last executing test programs: 6.431049751s ago: executing program 4 (id=20): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) 6.187239465s ago: executing program 4 (id=23): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x101601) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x40095505, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000200)={@private0, 0x0}, &(0x7f0000000340)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r3, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='sys_enter\x00', r4}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) lseek(r6, 0x5, 0x3) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) creat(&(0x7f0000000080)='./bus\x00', 0x1b1) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[], 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r9], 0x90}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0xc, &(0x7f0000000300)=ANY=[@ANYRES64=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 5.103269011s ago: executing program 0 (id=32): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000000f14010027bd7000fcdbdf25110045"], 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x4000) 3.87008343s ago: executing program 0 (id=37): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1a, 0x5, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x19, '\x00', 0x0, 0x38}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 3.035872963s ago: executing program 4 (id=43): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x1, 0x203}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r0, 0x10d81, 0xdefe, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = syz_io_uring_setup(0x10a, &(0x7f0000000340)={0x0, 0xfd69, 0x80, 0x7ffff, 0x2000088}, &(0x7f00000004c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x14, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r8, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$loop(0x0, 0x9, 0x12d600) unshare(0x42000000) 2.859394946s ago: executing program 0 (id=44): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5309, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0xa}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) 2.59549753s ago: executing program 3 (id=46): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) capset(0x0, 0x0) 2.020566449s ago: executing program 2 (id=47): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000700)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @mcast2, 0x9}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000000)="2e5d5a5d65b07205", 0x8, 0x0, 0x0, 0x0) 2.020409089s ago: executing program 3 (id=48): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) 1.852406071s ago: executing program 2 (id=49): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x47c94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) unshare(0x42000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3100000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.852187722s ago: executing program 3 (id=50): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000001dc0), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01012cbd7000fcdbdf250300000008000b00", @ANYRES32=0x0, @ANYBLOB="050002000a0000001400070000000000000000000000000000000008060001"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x48020) 1.799563552s ago: executing program 0 (id=51): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) 1.637275425s ago: executing program 4 (id=53): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYRES8=0x0], 0xfd, 0x1bf, &(0x7f0000000300)="$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") openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 1.593789296s ago: executing program 3 (id=54): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "0000004a650600", "af193cff4810ba5ac120d096eb00000052095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) close(r0) 1.544376517s ago: executing program 0 (id=55): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file0/../file0\x00', 0x1018e58, &(0x7f0000001700)={[{@debug_want_extra_isize}, {@journal_path={'journal_path', 0x3d, './cgroup'}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@dioread_nolock}, {@i_version}]}, 0x6, 0x611, &(0x7f00000017c0)="$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") setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900010000000000000000002001000000ffffffffffffffeb000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c0000"], 0xfc}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000e80)={0xa, 0x4e24, 0x1c1, @mcast1, 0xdd8}, 0x1c) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0x5c, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0x5c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000080)=@filename='./bus\x00', 0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0xffffffffffff6242, 0x1, 0x60cf, 0x401, 0x5, 0xffffffff}) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = open(&(0x7f00000002c0)='./bus\x00', 0x460000, 0x100) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e21, @remote}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000005c0)={r7, 0x8, 0x6, 0x1ff, 0x0, 0x9}, 0x14) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4018040}, 0x11) 1.28545897s ago: executing program 4 (id=56): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "fbffffffffffffff", "1fd33c81cf7995313c09de00fd6ded74", '\x00', "1e00040000000100"}, 0x28) write$binfmt_script(r3, &(0x7f0000000500)={'#! ', './file0'}, 0xb) close_range(r2, r3, 0x0) 1.273595941s ago: executing program 3 (id=57): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="080000000400000004000000a4"], 0x48) r1 = fsopen(&(0x7f0000000380)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r2}, 0x20) 1.236014741s ago: executing program 1 (id=58): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x24, 0x10, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc}, {0x4}, {0x6, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000c00) r0 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = socket$packet(0x11, 0x2, 0x300) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) 1.097002693s ago: executing program 2 (id=59): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 957.223295ms ago: executing program 1 (id=60): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000700)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @mcast2, 0x9}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000000)="2e5d5a5d65b07205", 0x8, 0x0, 0x0, 0x0) 956.426165ms ago: executing program 4 (id=61): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) 886.963786ms ago: executing program 1 (id=62): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/132, 0x84) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) getdents64(r0, &(0x7f0000001f00)=""/4093, 0xffd) 815.385557ms ago: executing program 3 (id=63): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304040000000000000000000003", @ANYRES32=0x0, @ANYBLOB="4101030000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3, @ANYBLOB="0a24e815", @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0xba01}, 