 audit(1749763080.635:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4439 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdb41f8e929 code=0x7ffc0000 [ 106.282624][ T27] audit: type=1326 audit(1749763080.635:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4439 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb41f8e929 code=0x7ffc0000 [ 106.335661][ T27] audit: type=1326 audit(1749763080.635:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4439 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdb41f90847 code=0x7ffc0000 [ 106.504902][ T27] audit: type=1326 audit(1749763080.645:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4439 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fdb41f907bc code=0x7ffc0000 [ 106.569733][ T4443] lo speed is unknown, defaulting to 1000 [ 106.578168][ T27] audit: type=1326 audit(1749763080.645:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4439 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fdb41f906f4 code=0x7ffc0000 [ 106.641007][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 106.667160][ T4464] loop1: detected capacity change from 0 to 1024 [ 106.675018][ T4464] EXT4-fs: Ignoring removed nobh option [ 106.680702][ T4464] EXT4-fs: Ignoring removed bh option [ 106.702811][ T4464] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 107.093417][ T4468] siw: device registration error -23 [ 107.870807][ T4464] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 108.036417][ T4476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 108.954016][ T4476] syz.3.26 (4476) used greatest stack depth: 18176 bytes left [ 109.259807][ T4478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25'. [ 110.173840][ T4483] loop0: detected capacity change from 0 to 1024 [ 110.277384][ T4492] siw: device registration error -23 [ 110.360953][ T4483] EXT4-fs: Ignoring removed nobh option [ 110.526062][ T4483] EXT4-fs: Ignoring removed bh option [ 111.011617][ T4491] loop2: detected capacity change from 0 to 1024 [ 111.049830][ T4483] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 111.078660][ T4491] EXT4-fs: Ignoring removed nobh option [ 111.094967][ T4491] EXT4-fs: Ignoring removed bh option [ 111.112871][ T4491] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 111.142276][ T4483] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 111.206851][ T4491] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 111.354334][ T4501] loop3: detected capacity change from 0 to 1024 [ 111.448283][ T4501] EXT4-fs: Ignoring removed nobh option [ 111.477720][ T4501] EXT4-fs: Ignoring removed bh option [ 111.579641][ T4505] siw: device registration error -23 [ 111.738731][ T4501] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 112.471451][ T4501] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 112.620795][ T4487] EXT4-fs error (device loop2): ext4_ext_map_blocks:4183: inode #15: comm syz.2.29: bad extent address lblock: 296, depth: 1 pblock 0 [ 113.004361][ T4487] EXT4-fs error (device loop2): ext4_ext_map_blocks:4183: inode #15: comm syz.2.29: bad extent address lblock: 296, depth: 1 pblock 0 [ 113.785549][ T4518] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.32: Allocating blocks 497-513 which overlap fs metadata [ 113.883980][ T4306] EXT4-fs error (device loop2): ext4_ext_map_blocks:4183: inode #15: comm kworker/u4:5: bad extent address lblock: 1, depth: 1 pblock 0 [ 113.917684][ T4306] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 113.992522][ T4306] EXT4-fs (loop2): This should not happen!! Data will be lost [ 113.992522][ T4306] [ 114.035135][ T4306] EXT4-fs error (device loop2): ext4_ext_map_blocks:4183: inode #15: comm kworker/u4:5: bad extent address lblock: 288, depth: 1 pblock 0 [ 114.065231][ T4520] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 114.077247][ T4520] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 114.101347][ T4483] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3841: comm syz.0.27: Allocating blocks 497-513 which overlap fs metadata [ 114.116412][ T4306] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 288 with max blocks 1 with error 117 [ 114.130398][ T4306] EXT4-fs (loop2): This should not happen!! Data will be lost [ 114.130398][ T4306] [ 114.170775][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 114.453278][ T4529] device syzkaller0 entered promiscuous mode [ 114.759668][ T4531] siw: device registration error -23 [ 114.989950][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 115.573793][ T4257] EXT4-fs (loop0): unmounting filesystem. [ 115.707397][ T4536] loop2: detected capacity change from 0 to 512 [ 115.845415][ T4536] EXT4-fs (loop2): 1 orphan inode deleted [ 115.859772][ T4536] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 115.941612][ T4344] __quota_error: 