last executing test programs: 3m40.792522058s ago: executing program 32 (id=291): openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x80081, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2(0x0, 0x0) tee(0xffffffffffffffff, r0, 0x7fff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r3, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='sys_enter\x00', r4}, 0x18) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x11) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 3m1.190894565s ago: executing program 33 (id=591): bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21045e, &(0x7f0000001400), 0x1, 0x4fa, &(0x7f00000005c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) write$UHID_INPUT(r1, &(0x7f0000003800)={0x8, {"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", 0x1000}}, 0x1006) fallocate(r2, 0x0, 0x800, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000140)={0xc, r2}) 1m54.922558691s ago: executing program 34 (id=1037): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 1m35.829100981s ago: executing program 1 (id=1287): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000600)={0x0, @private, @remote}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f0000000580)=""/87, 0x57, 0x0, 0x0}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 1m35.647975525s ago: executing program 1 (id=1290): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4fb, &(0x7f0000000500)="$eJzs3U1vW1kZAODXzpeTyUwywywAIaYMAwVVdRJ3JhrNAoYVQqgSokuQ2pC4URQ7jmKnNKGL9j8gUYkVLPkBrLviJyDYsYEFEh8RqKnE4qJ7bbduajduk9hp/DzS1b3nnmu/5yS559hvEp8ARtaliLgfEZMRcSsi5lrnc60tPm9u6XWPD+6tHh7cW81Fktz4Vy6rT89Fx2NSb7WesxARP/5+xM9yL8at7+1vrlQq5Z1mcXqhUd1eqO/tX92orqyX18tbpdLy0vLip9c+KZ1aXz+oTjYPxtIGfvsXabNmW3Wd/ThNza5PPI2TGo+IH55FsCEYa/VnctgN4bXkI+K9iPgwu//nYiz7bgIAF1mSzEUy11kGAC66fJYDy+WLrVzAbOTzxWIzh/d+zOQrtXrjyu3a7tZaM1c2HxP52xuV8mIrVzgfE7m0vJQdPyuXjpSvRcS7EfHLqemsXFytVdaG+cIHAEbYW0fm//9ONed/AOCCKwy7AQDAwJn/AWD0mP8BYPSY/wFg9Jj/AWD0mP8BYPSY/wFgpPzo+vV0Sw5bn3+9dmdvd7N25+paub5ZrO6uFldrO9vF9VptPfvMnupxz1ep1baXPo7du/Pf2a43Fup7+zertd2txs3sc71vlicG0isA4GXe/eDRn3MRcf+z6WyLjrUczNVwseWH3QBgaMaG3QBgaKz2BaPrBO/xpQfgguiyRO9zChExffTqJEmSs20WcIYuf0n+H0ZVR/7fXwHDiJH/h9HVb/7/uPwA8OZJkly/a/5HvxcCAOebHD/Q4/39e63971q/HPjp2tErHp5lqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB8a6//W2ytBT4b+XyxGPF2RMzHRO72RqW8GBHvRMSfpiam0vLSkNsMAJxU/u+51vpfl+c+mj1aO5l7MpXtI+Lnv77xq7srjcbOH9Pz/356vvGwdb40jPYDAMdpz9PZvuON/OODe6vtbZDt+cf3IqLQjH94MBmHT+OPx3i2L8RERMz8J9cqN+U6chcncf9BRHyxW/9zMZvlQJornx6Nn8Z+e6Dx88/Fz2d1zX36tfjCK0dO5k6h+fBGe5SOP593u//ycSnbd7//C9kIdXKt8S99qtXDbAx8Fr89/o31GP8u9Rvj4z/8oHk0/WLdg4gvj0e0Yx92jD/t+Lke8T/qM/5fvvLVD3vVJb+JuBzd43fGWmhUtxfqe/tXN6or6+X18laptLy0vPjptU9KC1mOeqH3bPDPz66806su7f9Mj/iFY/r/jT77/9v/3frJ114S/1tf7xY/H++/JH46J36zz/grM78v9KpL46917X9b7/5f6TP+X/+2/8Ky4QDA8NT39jdXKpXyziAP2i8kBhrUwQU4SH9qzkEzuh58d1CxJuOVHpUkrxWr14hxGlk34Dxo3utJeScingy7MQAAAAAAAAAAAAAAQFeD+I+lYfcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAi+v/AQAA//+XC86k") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x205a2, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]}) open(&(0x7f0000000000)='./file0\x00', 0x109042, 0x0) 1m35.192074693s ago: executing program 1 (id=1299): syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x84002, 0x0, 0x0, 0x0, &(0x7f00000003c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@generic={&(0x7f0000000080)='./file0\x00', r0}, 0x18) 1m34.943268977s ago: executing program 1 (id=1304): r0 = socket$igmp6(0xa, 0x3, 0x3a) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '\x1c\xf6\xd2\xf9\x1e_-\xa8\x12!