0x810) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) getpid() chdir(&(0x7f0000000800)='./bus\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x14, &(0x7f0000001040)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYBLOB="1ad8cd0ac3f63d5e794f784897a43ac66b9b146f447746494d624f002a5fc84b10a427e73e0550c3eed50892decdf7407e693ebb663c599effca4da74c1d27c3c3ae3b5ed1eecac99dec566edd8971ab09747a54d8e323fcd72e94296bec48ff126f4f5de79e1ffacfae98ba95412079ee0bb24e496a6632fa21ce65af3da2ba4e21264d4cdb5ff67f3f29aeda3772fc0d3b855794b7a98188a821881b7d1e9d521d7988cfd54acf6ebae73033d0485e66b823d01a46ced9610b6e895fbb2ed0a4bb0d459dae842265b4fa720b7a3d71da2d816776"], &(0x7f0000000840)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getegid() syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) 815.274157ms ago: executing program 1 (id=64): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000001dc0), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01012cbd7000fcdbdf250300000008000b00", @ANYRES32=0x0, @ANYBLOB="050002000a0000001400070000000000000000000000000000000008060001"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x48020) 601.415471ms ago: executing program 1 (id=65): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x28}}, 0x0) 582.658431ms ago: executing program 2 (id=66): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) 352.924675ms ago: executing program 1 (id=67): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f00000000c0)={0x0, 0xa8}}, 0x0) socket$inet(0x2, 0x2, 0x1) sendmsg$key(0xffffffffffffffff, 0x0, 0x40) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_int(r6, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 352.268275ms ago: executing program 2 (id=68): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYRES8=0x0], 0xfd, 0x1bf, &(0x7f0000000300)="$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") openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 190.622597ms ago: executing program 0 (id=69): bpf$MAP_CREATE(0x0, 0x0, 0x48) getpid() socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000c080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0xff0f000020000080) 0s ago: executing program 2 (id=70): r0 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x1, 0x4000810) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={r2, r3/1000+10000}, 0x10) r4 = shmat(r0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) shmdt(r4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.161' (ED25519) to the list of known hosts. [ 72.209271][ T4242] cgroup: Unknown subsys name 'net' [ 72.368609][ T4242] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.897514][ T4242] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 75.375276][ T4259] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.389101][ T4266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.397003][ T4266] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.405853][ T4266] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.414485][ T4266] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.422959][ T4266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.425579][ T4269] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.430182][ T4266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.438323][ T4269] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.446425][ T4266] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.452135][ T4269] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.460118][ T4266] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.473125][ T4269] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.473449][ T4266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.480566][ T4269] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.488077][ T4266] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.495539][ T4269] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.503267][ T4266] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.509353][ T4269] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.516414][ T4266] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.522981][ T4269] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.529712][ T4266] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.536589][ T4269] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.543510][ T4266] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.559749][ T4269] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.582029][ T4269] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.605168][ T4270] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.612660][ T4270] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.620288][ T4266] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.633294][ T4266] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.085628][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 76.127779][ T4256] chnl_net:caif_netlink_parms(): no params data found [ 76.145652][ T4254] chnl_net:caif_netlink_parms(): no params data found [ 76.246700][ T4253] chnl_net:caif_netlink_parms(): no params data found [ 76.296038][ T4255] chnl_net:caif_netlink_parms(): no params data found [ 76.306576][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.314545][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.323525][ T4264] device bridge_slave_0 entered promiscuous mode [ 76.336154][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.343552][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.351440][ T4264] device bridge_slave_1 entered promiscuous mode [ 76.413287][ T4256] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.420407][ T4256] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.428716][ T4256] device bridge_slave_0 entered promiscuous mode [ 76.467542][ T4256] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.474907][ T4256] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.483303][ T4256] device bridge_slave_1 entered promiscuous mode [ 76.490516][ T4254] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.497851][ T4254] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.506124][ T4254] device bridge_slave_0 entered promiscuous mode [ 76.515786][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.546226][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.553611][ T4254] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.561953][ T4254] device bridge_slave_1 entered promiscuous mode [ 76.570819][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.617939][ T4253] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.625267][ T4253] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.633267][ T4253] device bridge_slave_0 entered promiscuous mode [ 76.648830][ T4256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.673845][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.680990][ T4253] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.689199][ T4253] device bridge_slave_1 entered promiscuous mode [ 76.706655][ T4256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.725851][ T4254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.738241][ T4264] team0: Port device team_slave_0 added [ 76.747046][ T4264] team0: Port device team_slave_1 added [ 76.778145][ T4254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.806095][ T4255] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.813514][ T4255] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.821482][ T4255] device bridge_slave_0 entered promiscuous mode [ 76.832197][ T4256] team0: Port device