28 callbacks suppressed [ 115.941631][ T4344] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 115.961090][ T4536] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.025502][ T4344] EXT4-fs error (device loop2): ext4_release_dquot:6850: comm kworker/u4:9: Failed to release dquot type 1 [ 116.244400][ T4547] syz.0.38[4547] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.244511][ T4547] syz.0.38[4547] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.262414][ T4547] loop0: detected capacity change from 0 to 256 [ 116.280828][ T4547] exfat: Unknown parameter 'iocrarseyrillicdiscard' [ 116.523858][ T4549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'. [ 117.931734][ T4448] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 118.906885][ T4538] lo speed is unknown, defaulting to 1000 [ 119.276559][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 120.371111][ T4560] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 120.723637][ T4563] loop3: detected capacity change from 0 to 2048 [ 121.786861][ T4563] loop3: p1 < > p3 [ 121.795254][ T4563] loop3: p3 size 134217728 extends beyond EOD, truncated [ 121.854253][ T4566] lo speed is unknown, defaulting to 1000 [ 122.202648][ T4571] loop0: detected capacity change from 0 to 1024 [ 122.256287][ T4571] EXT4-fs: Ignoring removed nobh option [ 122.300119][ T4571] EXT4-fs: Ignoring removed bh option [ 122.342722][ T4571] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.375063][ T4339] udevd[4339]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 122.407625][ T4448] udevd[4448]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 122.537579][ T4571] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 122.955178][ T4580] lo speed is unknown, defaulting to 1000 [ 123.104371][ T4263] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 123.114828][ T4263] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 123.129238][ T4263] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 123.138958][ T4263] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 123.147547][ T4263] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 123.160134][ T4263] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 123.329476][ T4584] lo speed is unknown, defaulting to 1000 [ 124.213201][ T4584] chnl_net:caif_netlink_parms(): no params data found [ 124.625061][ T4594] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 124.638938][ T4594] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 126.391196][ T4595] loop3: detected capacity change from 0 to 512 [ 126.697063][ T4263] Bluetooth: hci5: command 0x0409 tx timeout [ 126.767341][ T4595] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 126.897716][ T4595] EXT4-fs (loop3): orphan cleanup on readonly fs [ 126.914728][ T4595] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.51: bg 0: block 248: padding at end of block bitmap is not set [ 126.933586][ T4595] Quota error (device loop3): write_blk: dquota write failed [ 126.941491][ T4595] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 126.951667][ T4595] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.51: Failed to acquire dquot type 1 [ 126.973877][ T4595] EXT4-fs (loop3): 1 truncate cleaned up [ 126.988461][ T4595] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 127.719389][ T4595] EXT4-fs (loop3): unmounting filesystem. [ 128.014912][ T4257] EXT4-fs (loop0): unmounting filesystem. [ 128.252621][ T4603] loop4: detected capacity change from 0 to 2048 [ 128.575195][ T4584] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.582468][ T4584] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.590779][ T4584] device bridge_slave_0 entered promiscuous mode [ 128.628336][ T4461] EXT4-fs (loop1): unmounting filesystem. [ 128.635775][ T4584] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.648325][ T4584] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.676160][ T4603] loop4: p1 < > p3 [ 128.679020][ T4584] device bridge_slave_1 entered promiscuous mode [ 128.719032][ T4603] loop4: p3 size 134217728 extends beyond EOD, truncated [ 128.751082][ T4263] Bluetooth: hci5: command 0x041b tx timeout [ 129.026640][ T4612] loop2: detected capacity change from 0 to 1024 [ 129.059396][ T4612] EXT4-fs: Ignoring removed nobh option [ 129.070968][ T4612] EXT4-fs: Ignoring removed bh option [ 129.088614][ T4609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.52'. [ 129.106912][ T4612] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 129.329347][ T4584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.384842][ T4612] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 129.385184][ T4584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.539541][ T4584] team0: Port device team_slave_0 added [ 129.556838][ T4617] loop4: detected capacity