\xc9\x8b\xbe\x1dH\xd9\xc0\x16([\xcd\x84\xcd\x93=_\xeb\xf4%3\xf6\xff'}, {0x20, '!n\xfb\xdf\xd2x\xfe\xa62\x81Y\xc1j\x10\x80\x03\x89$\xaf\x04M\xd08\xb1aE\xa6\xa2\x96\xba\xb0\xeeI\xedU\xe1G\xa0\x8dV\x90\x1e\xb09\xf8\x03\xb2G\xde;\x16\xacZ\x14\xc4\xa7\x91\xf5\x7f\xa6\xd1>4\xa9\xce\xe8\xd1\x96\x03jYV\x8fSpVv%\xf1\xee\xadh\xf03C3t\xd2\r\xdf\xb6\xbf\xde\xa7\xdc-\xa1\x9e\xceb\x85V0v^\'G\'\xfe\xbaz\xf7\xb1\x00\xafo!R^\x9d\t\xf9\xaa\x1b\x19\xbb\xef\xde\xc4\xc4ES\xde\xf2$\xb2\xf2\xb3\xc4\xea\b)}\x86\x19M\x81\x8b\xbb#\xc0\xecR\xeav=W\xdd\x8c\xbd~\x03\xda\xedw\x97bw/h <\xfb>(\\\x16\xcb\xc4\xbc\xfc\x98\x99\xc3l\x16\xd8\xa8\x13\x7f\xf9=\xbf\xda}\x85_\a\x03\xd6\x7f\'78<;IB\x1b\x8d#_ug\x04\x1e^sH,\x8c\xdb\xc7\a\xecy\xb3\x01\xce\xc9\xfd\xadA\xf6\x1c\x163x\xd8\r\x88:S>\x81\xda\xf4\x83O2\xc5\xbc,5'}]}, 0x12b) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$MRT6(r0, 0x3a, 0x1, 0x0, &(0x7f0000000080)) 1m34.696625262s ago: executing program 1 (id=1310): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4fb, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x205a2, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]}) open(&(0x7f0000000000)='./file0\x00', 0x109042, 0x0) 1m34.539989505s ago: executing program 6 (id=1312): syz_io_uring_setup(0x83f, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2000044, &(0x7f0000000040)={[{@errors_remount}, {@jqfmt_vfsold}, {@quota}]}, 0x2, 0x500, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x80) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000340)={0x2, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)) 1m34.284207729s ago: executing program 1 (id=1315): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000080)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f00000007c0)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES8=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105, @void, @value}, 0x94) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x19) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCNOTTY(r4, 0x5422) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x95, 0xffffffffffffffff, {0x29}}, './file0\x00'}) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x6000, 0x1) 1m34.127872422s ago: executing program 6 (id=1316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c000240"], 0xdc}}, 0x0) 1m33.882222597s ago: executing program 6 (id=1320): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '\x1c\xf6\xd2\xf9\x1e_-\xa8\x12!\xc9\x8b\xbe\x1dH\xd9\xc0\x16([\xcd\x84\xcd\x93=_\xeb\xf4%3\xf6\xff'}, {0x20, '!n\xfb\xdf\xd2x\xfe\xa62\x81Y\xc1j\x10\x80\x03\x89$\xaf\x04M\xd08\xb1aE\xa6\xa2\x96\xba\xb0\xeeI\xedU\xe1G\xa0\x8dV\x90\x1e\xb09\xf8\x03\xb2G\xde;\x16\xacZ\x14\xc4\xa7\x91\xf5\x7f\xa6\xd1>4\xa9\xce\xe8\xd1\x96\x03jYV\x8fSpVv%\xf1\xee\xadh\xf03C3t\xd2\r\xdf\xb6\xbf\xde\xa7\xdc-\xa1\x9e\xceb\x85V0v^\'G\'\xfe\xbaz\xf7\xb1\x00\xafo!R^\x9d\t\xf9\xaa\x1b\x19\xbb\xef\xde\xc4\xc4ES\xde\xf2$\xb2\xf2\xb3\xc4\xea\b)}\x86\x19M\x81\x8b\xbb#\xc0\xecR\xeav=W\xdd\x8c\xbd~\x03\xda\xedw\x97bw/h <\xfb>(\\\x16\xcb\xc4\xbc\xfc\x98\x99\xc3l\x16\xd8\xa8\x13\x7f\xf9=\xbf\xda}\x85_\a\x03\xd6\x7f\'78<;IB\x1b\x8d#_ug\x04\x1e^sH,\x8c\xdb\xc7\a\xecy\xb3\x01\xce\xc9\xfd\xadA\xf6\x1c\x163x\xd8\r\x88:S>\x81\xda\xf4\x83O2\xc5\xbc,5'}]}, 