team_slave_0 added [ 76.854664][ T4253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.864067][ T4255] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.871189][ T4255] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.879617][ T4255] device bridge_slave_1 entered promiscuous mode [ 76.896568][ T4256] team0: Port device team_slave_1 added [ 76.911310][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.918457][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.944539][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.957870][ T4253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.986491][ T4254] team0: Port device team_slave_0 added [ 76.993852][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.000835][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.026893][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.048378][ T4255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.083828][ T4254] team0: Port device team_slave_1 added [ 77.090003][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.097741][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.124154][ T4256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.142643][ T4255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.154174][ T4253] team0: Port device team_slave_0 added [ 77.178201][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.185471][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.211722][ T4256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.234895][ T4253] team0: Port device team_slave_1 added [ 77.258681][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.265840][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.291983][ T4254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.323850][ T4255] team0: Port device team_slave_0 added [ 77.347286][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.354531][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.380877][ T4254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.402323][ T4255] team0: Port device team_slave_1 added [ 77.411445][ T4256] device hsr_slave_0 entered promiscuous mode [ 77.418470][ T4256] device hsr_slave_1 entered promiscuous mode [ 77.426542][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.433594][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.459556][ T4253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.492606][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.499606][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.525920][ T4253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.539610][ T4264] device hsr_slave_0 entered promiscuous mode [ 77.547241][ T4264] device hsr_slave_1 entered promiscuous mode [ 77.554153][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.561994][ T4264] Cannot create hsr debugfs directory [ 77.605185][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.612275][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.622625][ T4266] Bluetooth: hci4: command 0x0409 tx timeout [ 77.638562][ T4255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.651027][ T4266] Bluetooth: hci0: command 0x0409 tx timeout [ 77.655593][ T4257] Bluetooth: hci1: command 0x0409 tx timeout [ 77.670758][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.677866][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.704037][ T4257] Bluetooth: hci2: command 0x0409 tx timeout [ 77.704057][ T4266] Bluetooth: hci3: command 0x0409 tx timeout [ 77.716390][ T4255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.768415][ T4254] device hsr_slave_0 entered promiscuous mode [ 77.775533][ T4254] device hsr_slave_1 entered promiscuous mode [ 77.783182][ T4254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.790831][ T4254] Cannot create hsr debugfs directory [ 77.819876][ T4253] device hsr_slave_0 entered promiscuous mode [ 77.827177][ T4253] device hsr_slave_1 entered promiscuous mode [ 77.833900][ T4253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.841479][ T4253] Cannot create hsr debugfs directory [ 77.905152][ T4255] device hsr_slave_0 entered promiscuous mode [ 77.912384][ T4255] device hsr_slave_1 entered promiscuous mode [ 77.919003][ T4255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.927666][ T4255] Cannot create hsr debugfs directory [ 78.221757][ T4264] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.233703][ T4264] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.247391][ T4264] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.256994][ T4264] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.329890][ T4256] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.346193][ T4256] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.357474][ T4256] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.370919][ T4256] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.454141][ T4255] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.495328][ T4255] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.506570][ T4255] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.517028][ T4255] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.542526][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.562545][ T4253] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.587260][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.596837][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.605661][ T4253] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.616353][ T4253] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.626182][ T4253] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.638440][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.699125][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.708794][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.718335][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.725773][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.735602][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.747971][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.756814][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.764050][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.774111][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.786546][ T4254] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.797296][ T4254] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.810586][ T4254] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.822816][ T4254] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.845554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.856582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.894853][ T4256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.902092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.911022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.921122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.976414][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.986775][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.997155][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.007951][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.017628][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.026363][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.040853][ T4264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.052899][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.079802][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.089497][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.104159][ T4256] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.148608][ T4253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.175298][ T4255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.189081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.198308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.215922][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.223230][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.232823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.242993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.257917][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.265118][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.299300][ T4253] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.326770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.338586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.347966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.356725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.364811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.375026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.383610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.395834][ T4255] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.414357][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.427496][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.439539][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.455814][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.469190][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.476407][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.493048][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.510498][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.519528][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.535050][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.550809][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.558115][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.571362][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.579821][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.588820][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.597947][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.606796][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.614334][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.629110][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.637632][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.646399][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.656279][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.665615][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.708839][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.716201][ T4272] Bluetooth: hci1: command 0x041b tx timeout [ 79.722798][ T4272] Bluetooth: hci0: command 0x041b tx timeout [ 79.728060][ T4257] Bluetooth: hci4: command 0x041b tx timeout [ 79.731079][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.745013][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.754645][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.765525][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.772656][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.780652][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.782416][ T4257] Bluetooth: hci3: command 0x041b tx timeout [ 79.791403][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.794909][ T4266] Bluetooth: hci2: command 0x041b tx timeout [ 79.808673][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.823718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.832832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.843507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.857201][ T4254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.878436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.887262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.919360][ T4254] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.937586][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.951491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.960642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.970171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.979461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.989436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.998341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.040221][ T4255] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.053886][ T4255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.070329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.078653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.087562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.097447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.107336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.116509][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.123682][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.131489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.141308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.153789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.162547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.171079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.180017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.189315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.198253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.207496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.215913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.234452][ T4253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.253281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.267691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.292803][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.299979][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.322464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.334318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.352522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.404498][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.450339][ T4264] device veth0_vlan entered promiscuous mode [ 80.474087][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.493271][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.512297][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.527826][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.539823][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.551123][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.560815][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.574239][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.587917][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.610384][ T4264] device veth1_vlan entered promiscuous mode [ 80.630035][ T4254] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.647602][ T4254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.672514][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.690813][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.712964][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.726411][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.758721][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.807115][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.821442][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.840209][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.848040][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.900671][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.911033][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.934768][ T4256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.955154][ T4264] device veth0_macvtap entered promiscuous mode [ 80.987679][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.002552][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.010120][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.043036][ T4264] device veth1_macvtap entered promiscuous mode [ 81.053519][ T4255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.093136][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.114587][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.123657][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.134270][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.144696][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.165287][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.185666][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.200828][ T4255] device veth0_vlan entered promiscuous mode [ 81.210431][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.234483][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.250091][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.259111][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.278316][ T4264] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.294125][ T4264] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.304167][ T4264] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.313280][ T4264] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.331725][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.340249][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.366095][ T4255] device veth1_vlan entered promiscuous mode [ 81.419399][ T4253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.433109][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.440849][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.532450][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.541256][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.606455][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.624310][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.640542][ T4255] device veth0_macvtap entered promiscuous mode [ 81.693352][ T4253] device veth0_vlan entered promiscuous mode [ 81.704005][ T4255] device veth1_macvtap entered promiscuous mode [ 81.716642][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.729524][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.740385][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.755234][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.767949][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.778697][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.781784][ T4272] Bluetooth: hci4: command 0x040f tx timeout [ 81.792119][ T4257] Bluetooth: hci0: command 0x040f tx timeout [ 81.799033][ T4257] Bluetooth: hci1: command 0x040f tx timeout [ 81.828090][ T4253] device veth1_vlan entered promiscuous mode [ 81.849482][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.861883][ T4257] Bluetooth: hci3: command 0x040f tx timeout [ 81.867969][ T4257] Bluetooth: hci2: command 0x040f tx timeout [ 81.897004][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.925425][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.961867][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.970805][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.997612][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.009053][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.024443][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.063550][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.077268][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.088994][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.104085][ T4254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.118013][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.136083][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.136327][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.160144][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.171019][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.189016][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.251170][ T4253] device veth0_macvtap entered promiscuous mode [ 82.260499][ T4255] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.278753][ T4255] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.289073][ T4255] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.303646][ T4255] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.318974][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.328207][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.362823][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.371326][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.380387][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.393259][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.409120][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.412746][ T4253] device veth1_macvtap entered promiscuous mode [ 82.442907][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.450996][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.461257][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.500572][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.512850][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.523274][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.534907][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.548165][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.581114][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.599238][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.616934][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.627543][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.638985][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.651567][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.665460][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.697348][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.751805][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.760771][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.770909][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.780480][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.789772][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.802357][ T4253] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.811262][ T4253] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.824661][ T4343] loop2: detected capacity change from 0 to 1024 [ 82.825803][ T4253] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.834351][ T4343] ======================================================= [ 82.834351][ T4343] WARNING: The mand mount option has been deprecated and [ 82.834351][ T4343] and is ignored by this