change from 0 to 512 [ 129.572628][ T4447] udevd[4447]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 129.572901][ T4448] udevd[4448]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 129.604155][ T4617] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 129.657758][ T4621] loop3: detected capacity change from 0 to 512 [ 129.695208][ T4617] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.56: bad orphan inode 17 [ 129.735083][ T4584] team0: Port device team_slave_1 added [ 129.779959][ T4617] EXT4-fs (loop4): Remounting filesystem read-only [ 129.786550][ T4617] ext4_test_bit(bit=16, block=4) = 1 [ 129.815928][ T4627] loop0: detected capacity change from 0 to 512 [ 129.840981][ T4621] EXT4-fs (loop3): 1 orphan inode deleted [ 129.854277][ T4617] is_bad_inode(inode)=0 [ 129.859697][ T4621] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 129.881654][ T4394] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 129.909873][ T4617] NEXT_ORPHAN(inode)=2147418128 [ 129.914854][ T4617] max_ino=32 [ 129.918099][ T4617] i_nlink=0 [ 129.934580][ T4627] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 129.950147][ T4584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.970038][ T4621] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.974287][ T4394] EXT4-fs error (device loop3): ext4_release_dquot:6850: comm kworker/u4:12: Failed to release dquot type 1 [ 129.986585][ T4617] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 130.040848][ T4584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.120679][ T4617] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 130.139708][ T4627] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.57: bad orphan inode 17 [ 130.168477][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 130.229808][ T4584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.318064][ T4584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.326495][ T4627] EXT4-fs (loop0): Remounting filesystem read-only [ 130.332087][ T4584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.365815][ T4627] ext4_test_bit(bit=16, block=4) = 1 [ 130.392622][ T4627] is_bad_inode(inode)=0 [ 130.411772][ T4627] NEXT_ORPHAN(inode)=2147418128 [ 130.431389][ T4627] max_ino=32 [ 130.446327][ T4627] i_nlink=0 [ 130.456718][ T4627] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 130.478930][ T4584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.525417][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 130.665240][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 130.782578][ T4631] lo speed is unknown, defaulting to 1000 [ 130.827832][ T4584] device hsr_slave_0 entered promiscuous mode [ 130.836185][ T4263] Bluetooth: hci5: command 0x040f tx timeout [ 130.871404][ T4584] device hsr_slave_1 entered promiscuous mode [ 130.886364][ T4584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.906533][ T4584] Cannot create hsr debugfs directory [ 130.932930][ T4257] EXT4-fs (loop0): unmounting filesystem. [ 131.472093][ T4638] siw: device registration error -23 [ 131.654892][ T4640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.61'. [ 131.773560][ T4643] lo speed is unknown, defaulting to 1000 [ 131.923638][ T33] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.062125][ T4584] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 132.539292][ T33] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.559436][ T4584] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 132.589146][ T4584] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 132.603217][ T4584] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 132.760309][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.767181][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.798683][ T33] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.911691][ T4263] Bluetooth: hci5: command 0x0419 tx timeout [ 132.945374][ T33] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.951320][ T4662] loop3: detected capacity change from 0 to 512 [ 133.076906][ T4584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.102414][ T4662] EXT4-fs (loop3): 1 orphan inode deleted [ 133.121031][ T4375] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 133.142792][ T4662] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 133.173405][ T4375] EXT4-fs error (device loop3): ext4_release_dquot:6850: comm kworker/u4:11: Failed to release dquot type 1 [ 133.206874][ T4662] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.415369][ T4584] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.474311][ T4669] loop0: detected capacity change from 0 to 1024 [ 133.481814][ T4669] EXT4-fs: Ignoring removed nobh option [ 133.487441][ T4669] EXT4-fs: Ignoring removed bh option [ 133.539793][ T4669] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 