0x12b) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) getsockopt$MRT6(0xffffffffffffffff, 0x3a, 0x1, 0x0, &(0x7f0000000080)) 1m33.70245634s ago: executing program 6 (id=1323): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 1m33.524670484s ago: executing program 6 (id=1325): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4fb, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x205a2, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]}) open(&(0x7f0000000000)='./file0\x00', 0x109042, 0x0) 1m33.444049735s ago: executing program 2 (id=1327): unshare(0x2040400) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, 0x0) 1m33.19406394s ago: executing program 2 (id=1328): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r4, 0x0, 0x0) fcntl$setsig(r3, 0xa, 0x23) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 1m33.17181634s ago: executing program 6 (id=1329): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x4214, &(0x7f0000000900)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYRES8, @ANYBLOB="dcdd6dbc2e720e1fbbd53fd329315e43de0f0c66f1354fee36540cf91020634cd1b5a78d80c4fe5153b62783b57d82284bd07ec935d276e51c03ea556643e6664a4add7982872efef2e0d9f2ad37d6f52dd3eb8469f569b9f83fa43d1888b2da3f56f36090084dfba732ae024f7a43a39101cda23bd794af8abf3fe4830f9603c09113e663d5b322eceb178297d381e245ca46130d92b28f55f10fb8a61cf20ffb42a69c90ae05ecf3a586afd7fa2bbe20a27ff2a94d3d27ccc0813c8c1381f87ef171c2caa9e75b729401b914f7529ce442f6f71369a565aeaeeb7c2df271cb9b807916a8e6e1c61ad30d3557d4992ec4c197ecee"], 0x4, 0x32e, &(0x7f0000000a40)="$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") 1m32.09341555s ago: executing program 2 (id=1333): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '\x1c\xf6\xd2\xf9\x1e_-\xa8\x12!\xc9\x8b\xbe\x1dH\xd9\xc0\x16([\xcd\x84\xcd\x93=_\xeb\xf4%3\xf6\xff'}, {0x20, '!n\xfb\xdf\xd2x\xfe\xa62\x81Y\xc1j\x10\x80\x03\x89$\xaf\x04M\xd08\xb1aE\xa6\xa2\x96\xba\xb0\xeeI\xedU\xe1G\xa0\x8dV\x90\x1e\xb09\xf8\x03\xb2G\xde;\x16\xacZ\x14\xc4\xa7\x91\xf5\x7f\xa6\xd1>4\xa9\xce\xe8\xd1\x96\x03jYV\x8fSpVv%\xf1\xee\xadh\xf03C3t\xd2\r\xdf\xb6\xbf\xde\xa7\xdc-\xa1\x9e\xceb\x85V0v^\'G\'\xfe\xbaz\xf7\xb1\x00\xafo!R^\x9d\t\xf9\xaa\x1b\x19\xbb\xef\xde\xc4\xc4ES\xde\xf2$\xb2\xf2\xb3\xc4\xea\b)}\x86\x19M\x81\x8b\xbb#\xc0\xecR\xeav=W\xdd\x8c\xbd~\x03\xda\xedw\x97bw/h <\xfb>(\\\x16\xcb\xc4\xbc\xfc\x98\x99\xc3l\x16\xd8\xa8\x13\x7f\xf9=\xbf\xda}\x85_\a\x03\xd6\x7f\'78<;IB\x1b\x8d#_ug\x04\x1e^sH,\x8c\xdb\xc7\a\xecy\xb3\x01\xce\xc9\xfd\xadA\xf6\x1c\x163x\xd8\r\x88:S>\x81\xda\xf4\x83O2\xc5\xbc,5'}]}, 0x12b) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) getsockopt$MRT6(0xffffffffffffffff, 0x3a, 0x1, 0x0, &(0x7f0000000080)) 1m31.871756554s ago: executing program 2 (id=1336): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1m31.716755897s ago: executing program 2 (id=1339): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4fb, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x205a2, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]}) open(&(0x7f0000000000)='./file0\x00', 0x109042, 0x0) 1m31.405737593s ago: executing program 2 (id=1343): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r2) 1m20.680476929s ago: executing program 35 (id=1398): r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$MRT6(r0, 0x3a, 0x1, 0x0, &(0x7f0000000080)) 1m17.868667111s ago: executing program 36 (id=1315): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000080)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f00000007c0)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES8=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105, @void, @value}, 0x94) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x19) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCNOTTY(r4, 0x5422) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x95, 0xffffffffffffffff, {0x29}}, './file0\x00'}) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x6000, 0x1) 1m16.721201452s ago: executing program 37 (id=1329): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x4214, &(0x7f0000000900)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYRES8, @ANYBLOB="dcdd6dbc2e720e1fbbd53fd329315e43de0f0c66f1354fee36540cf91020634cd1b5a78d80c4fe5153b62783b57d82284bd07ec935d276e51c03ea556643e6664a4add7982872efef2e0d9f2ad37d6f52dd3eb8469f569b9f83fa43d1888b2da3f56f36090084dfba732ae024f7a43a39101cda23bd794af8abf3fe4830f9603c09113e663d5b322eceb178297d381e245ca46130d92b28f55f10fb8a61cf20ffb42a69c90ae05ecf3a586afd7fa2bbe20a27ff2a94d3d27ccc0813c8c1381f87ef171c2caa9e75b729401b914f7529ce442f6f71369a565aeaeeb7c2df271cb9b807916a8e6e1c61ad30d3557d4992ec4c197ecee"], 0x4, 0x32e, &(0x7f0000000a40)="$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") 1m15.20733573s ago: executing program 38 (id=1343): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000e868495fb58d00b6ad1f50ad32d6ad25dfd73a015e0ca6a0f68a7d007dc6751dfb265a0e3ccae669e173a64bc1cfd514600650a58f145ff1205fc9ddaa275e687d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983cd44c05bd0a48dfe3e26e7a23129d6606ed28a69989d552af6d9a9df2c3af36e0360070011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a1a83109753f54b21cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b81a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a928903000000cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba739cd0c31b05c00fba8a4aee676d7caa2e53b91a68ff2e60da7b01a2e5785a238afa4aba70c08b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf78b04963d679d5a5d07e618a1ef9057fec00f9e93021f5a8d30e716de8cde9c6000000000c3b64d10f0939b42b33ab2a8717096c58bb3bb1d457d8bb96870f5a7e2ba31fd69bb80235d957eaa9a40b764e5381ffa604aaafb76a980e72b408f686b185736693089213b4e140f8f38e5589663115093889deb646122a5dc5a9e5ba4d37749a36b880110e2bf524b79bc91105f1d3f7d0de694a9417d68694f17ba5e27ea1cec518b93fadcfe0de010ae9be3273ff73c34b5695080a35bfa5c69e3b533e1b939c81b3beda037b7191cb0000000000000000000010e5d683b8938db5c305cf7e6e62a6890ba9e1f4ee64f8202b59de5036569febfaa95f4633db108b2f786333ec7bacc927f4a1785165b5d2444b4c022bb5cff472e6a0c8ee9d6d8df83b704669147b732ac508c9b9f0ca0a1ce45319d43d4643eb285835daf2065b57bebd61ad6671296c27253a5f9688d57c91ccd40ffe2dbc5dd1613a2e6f5b363cc8d205ce6ef3c3c6ded7dd3dfdb39008d8997213f68cdc971c1d6fdacb7729a5560880a77525e9cfb94ef1735dfe74e6b948697f7e3580436b532a82e315d56b17a5dba98436cc24babaae409f0aab0b40af116001bc85492455956e853ead08b5793d4ecf72378a3dfd9cc837b1c66212d9a2be8fd6341c2f837c7fe09924a51ec42912856cce3d3b2d092c80813aad03e1e63a655f4138730f302df339f30a4fbd453c9a0fba381d071ad7cb80a52bec572e29b0b9b55c235806b97e166609f8083ce776075c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r2) 48.142538466s ago: executing program 8 (id=1483): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r0}, 0x10) timerfd_create(0x9, 0x80000) 47.859973561s ago: executing program 8 (id=1487): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRESHEX=r1, @ANYRES8], 0x48) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r5, 0x0, 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) 47.536974157s ago: executing program 8 (id=1489): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x20000, 0xfffffffd, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x8000, 0x0, 0x0, 0xd, 0xffffad55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x7b2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5, 0xfffffefe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x10001, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x7, 0xd4, 0xc, 0x5, 0x0, 0x0, 0x0, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x5, 0x0, 0x0, 0xb4d}}}]}}]}, 0x45c}}, 0x0) 47.148727524s ago: executing program 8 (id=1491): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 46.770093562s ago: executing program 4 (id=1494): ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x1) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'ip6tnl0\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='sched_switch\x00', r1, 0x0, 0x4}, 0x18) syz_io_uring_setup(0x4ba9, &(0x7f0000003f80)={0x0, 0xb745, 0x2, 0x0, 0x20b}, &(0x7f0000004000), &(0x7f0000004040)) 46.722340052s ago: executing program 8 (id=1495): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0xe01, 0x0) 46.507453817s ago: executing program 4 (id=1498): syz_open_procfs(0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 46.26938187s ago: executing program 4 (id=1499): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRESHEX=r1, @ANYRES8], 0x48) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, 0x0, 0x0) 45.919985007s ago: executing program 4 (id=1505): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 45.809887779s ago: executing program 8 (id=1506): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$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") socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) setgroups(0x0, 0x0) 45.397686687s ago: executing program 39 (id=1506): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$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") socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) setgroups(0x0, 0x0) 45.386847777s ago: executing program 4 (id=1509): syz_open_procfs(0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 44.67679153s ago: executing program 4 (id=1512): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) 44.365845676s ago: executing program 40 (id=1512): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) 4.117744504s ago: executing program 3 (id=1828): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) fallocate(r3, 0x8, 0x4000, 0x4000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r6 = socket$rds(0x15, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x3000046, &(0x7f00000004c0), 0x1, 0x57d, &(0x7f0000000cc0)="$eJzs3c1rHOUfAPDvbF7aX9qfTaEUFZFAD1bUTZNoX8BDPYoWC3qvS7KG0k23JBtpYqHtwV68SBFELHjypnePxX/Av6KgxSIl6MFLZDazyab7km2ycbfu5wMTnmdmNs/z3XmeZ57ZmWUDGFgT6Z9cxAsR8WUScSQikmzbcGQbJzb2W3t8YzZdklhf//CPpLpfmq/9r9rrDmWZ5yPi588jXss1lru0snqlUCoVF7P8ZGXh2uTSyuoblxcK88X54tXpmZmzb81Mnztzumuxvnrxr28+uP/u2S9OrH3948Ojd5M4H4ezbfVx7MGt+sxETGTvyUicf2LHqS4U1k+SXleAXRnK+vlIpGPAkRjKej3w33czItaBAZXo/zCgavOA2rV9l66DnxmP3tm4AGqMf3jjs5E4WL02GltLtl0Zpde7410oPy3jp9/u3U2X6N7nEAA7unU7Ik4NDzeOf0k2/u3eqQ72ebKM+vFv6+wE7If