kernel. Remove the mand [ 82.834351][ T4343] option from the mount to silence this warning. [ 82.834351][ T4343] ======================================================= [ 82.872410][ T4253] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.894382][ T4254] device veth0_vlan entered promiscuous mode [ 82.925069][ T4256] device veth0_vlan entered promiscuous mode [ 82.939665][ T4343] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 82.965691][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.985957][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.995570][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.003602][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.015150][ T27] audit: type=1800 audit(1750935068.970:2): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 83.048568][ T4256] device veth1_vlan entered promiscuous mode [ 83.055787][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.071346][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.084084][ T4254] device veth1_vlan entered promiscuous mode [ 83.111350][ T4343] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.3: Allocating blocks 449-513 which overlap fs metadata [ 83.111990][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.134609][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.148006][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.157834][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.165147][ T4342] EXT4-fs (loop2): pa ffff888071c1d8c0: logic 48, phys. 177, len 21 [ 83.165264][ T4342] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 4 [ 83.229571][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.232242][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.245311][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.246721][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.267895][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.278742][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.296353][ T4256] device veth0_macvtap entered promiscuous mode [ 83.329339][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.344612][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.349105][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 83.354897][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.393136][ T4254] device veth0_macvtap entered promiscuous mode [ 83.430161][ T4254] device veth1_macvtap entered promiscuous mode [ 83.484168][ T4256] device veth1_macvtap entered promiscuous mode [ 83.572096][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.588584][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.613122][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.644395][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.664852][ T4350] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 83.681937][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.704290][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.706472][ T4350] loop3: detected capacity change from 0 to 512 [ 83.716967][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.741784][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.752730][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.769025][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.780599][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.792944][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.808486][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.818720][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.861719][ T4257] Bluetooth: hci1: command 0x0419 tx timeout [ 83.868627][ T4266] Bluetooth: hci0: command 0x0419 tx timeout [ 83.900059][ T4272] Bluetooth: hci4: command 0x0419 tx timeout [ 84.107939][ T4268] Bluetooth: hci2: command 0x0419 tx timeout [ 84.178759][ T4357] loop2: detected capacity change from 0 to 512 [ 84.191227][ T4357] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.197897][ T4357] EXT4-fs: Ignoring removed bh option [ 84.210409][ T4268] Bluetooth: hci3: command 0x0419 tx timeout [ 84.244715][ T4357] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 84.256230][ T4357] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 84.270358][ T4357] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.416157][ T4350] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 84.455337][ T4357] EXT4-fs (loop2): 1 truncate cleaned up [ 84.457278][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.461083][ T4357] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 84.473010][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.519186][ T4350] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.616547][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.617530][ T4282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.669835][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.694081][ T4282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.717600][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.745769][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.787264][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.798097][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.809896][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.818551][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.839563][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.850588][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.863000][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.871945][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.880920][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.889501][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.898929][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.928673][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.943005][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.953174][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.963998][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.974212][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.984963][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.995171][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.005836][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.019246][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.021382][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 85.049170][ T4256] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.059703][ T4256] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.069274][ T4256] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.079451][ T4256] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.105305][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.126091][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.139811][ T4254] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.149842][ T4254] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.158843][ T4254] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.169288][ T4254] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.219406][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.255975][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.331837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.423032][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.453355][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.470983][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.493617][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.537676][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.602985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.612701][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.620742][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.768774][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.804979][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 86.091058][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.131245][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.163193][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.520694][ T4383] loop4: detected capacity change from 0 to 256 [ 86.584227][ T4381] loop0: detected capacity change from 0 to 2048 [ 86.664895][ T128] cfg80211: failed to load regulatory.db [ 86.697679][ T27] audit: type=1804 audit(1750935072.650:3): pid=4383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.11" name="/newroot/1/file1/file0" dev="loop4" ino=1048595 res=1 errno=0 [ 86.721098][ T4381] loop0: p4 < > [ 87.926658][ T4395] netlink: 36 bytes leftover after parsing attributes in process `syz.4.17'. [ 88.594936][ T4416] mmap: syz.3.26 (4416) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.959463][ T4424] loop2: detected capacity change from 0 to 128 [ 88.985067][ T26] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.036866][ T4424] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 89.138580][ T4424] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.139612][ T4432] block device autoloading is deprecated and will be removed. [ 89.151787][ T26] usb 5-1: device descriptor read/64, error -71 [ 89.460444][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 89.471803][ T26] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.812845][ T26] usb 5-1: device descriptor read/64, error -71 [ 89.855033][ T4446] loop3: detected capacity change from 0 to 256 [ 89.951975][ T26] usb usb5-port1: attempt power cycle [ 90.386464][ T4448] loop2: detected capacity change from 0 to 512 [ 90.398456][ T4448] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.405139][ T4448] EXT4-fs: Ignoring removed bh option [ 90.445265][ T4448] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 90.456890][ T4448] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.678763][ T27] audit: type=1326 audit(1750935076.630:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.0.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ddc18e929 code=0x7ffc0000 [ 90.678962][ T4448] EXT4-fs (loop2): 1 truncate cleaned up [ 90.707021][ T4448] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 90.721680][ T26] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 90.766087][ T27] audit: type=1326 audit(1750935076.710:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.0.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ddc18e929 code=0x7ffc0000 [ 90.788825][ T26] usb 5-1: device descriptor read/8, error -71 [ 90.795905][ T27] audit: type=1326 audit(1750935076.710:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.0.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ddc18e929 code=0x7ffc0000 [ 90.818246][ T27] audit: type=1326 audit(1750935076.710:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.0.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ddc18e929 code=0x7ffc0000 [ 90.840700][ T27] audit: type=1326 audit(1750935076.710:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.0.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ddc18e929 code=0x7ffc0000 [ 91.059428][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 91.090864][ T27] audit: type=1326 audit(1750935076.710:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.0.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ddc18e929 code=0x7ffc0000 [ 91.146819][ T27] audit: type=1326 audit(1750935076.710:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.0.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ddc18e929 code=0x7ffc0000 [ 91.174340][ T27] audit: type=1326 audit(1750935076.720:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.0.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ddc18e929 code=0x7ffc0000 [ 91.196914][ T26] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 91.221678][ T27] audit: type=1326 audit(1750935076.720:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.0.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ddc18e929 code=0x7ffc0000 [ 91.275093][ T26] usb 5-1: device descriptor read/8, error -71 [ 91.300151][ T27] audit: type=1326 audit(1750935076.720:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.0.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ddc18e929 code=0x7ffc0000 [ 91.401867][ T26] usb usb5-port1: unable to enumerate USB device [ 91.780806][ T4469] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 92.007990][ T4461] netlink: 'syz.2.39': attribute type 21 has an invalid length. [ 92.038569][ T4461] netlink: 'syz.2.39': attribute type 1 has an invalid length. [ 92.110809][ T4461] netlink: 144 bytes leftover after parsing attributes in process `syz.2.39'. [ 92.778876][ T4495] netlink: 16 bytes leftover after parsing attributes in process `syz.3.50'. [ 93.018797][ T4505] loop4: detected capacity change from 0 to 256 [ 93.088571][ T4501] cgroup: Invalid name [ 93.108407][ T4508] loop0: detected capacity change from 0 to 1024 [ 93.200167][ T4508] netlink: 68 bytes leftover after parsing attributes in process `syz.0.55'. [ 93.420676][ T4508] loop0: detected capacity change from 0 to 512 [ 93.462625][ T4508] EXT4-fs: Ignoring removed orlov option [ 93.490731][ T4508] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.540766][ T4508] EXT4-fs (loop0): orphan cleanup on readonly fs [ 93.706867][ T4508] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.55: bg 0: block 248: padding at end of block bitmap is not set [ 93.754949][ T4508] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.55: Failed to acquire dquot type 1 [ 93.771063][ T4526] netlink: 16 bytes leftover after parsing attributes in process `syz.1.64'. [ 93.803739][ T4508] EXT4-fs (loop0): 1 truncate cleaned up [ 93.843045][ T4508] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 93.857630][ T4529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.63'. [ 93.917147][ T4529] device ipvlan2 entered promiscuous mode [ 93.937887][ T4508] EXT4-fs: Ignoring removed orlov option [ 93.961754][ T4508] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.979069][ T4529] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 94.001345][ T4508] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 94.059639][ T4508] EXT4-fs error (device loop0): __ext4_remount:6623: comm syz.0.55: Abort forced by user [ 94.085247][ T4508] EXT4-fs (loop0): Remounting filesystem read-only [ 94.111223][ T4508] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 94.134566][ T4508] ext4 filesystem being remounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.300788][ T4540] loop2: detected capacity change from 0 to 256 [ 94.325265][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 94.730529][ T4541] [ 94.732934][ T4541] ====================================================== [ 94.739968][ T4541] WARNING: possible circular locking dependency detected [ 94.747016][ T4541] 6.1.141-syzkaller #0 Not tainted [ 94.752148][ T4541] ------------------------------------------------------ [ 94.759179][ T4541] syz.1.67/4541 is trying to acquire lock: [ 94.765000][ T4541] ffff888072ed97d8 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 94.774821][ T4541] [ 94.774821][ T4541] but task is already holding lock: [ 94.782204][ T4541] ffff8880553c2870 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 94.793125][ T4541] [ 94.793125][ T4541] which lock already depends on the new lock. [ 94.793125][ T4541] [ 94.803545][ T4541] [ 94.803545][ T4541] the existing dependency chain (in reverse order) is: [ 94.812568][ T4541] [ 94.812568][ T4541] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 94.821278][ T4541] down_write+0x36/0x60 [ 94.825975][ T4541] process_measurement+0x33c/0x1a10 [ 94.831714][ T4541] ima_file_mmap+0x104/0x150 [ 94.836843][ T4541] __se_sys_remap_file_pages+0x53e/0x770 [ 94.843023][ T4541] do_syscall_64+0x4c/0xa0 [ 94.848063][ T4541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.854495][ T4541] [ 94.854495][ T4541] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 94.862067][ T4541] __lock_acquire+0x2cf8/0x7c50 [ 94.867456][ T4541] lock_acquire+0x1b4/0x490 [ 94.872492][ T4541] down_read_killable+0x4c/0x340 [ 94.877964][ T4541] mmap_read_lock_killable+0x1d/0x60 [ 94.883787][ T4541] lock_mm_and_find_vma+0x2b1/0x2f0 [ 94.889521][ T4541] do_user_addr_fault+0x2db/0xb10 [ 94.895099][ T4541] exc_page_fault+0x60/0x100 [ 94.900220][ T4541] asm_exc_page_fault+0x22/0x30 [ 94.905596][ T4541] fault_in_readable+0x13e/0x1f0 [ 94.911069][ T4541] fault_in_iov_iter_readable+0xbb/0x2e0 [ 94.917244][ T4541] generic_perform_write+0x1d2/0x560 [ 94.923075][ T4541] __generic_file_write_iter+0x172/0x430 [ 94.929251][ T4541] generic_file_write_iter+0xab/0x2e0 [ 94.935166][ T4541] vfs_write+0x44c/0x960 [ 94.939934][ T4541] ksys_write+0x143/0x240 [ 94.944797][ T4541] do_syscall_64+0x4c/0xa0 [ 94.949760][ T4541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.956212][ T4541] [ 94.956212][ T4541] other info that might help us debug this: [ 94.956212][ T4541] [ 94.966447][ T4541] Possible unsafe locking scenario: [ 94.966447][ T4541] [ 94.973925][ T4541] CPU0 CPU1 [ 94.979295][ T4541] ---- ---- [ 94.984663][ T4541] lock(&sb->s_type->i_mutex_key#12); [ 94.990141][ T4541] lock(&mm->mmap_lock); [ 94.996998][ T4541] lock(&sb->s_type->i_mutex_key#12); [ 95.004997][ T4541] lock(&mm->mmap_lock); [ 95.009346][ T4541] [ 95.009346][ T4541] *** DEADLOCK *** [ 95.009346][ T4541] [ 95.017496][ T4541] 3 locks held by syz.1.67/4541: [ 95.022441][ T4541] #0: ffff888027efefe8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 95.031696][ T4541] #1: ffff8880795dc460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x256/0x960 [ 95.040613][ T4541] #2: ffff8880553c2870 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 95.051978][ T4541] [ 95.051978][ T4541] stack backtrace: [ 95.057893][ T4541] CPU: 1 PID: 4541 Comm: syz.1.67 Not tainted 6.1.141-syzkaller #0 [ 95.065817][ T4541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 95.075908][ T4541] Call Trace: [ 95.079212][ T4541] [ 95.082156][ T4541] dump_stack_lvl+0x168/0x22e [ 95.086859][ T4541] ? load_image+0x3b0/0x3b0 [ 95.091376][ T4541] ? show_regs_print_info+0x12/0x12 [ 95.096600][ T4541] ? print_circular_bug+0x12b/0x1a0 [ 95.101844][ T4541] check_noncircular+0x274/0x310 [ 95.106829][ T4541] ? add_chain_block+0x940/0x940 [ 95.111783][ T4541] ? lockdep_lock+0xdc/0x1e0 [ 95.116395][ T4541] ? _find_first_zero_bit+0xcf/0x100 [ 95.121720][ T4541] __lock_acquire+0x2cf8/0x7c50 [ 95.126614][ T4541] ? verify_lock_unused+0x140/0x140 [ 95.131847][ T4541] ? verify_lock_unused+0x140/0x140 [ 95.137085][ T4541] ? verify_lock_unused+0x140/0x140 [ 95.142311][ T4541] ? mark_lock+0x94/0x320 [ 95.146686][ T4541] lock_acquire+0x1b4/0x490 [ 95.151224][ T4541] ? mmap_read_lock_killable+0x1d/0x60 [ 95.156712][ T4541] ? read_lock_is_recursive+0x10/0x10 [ 95.162101][ T4541] ? cmp_ex_search+0x1a/0x70 [ 95.166830][ T4541] ? bsearch+0x8a/0xb0 [ 95.170938][ T4541] ? fault_in_readable+0x13e/0x1f0 [ 95.176072][ T4541] ? search_extable+0x8c/0xd0 [ 95.180765][ T4541] ? trim_init_extable+0x3b0/0x3b0 [ 95.185902][ T4541] ? mmap_read_lock_killable+0x1d/0x60 [ 95.191394][ T4541] down_read_killable+0x4c/0x340 [ 95.196358][ T4541] ? mmap_read_lock_killable+0x1d/0x60 [ 95.201833][ T4541] mmap_read_lock_killable+0x1d/0x60 [ 95.207132][ T4541] lock_mm_and_find_vma+0x2b1/0x2f0 [ 95.212341][ T4541] do_user_addr_fault+0x2db/0xb10 [ 95.217402][ T4541] ? _raw_spin_unlock_irq+0x1f/0x40 [ 95.222620][ T4541] exc_page_fault+0x60/0x100 [ 95.227224][ T4541] asm_exc_page_fault+0x22/0x30 [ 95.232088][ T4541] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 95.237830][ T4541] Code: 78 8e c3 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 57 8e c3 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 3a 8e [ 95.257444][ T4541] RSP: 0018:ffffc90004687a90 EFLAGS: 00050287 [ 95.263522][ T4541] RAX: ffffffff81bd4819 RBX: 0000000000001000 RCX: 0000000000080000 [ 95.271506][ T4541] RDX: ffffc9000e489000 RSI: 0000000000021d07 RDI: 0000000000021d08 [ 95.279511][ T4541] RBP: 0000000000000088 R08: ffff88801cf45940 R09: 0000000000000002 [ 95.287503][ T4541] R10: 0000000000000006 R11: 0000000000000002 R12: 0000200000121000 [ 95.295485][ T4541] R13: dffffc0000000000 R14: 000020000011f540 R15: 0000200000120000 [ 95.303470][ T4541] ? fault_in_readable+0x139/0x1f0 [ 95.308610][ T4541] fault_in_iov_iter_readable+0xbb/0x2e0 [ 95.314264][ T4541] generic_perform_write+0x1d2/0x560 [ 95.319579][ T4541] ? generic_file_direct_write+0x660/0x660 [ 95.325415][ T4541] ? __file_remove_privs+0x5b0/0x5b0 [ 95.330715][ T4541] ? preempt_count_add+0x8d/0x190 [ 95.335845][ T4541] ? rwsem_write_trylock+0x12f/0x1b0 [ 95.341146][ T4541] ? clear_nonspinnable+0x60/0x60 [ 95.346182][ T4541] ? generic_write_checks_count+0x3d9/0x4c0 [ 95.352088][ T4541] __generic_file_write_iter+0x172/0x430 [ 95.357745][ T4541] generic_file_write_iter+0xab/0x2e0 [ 95.363224][ T4541] vfs_write+0x44c/0x960 [ 95.367479][ T4541] ? file_end_write+0x250/0x250 [ 95.372339][ T4541] ? __fget_files+0x44a/0x4d0 [ 95.377036][ T4541] ? __fdget_pos+0x2ae/0x360 [ 95.381646][ T4541] ? ksys_write+0x71/0x240 [ 95.386073][ T4541] ksys_write+0x143/0x240 [ 95.390424][ T4541] ? __ia32_sys_read+0x80/0x80 [ 95.395203][ T4541] ? lockdep_hardirqs_on+0x94/0x140 [ 95.400420][ T4541] do_syscall_64+0x4c/0xa0 [ 95.404878][ T4541] ? clear_bhb_loop+0x60/0xb0 [ 95.409581][ T4541] ? clear_bhb_loop+0x60/0xb0 [ 95.414275][ T4541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.420191][ T4541] RIP: 0033:0x7f02c158e929 [ 95.424627][ T4541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.444247][ T4541] RSP: 002b:00007f02c2353038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 95.452678][ T4541] RAX: ffffffffffffffda RBX: 00007f02c17b6080 RCX: 00007f02c158e929 [ 95.460666][ T4541] RDX: 00000000fffffdd8 RSI: 0000200000000540 RDI: 000000000000000c [ 95.468654][ T4541] RBP: 00007f02c1610b39 R08: 0000000000000000 R09: 0000000000000000 [ 95.476640][ T4541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.484628][ T4541] R13: 0000000000000000 R14: 00007f02c17b6080 R15: 00007ffd5c667538 [ 95.492623][ T4541]