133.541713][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.163686][ T4669] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 134.238920][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.308789][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.327591][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.348062][ T4375] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.355293][ T4375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.388342][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.429314][ T4676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.67'. [ 134.531364][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 134.625327][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.641315][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.685160][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.692421][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.740352][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 134.977384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.991475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.041344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.077195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.105573][ T4257] EXT4-fs (loop0): unmounting filesystem. [ 135.117498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.141752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.168492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.355580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.709290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 136.197689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.671339][ T4691] loop0: detected capacity change from 0 to 8192 [ 136.786955][ T4700] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 136.799979][ T4700] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 137.901181][ T4709] loop3: detected capacity change from 0 to 1024 [ 138.051652][ T4709] EXT4-fs: Ignoring removed nobh option [ 138.057383][ T4709] EXT4-fs: Ignoring removed bh option [ 138.130330][ T4709] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 138.560915][ T4709] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 138.658877][ T4720] siw: device registration error -23 [ 140.455365][ T4584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.538980][ T4726] lo speed is unknown, defaulting to 1000 [ 140.683281][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.750609][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.027775][ T4733] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 141.039108][ T4733] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 141.476481][ T4737] siw: device registration error -23 [ 141.557187][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 142.417885][ T4757] loop0: detected capacity change from 0 to 1024 [ 143.075147][ T4757] EXT4-fs: Ignoring removed nobh option [ 143.113302][ T4750] siw: device registration error -23 [ 143.126129][ T4752] siw: device registration error -23 [ 143.135606][ T33] device hsr_slave_0 left promiscuous mode [ 143.176065][ T4757] EXT4-fs: Ignoring removed bh option [ 143.211701][ T33] device hsr_slave_1 left promiscuous mode [ 143.225372][ T4757] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 143.427730][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.460320][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.493035][ T4757] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 143.501332][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.587939][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.827464][ T33] device bridge_slave_1 left promiscuous mode [ 143.855597][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.917838][ T4772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.84'. [ 144.253075][ T33] device bridge_slave_0 left promiscuous mode [ 144.281314][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.379159][ T4782] siw: device registration error -23 [ 145.205947][ T33] device veth1_macvtap left promiscuous mode [ 145.213815][ T33] device veth0_macvtap left promiscuous mode [ 145.233712][ T33] device veth1_vlan left promiscuous mode [ 145.270326][ T33] device veth0_vlan left promiscuous mode [ 145.637928][ T4792] siw: device registration error -23 [ 146.799297][ T4748] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3841: comm syz.0.81: Allocating blocks 497-513 which overlap fs metadata [ 146.828949][ T4748] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3841: comm syz.0.81: Allocating blocks 497-513 which overlap fs metadata [ 147.738383][ T4779] EXT4-fs (loop0): pa ffff888054a359a0: logic 448, phys. 193, len 20 [ 147.747352][ T4779] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 147.881151][ T4257] EXT4-fs (loop0): unmounting