76fzn9Wbzn9zm/CeazH8ONem7u9Gu/2f1eNiFYlpK539vN53/bt60Gh/Kcv+vzvlGkk8ul4rp2PZcRJyMkQNpvt39nLNrD1qOZPXzv3RJy6/NBbN6PBw+sP01c4VKYS8x13t0O+LFpvPfZPP4J02Of/p+XOywjOPFey+32rZz/PtrLCJeaXr8t+5oJS3uT6aH5dyZ05PV9jBZaxWN/rxz/JdW5TfGPxpt47+5p3AbpMd/rH3840n9/dqlpy/ju4N/F1tt2xZ/dN7+R5OPqunRbN31QqWyOBUxmrzfuH5667W1fG3/NP6TJ9qPf9vaf11dPu4w/jvHfnipo/h70P7T+Oee6vjX3oCtNTslHrz32betyu9s/HuzmjqZrelk/OukXrtrzQAAAAAAANC/chFxOJJcfjOdy+XzG893HIuxXGl84/mPmIvqd2XHYyRXu9N9pO55iKnsedhafvqJ/ExEHI2Ir4b+V83nZ8uluV4HDwAAAAAAAAAAAAAAAAAAAH3iUIvv/6d+Hep17YB95ye/YXDt2P+78UtPQF9y/ofBpf/D4NL/YXDp/zC46vr/gV7WA/j3Of/D4NL/YXDp/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBVFy9cSJf1tcc3ZtP83Kcry+vZtvzC8mx+trx4LT9fLs+XivnZ8sJO/69ULl+bmo7l65OV4lJlcmll9dJCeflq5dLlhcJ88VJxZN8jAgAAAAAAAAAAAAAAAAAAgGfP0srqlUKpVFyUkNhVYrg/qrGRSJt03Zqbva5Pu8Tv3/dFNVolej0yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCWfwIAAP//iOAtLA==") r7 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200e, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000081ab09c9f7f6d9ca261e252a996890"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfa, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8006}, 0x0) 3.402483337s ago: executing program 7 (id=1839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {0xdbb58b0fa859393e, 0xfff1}, {0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 3.256018359s ago: executing program 0 (id=1842): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 3.077326003s ago: executing program 5 (id=1843): prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) msgctl$MSG_STAT(0x0, 0xb, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xf8}, 0x1, 0x0, 0x0, 0xc000}, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = creat(0x0, 0x0) close(r3) r4 = fsmount(r3, 0x1, 0x71) signalfd4(r4, 0x0, 0x0, 0x1000) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) write$UHID_DESTROY(r5, &(0x7f0000000080), 0x4) pwritev(r6, &(0x7f0000000780)=[{&(0x7f00000001c0)="8b7b0aec79948004bb372b0227fd", 0xe}, {0x0}], 0x2, 0x0, 0x9) 2.955993815s ago: executing program 0 (id=1845): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0) r2 = dup3(r0, r1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, 0x0, 0x0) 2.737679769s ago: executing program 0 (id=1847): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0), 0x0, 0xfffffffd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) syz_read_part_table(0x60c, &(0x7f0000002240)="$eJzs2z9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw0Ac2gyKGaRjKZTCddA4GTM4KQqdizhYhAwuBbtI7ZC33OUluYNSLI2U0s9nuOf3Hg/P933gXX/hP20g1fJU1Lrl3Y//sr8Y3TrP50x7YvJ4URTF6aSSs6lmrLp7OclQ+qdmf5LhnjnffbNz9atf36+2n5x6+c65+4sDmzNreSvJrt7mjPzZq9T+3qa8CTfHH4wuXJmtX+081Ftr6x8mt15MNFZOLi4tn6ge+7Tz/+XkYdm/8WGM5GKauZTP89HQa8V82/9Y6cuf7+Q3xy88rrfWvm4/O7i+tz545/yRV/tWr907lMx1IqbS/di3DP/DxXvyF3ry58auTy+1jh64vefG4ebdR43ng78VG8rI6vbkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwZtzs/FyZrV9tjl94XG+tffnTjx/cejHRWDm5uLR8YvjY07LvYVmHynoxzVxKNclMZvJZZl8/crrSmz/+YHRhM//3ncmzg+t76+0754+8mly9du9Qt6uSqU4Z2I6N+/Xnt9bmxq5PL7WOHri958bh5t1HjeeDG30ztXzSXTdJbftfAwAAAAAAAAAAAAAAAAAAgP+5icnj+6bea5xOKjm7I8kvX3Rv2Re1kR/SvXm/YX9Zn9aS3dnRPQ8laT859XL43P3Fn8tL8fOpZT7Jru9XziRvb+Zc7o+tbk3m3/RHAAAA///q95Fj") r0 = openat(0xffffffffffffff9c, 0x0, 0x105002, 0xdf) writev(r0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0xa4, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0xa4}}, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 