filesystem. [ 148.387998][ T33] team0 (unregistering): Port device team_slave_1 removed [ 148.446874][ T33] team0 (unregistering): Port device team_slave_0 removed [ 148.492959][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.562501][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.059495][ T33] bond0 (unregistering): Released all slaves [ 149.168845][ T4772] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 149.178644][ T4772] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 149.188400][ T4772] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 149.383573][ T4807] device bridge_slave_0 left promiscuous mode [ 149.437479][ T4823] tmpfs: Bad value for 'mpol' [ 149.453646][ T4807] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.473710][ T4807] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 149.511255][ T4814] device syzkaller0 entered promiscuous mode [ 149.567501][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.597771][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.778473][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.808342][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.836580][ T4829] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 149.866063][ T4584] device veth0_vlan entered promiscuous mode [ 149.882121][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.918600][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.957505][ T4584] device veth1_vlan entered promiscuous mode [ 149.975663][ T4827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.93'. [ 150.056110][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 150.098271][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 150.153012][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.212759][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.232268][ T4584] device veth0_macvtap entered promiscuous mode [ 150.261464][ T4584] device veth1_macvtap entered promiscuous mode [ 150.342662][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.388749][ T4840] loop0: detected capacity change from 0 to 1024 [ 150.407990][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.439634][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.493355][ T4840] EXT4-fs: Ignoring removed nobh option [ 150.513857][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.567849][ T4840] EXT4-fs: Ignoring removed bh option [ 150.588635][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.600453][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.610417][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.621088][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.632492][ T4584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.653089][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.671214][ T4845] loop2: detected capacity change from 0 to 1024 [ 150.679052][ T4840] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 150.683997][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.004643][ T4845] EXT4-fs: Ignoring removed nobh option [ 151.480776][ T4845] EXT4-fs: Ignoring removed bh option [ 151.500985][ T4845] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 151.540692][ T4840] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 151.587143][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.599656][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.609520][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.620131][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.630153][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.640759][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.650670][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.661959][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.673426][ T4584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.684269][ T4584] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.709862][ T4584] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.718631][ T4584] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.862783][ T4584] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.027822][ T4845] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 152.712249][ T4863] loop4: detected capacity change from 0 to 1024 [ 152.774918][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.800547][ T4863] EXT4-fs: Ignoring removed nobh option [ 152.806190][ T4863] EXT4-fs: Ignoring removed bh option [ 152.820548][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.888502][ T4863] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 153.180704][ T4689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.189549][ T4689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.332224][ T4863] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 153.635756][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.972240][ T27] audit: type=1800 audit(1749763131.655:43): pid=4854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.95" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 154.172860][ T4351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.216803][ T4351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.235242][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 154.359476][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 154.461205][ T4257] EXT4-fs (loop0): unmounting filesystem. [ 154.500634][ T4879] loop3: detected capacity change from 0 to 1024 [ 154.509251][ T4857] ================================================================== [ 154.517350][ T4857] BUG: KASAN: use-after-free in ext4_find_extent+0xbcc/0xe00 [ 154.524906][ T4857] Read of size 4 at addr ffff888051669018 by task syz.4.100/4857 [ 154.532676][ T4857] [ 154.535045][ T4857] CPU: 0 PID: 4857 Comm: syz.4.100 Not tainted 6.1.141-syzkaller #0 [ 154.543056][ T4857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.553247][ T4857] Call Trace: [ 154.556558][ T4857] [ 154.559517][ T4857] dump_stack_lvl+0x168/0x22e [ 154.564246][ T4857] ? __lock_acquire+0x7c50/0x7c50 [ 154.569319][ T4857] ? show_regs_print_info+0x12/0x12 [ 154.574652][ T4857] ? load_image+0x3b0/0x3b0 [ 154.579194][ T4857] ? __virt_addr_valid+0x465/0x540 [ 154.584343][ T4857] ? ext4_find_extent+0xbcc/0xe00 [ 154.589386][ T4857] print_report+0xa8/0x220 [ 154.593819][ T4857] kasan_report+0x10b/0x140 [ 154.598346][ T4857] ? ext4_find_extent+0xbcc/0xe00 [ 154.603389][ T4857] ext4_find_extent+0xbcc/0xe00 [ 154.608262][ T4857] ext4_ext_map_blocks+0x27d/0x66d0 [ 154.613489][ T4857] ? __lock_acquire+0x12e5/0x7c50 [ 154.618549][ T4857] ? ext4_ext_release+0x10/0x10 [ 154.623421][ T4857] ? rwsem_write_trylock+0x12f/0x1b0 [ 154.628724][ T4857] ? ext4_es_lookup_extent+0x443/0xb20 [ 154.634211][ T4857] ext4_map_blocks+0x9d1/0x1b60 [ 154.639074][ T4857] ? ext4_issue_zeroout+0x250/0x250 [ 154.644285][ T4857] _ext4_get_block+0x1d7/0x4e0 [ 154.649072][ T4857] ? alloc_buffer_head+0xd4/0x100 [ 154.654110][ T4857] ? __lock_acquire+0x7c50/0x7c50 [ 154.659144][ T4857] ? ext4_get_block+0x40/0x40 [ 154.663871][ T4857] ? attach_page_private+0x110/0x300 [ 154.669175][ T4857] ? create_empty_buffers+0x59e/0x7a0 [ 154.674564][ T4857] ? do_raw_spin_unlock+0x11d/0x230 [ 154.679794][ T4857] ext4_get_block_unwritten+0x2a/0x100 [ 154.685266][ T4857] __block_write_begin_int+0x54b/0x1a70 [ 154.690842][ T4857] ? _ext4_get_block+0x4e0/0x4e0 [ 154.695785][ T4857] ? page_zero_new_buffers+0x650/0x650 [ 154.701269][ T4857] ? ext4_journal_check_start+0x17e/0x240 [ 154.706999][ T4857] block_page_mkwrite+0x2d8/0x5f0 [ 154.712046][ T4857] ? _ext4_get_block+0x4e0/0x4e0 [ 154.717003][ T4857] ext4_page_mkwrite+0x3b2/0x10c0 [ 154.722050][ T4857] ? _ext4_get_block+0x4e0/0x4e0 [ 154.727008][ T4857] ? ext4_change_inode_journal_flag+0x6b0/0x6b0 [ 154.733268][ T4857] ? count_memcg_event_mm+0x8f/0x3b0 [ 154.738569][ T4857] ? count_memcg_event_mm+0x358/0x3b0 [ 154.743956][ T4857] ? vm_normal_page+0x95/0x1d0 [ 154.748739][ T4857] do_page_mkwrite+0x16b/0x5c0 [ 154.753518][ T4857] wp_page_shared+0x167/0x370 [ 154.758211][ T4857] handle_mm_fault+0x1ca6/0x3e70 [ 154.763159][ T4857] ? mt_find+0x145/0x810 [ 154.767425][ T4857] ? numa_migrate_prep+0x250/0x250 [ 154.772553][ T4857] ? lock_chain_count+0x20/0x20 [ 154.777526][ T4857] ? lock_mm_and_find_vma+0xae/0x2f0 [ 154.782836][ T4857] do_user_addr_fault+0x51f/0xb10 [ 154.787892][ T4857] exc_page_fault+0x60/0x100 [ 154.792506][ T4857] asm_exc_page_fault+0x22/0x30 [ 154.797370][ T4857] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 154.803984][ T4857] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 154.823611][ T4857] RSP: 0018:ffffc90003bffa88 EFLAGS: 00050246 [ 154.829703][ T4857] RAX: ffffffff8407c001 RBX: 0000000000000040 RCX: 0000000000000040 [ 154.837687][ T4857] RDX: 0000000000000040 RSI: ffffc90003bffb20 RDI: 0000200000056000 [ 154.845669][ T4857] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffff5200077ff6c [ 154.853651][ T4857] R10: fffff5200077ff6c R11: 1ffff9200077ff64 R12: 00007fffffffefc0 [ 154.861636][ T4857] R13: 000000007ffdca80 R14: 0000200000056000 R15: ffffc90003bffb20 [ 154.869625][ T4857] ? _copy_to_user+0xa1/0x130 [ 154.874323][ T4857] _copy_to_user+0xea/0x130 [ 154.878840][ T4857] rng_dev_read+0x3c5/0x710 [ 154.883356][ T4857] ? hwrng_yield+0x20/0x20 [ 154.887782][ T4857] ? common_file_perm+0x171/0x1c0 [ 154.892823][ T4857] ? fsnotify_perm+0x39b/0x550 [ 154.897636][ T4857] do_iter_read+0x49f/0xb10 [ 154.902152][ T4857] ? vfs_iter_read+0xa0/0xa0 [ 154.906757][ T4857] ? __import_iovec+0x315/0x500 [ 154.911630][ T4857] ? import_iovec+0x6f/0xa0 [ 154.916140][ T4857] do_preadv+0x1f6/0x330 [ 154.920392][ T4857] ? do_writev+0x410/0x410 [ 154.924819][ T4857] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 154.930830][ T4857] ? lock_chain_count+0x20/0x20 [ 154.935695][ T4857] ? lockdep_hardirqs_on+0x94/0x140 [ 154.940909][ T4857] do_syscall_64+0x4c/0xa0 [ 154.945344][ T4857] ? clear_bhb_loop+0x60/0xb0 [ 154.950030][ T4857] ? clear_bhb_loop+0x60/0xb0 [ 154.954722][ T4857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.960642][ T4857] RIP: 0033:0x7efc98d8e929 [ 154.965080][ T4857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.984692][ T4857] RSP: 002b:00007efc99bf1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 154.993116][ T4857] RAX: ffffffffffffffda RBX: 00007efc98fb5fa0 RCX: 00007efc98d8e929 [ 155.001099][ T4857] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 155.009073][ T4857] RBP: 00007efc98e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 155.017139][ T4857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.025117][ T4857] R13: 0000000000000000 R14: 00007efc98fb5fa0 R15: 00007ffe1660f578 [ 155.033103][ T4857] [ 155.036129][ T4857] [ 155.038465][ T4857] The buggy address belongs to the physical page: [ 155.044888][ T4857] page:ffffea0001459a40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x51669 [ 155.055061][ T4857] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 155.062186][ T4857] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 155.070773][ T4857] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 155.079439][ T4857] page dumped because: kasan: bad access detected [ 155.085860][ T4857] page_owner tracks the page as freed [ 155.091230][ T4857] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 4753, tgid 4743 (syz.3.80), ts 144296842095, free_ts 145445951885 [ 155.109727][ T4857] post_alloc_hook+0x173/0x1a0 [ 155.114510][ T4857] get_page_from_freelist+0x1a26/0x1ac0 [ 155.120058][ T4857] __alloc_pages+0x1df/0x4e0 [ 155.124654][ T4857] __folio_alloc+0xe/0x30 [ 155.129011][ T4857] vma_alloc_folio+0x4a3/0x900 [ 155.133792][ T4857] handle_mm_fault+0x2242/0x3e70 [ 155.138738][ T4857] __get_user_pages+0x3ff/0xeb0 [ 155.143609][ T4857] populate_vma_page_range+0x214/0x2b0 [ 155.149083][ T4857] __mm_populate+0x248/0x370 [ 155.153681][ T4857] __se_sys_mremap+0x7e9/0x10f0 [ 155.158539][ T4857] do_syscall_64+0x4c/0xa0 [ 155.162973][ T4857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.168880][ T4857] page last free stack trace: [ 155.173552][ T4857] free_unref_page_prepare+0x8b4/0x9a0 [ 155.179034][ T4857] free_unref_page_list+0xbb/0x8e0 [ 155.184157][ T4857] release_pages+0x1f92/0x2200 [ 155.188932][ T4857] tlb_flush_mmu+0xff/0x210 [ 155.193460][ T4857] unmap_page_range+0x1f4a/0x2500 [ 155.198490][ T4857] unmap_vmas+0x22c/0x330 [ 155.202822][ T4857] exit_mmap+0x1cc/0x8e0 [ 155.207079][ T4857] __mmput+0x118/0x3c0 [ 155.211153][ T4857] exit_mm+0x1e6/0x2c0 [ 155.215233][ T4857] do_exit+0x8b9/0x2400 [ 155.219400][ T4857] do_group_exit+0x217/0x2d0 [ 155.224000][ T4857] get_signal+0x1272/0x1350 [ 155.228520][ T4857] arch_do_signal_or_restart+0xb0/0x1230 [ 155.234164][ T4857] exit_to_user_mode_loop+0x70/0x110 [ 155.239467][ T4857] exit_to_user_mode_prepare+0xb1/0x140 [ 155.245023][ T4857] irqentry_exit_to_user_mode+0x5/0x30 [ 155.250487][ T4857] [ 155.252813][ T4857] Memory state around the buggy address: [ 155.258445][ T4857] ffff888051668f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 155.266603][ T4857] ffff888051668f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 155.274685][ T4857] >ffff888051669000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 155.282833][ T4857] ^ [ 155.287687][ T4857] ffff888051669080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 155.295751][ T4857] ffff888051669100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 155.303820][ T4857] ================================================================== [ 155.366145][ T4879] EXT4-fs: Ignoring removed nobh option [ 155.448086][ T4888] loop5: detected capacity change from 0 to 1024 [ 155.455509][ T4888] EXT4-fs: Ignoring removed nobh option [ 155.461202][ T4888] EXT4-fs: Ignoring removed bh option [ 155.476799][ T4888] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 155.476980][ T4879] EXT4-fs: Ignoring removed bh option [ 155.535110][ T4857] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 155.542377][ T4857] CPU: 1 PID: 4857 Comm: syz.4.100 Not tainted 6.1.141-syzkaller #0 [ 155.550569][ T4857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.560666][ T4857] Call Trace: [ 155.563982][ T4857] [ 155.566947][ T4857] dump_stack_lvl+0x168/0x22e [ 155.571670][ T4857] ? memcpy+0x3c/0x60 [ 155.575694][ T4857] ? show_regs_print_info+0x12/0x12 [ 155.580938][ T4857] ? load_image+0x3b0/0x3b0 [ 155.585661][ T4857] panic+0x2c9/0x710 [ 155.589589][ T4857] ? bpf_jit_dump+0xd0/0xd0 [ 155.594123][ T4857] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 155.600060][ T4857] ? _raw_spin_unlock+0x40/0x40 [ 155.604959][ T4857] ? print_memory_metadata+0x314/0x400 [ 155.610529][ T4857] check_panic_on_warn+0x80/0xa0 [ 155.615483][ T4857] ? ext4_find_extent+0xbcc/0xe00 [ 155.620518][ T4857] end_report+0x66/0x110 [ 155.624774][ T4857] kasan_report+0x118/0x140 [ 155.629292][ T4857] ? ext4_find_extent+0xbcc/0xe00 [ 155.634326][ T4857] ext4_find_extent+0xbcc/0xe00 [ 155.639193][ T4857] ext4_ext_map_blocks+0x27d/0x66d0 [ 155.644399][ T4857] ? __lock_acquire+0x12e5/0x7c50 [ 155.649445][ T4857] ? ext4_ext_release+0x10/0x10 [ 155.654306][ T4857] ? rwsem_write_trylock+0x12f/0x1b0 [ 155.659785][ T4857] ? ext4_es_lookup_extent+0x443/0xb20 [ 155.665271][ T4857] ext4_map_blocks+0x9d1/0x1b60 [ 155.670147][ T4857] ? ext4_issue_zeroout+0x250/0x250 [ 155.675391][ T4857] _ext4_get_block+0x1d7/0x4e0 [ 155.680177][ T4857] ? alloc_buffer_head+0xd4/0x100 [ 155.685246][ T4857] ? __lock_acquire+0x7c50/0x7c50 [ 155.690391][ T4857] ? ext4_get_block+0x40/0x40 [ 155.695078][ T4857] ? attach_page_private+0x110/0x300 [ 155.700390][ T4857] ? create_empty_buffers+0x59e/0x7a0 [ 155.705874][ T4857] ? do_raw_spin_unlock+0x11d/0x230 [ 155.711094][ T4857] ext4_get_block_unwritten+0x2a/0x100 [ 155.716571][ T4857] __block_write_begin_int+0x54b/0x1a70 [ 155.722153][ T4857] ? _ext4_get_block+0x4e0/0x4e0 [ 155.727102][ T4857] ? page_zero_new_buffers+0x650/0x650 [ 155.732580][ T4857] ? ext4_journal_check_start+0x17e/0x240 [ 155.738327][ T4857] block_page_mkwrite+0x2d8/0x5f0 [ 155.743356][ T4857] ? _ext4_get_block+0x4e0/0x4e0 [ 155.748303][ T4857] ext4_page_mkwrite+0x3b2/0x10c0 [ 155.753337][ T4857] ? _ext4_get_block+0x4e0/0x4e0 [ 155.758289][ T4857] ? ext4_change_inode_journal_flag+0x6b0/0x6b0 [ 155.764543][ T4857] ? count_memcg_event_mm+0x8f/0x3b0 [ 155.769840][ T4857] ? count_memcg_event_mm+0x358/0x3b0 [ 155.775219][ T4857] ? vm_normal_page+0x95/0x1d0 [ 155.779989][ T4857] do_page_mkwrite+0x16b/0x5c0 [ 155.784763][ T4857] wp_page_shared+0x167/0x370 [ 155.789453][ T4857] handle_mm_fault+0x1ca6/0x3e70 [ 155.794399][ T4857] ? mt_find+0x145/0x810 [ 155.798674][ T4857] ? numa_migrate_prep+0x250/0x250 [ 155.803820][ T4857] ? lock_chain_count+0x20/0x20 [ 155.808701][ T4857] ? lock_mm_and_find_vma+0xae/0x2f0 [ 155.814044][ T4857] do_user_addr_fault+0x51f/0xb10 [ 155.819094][ T4857] exc_page_fault+0x60/0x100 [ 155.823699][ T4857] asm_exc_page_fault+0x22/0x30 [ 155.828561][ T4857] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 155.835179][ T4857] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 155.854798][ T4857] RSP: 0018:ffffc90003bffa88 EFLAGS: 00050246 [ 155.860886][ T4857] RAX: ffffffff8407c001 RBX: 0000000000000040 RCX: 0000000000000040 [ 155.868981][ T4857] RDX: 0000000000000040 RSI: ffffc90003bffb20 RDI: 0000200000056000 [ 155.876965][ T4857] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffff5200077ff6c [ 155.884945][ T4857] R10: fffff5200077ff6c R11: 1ffff9200077ff64 R12: 00007fffffffefc0 [ 155.892938][ T4857] R13: 000000007ffdca80 R14: 0000200000056000 R15: ffffc90003bffb20 [ 155.900921][ T4857] ? _copy_to_user+0xa1/0x130 [ 155.905622][ T4857] _copy_to_user+0xea/0x130 [ 155.910159][ T4857] rng_dev_read+0x3c5/0x710 [ 155.914671][ T4857] ? hwrng_yield+0x20/0x20 [ 155.919102][ T4857] ? common_file_perm+0x171/0x1c0 [ 155.924134][ T4857] ? fsnotify_perm+0x39b/0x550 [ 155.928913][ T4857] do_iter_read+0x49f/0xb10 [ 155.933440][ T4857] ? vfs_iter_read+0xa0/0xa0 [ 155.938037][ T4857] ? __import_iovec+0x315/0x500 [ 155.942900][ T4857] ? import_iovec+0x6f/0xa0 [ 155.947414][ T4857] do_preadv+0x1f6/0x330 [ 155.951666][ T4857] ? do_writev+0x410/0x410 [ 155.956125][ T4857] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 155.962128][ T4857] ? lock_chain_count+0x20/0x20 [ 155.967532][ T4857] ? lockdep_hardirqs_on+0x94/0x140 [ 155.972744][ T4857] do_syscall_64+0x4c/0xa0 [ 155.977352][ T4857] ? clear_bhb_loop+0x60/0xb0 [ 155.982072][ T4857] ? clear_bhb_loop+0x60/0xb0 [ 155.987107][ T4857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.993036][ T4857] RIP: 0033:0x7efc98d8e929 [ 155.997462][ T4857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.017601][ T4857] RSP: 002b:00007efc99bf1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 156.026027][ T4857] RAX: ffffffffffffffda RBX: 00007efc98fb5fa0 RCX: 00007efc98d8e929 [ 156.034011][ T4857] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 156.041990][ T4857] RBP: 00007efc98e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 156.049965][ T4857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.057941][ T4857] R13: 0000000000000000 R14: 00007efc98fb5fa0 R15: 00007ffe1660f578 [ 156.065932][ T4857] [ 156.069301][ T4857] Kernel Offset: disabled [ 156.073634][ T4857] Rebooting in 86400 seconds..