2.69021579s ago: executing program 7 (id=1848): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r1, 0x2, &(0x7f00000000c0)=[0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) shutdown(r0, 0x0) 2.651845821s ago: executing program 3 (id=1849): r0 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x0, 0x1, 0x2000000}, 0x20) 2.053301162s ago: executing program 7 (id=1850): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x3c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.489499452s ago: executing program 9 (id=1851): pipe(&(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001880)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x7}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x50, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x7}}, @TCA_FW_INDEV={0x14, 0x3, 'ip6gre0\x00'}, @TCA_FW_ACT={0x30, 0x4, [@m_bpf={0x2c, 0x9, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48894}, 0x40) 1.451249403s ago: executing program 0 (id=1852): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) syz_emit_ethernet(0x32, &(0x7f0000000180)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x7, 0x1, 0x4}, {0x8100, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @multicast, @rand_addr=0x64010101, @multicast, @remote}}}}, &(0x7f0000000200)={0x0, 0x2, [0x20, 0x50b, 0x2e9, 0xd3b]}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x101}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) pivot_root(&(0x7f0000000280)='./file2\x00', &(0x7f0000000300)='./file2/file0\x00') sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x1d, &(0x7f0000000040)=0x7, 0x4) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x842, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYRESOCT]) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "e9255bb992464e73a02159d3720df19f7a1dfec3"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0) 1.410361724s ago: executing program 3 (id=1853): connect$qrtr(0xffffffffffffffff, 0x0, 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone3(&(0x7f0000000300)={0x136820100, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) umount2(&(0x7f0000000040)='.\x00', 0x2) 1.316032156s ago: executing program 7 (id=1854): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x8, 0x2b, 0x0, @private2, @local, {[], {0x3b00, 0x300, 0x8}}}}}}, 0x0) 1.215700327s ago: executing program 5 (id=1855): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 1.148143769s ago: executing program 9 (id=1856): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000) 1.07595485s ago: executing program 5 (id=1857): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0) r2 = dup3(r0, r1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, 0x0, 0x0) 1.05698205s ago: executing program 7 (id=1858): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {0xdbb58b0fa859393e, 0xfff1}, {0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 1.036225351s ago: executing program 5 (id=1859): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x1, 0x0, 0x0) 975.088672ms ago: executing program 3 (id=1860): fgetxattr(0xffffffffffffffff, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x1, 0x3}}) close(r0) 847.909704ms ago: executing program 9 (id=1861): r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000004c0)='./file0\x00', 0x8c7) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02"], 0x4, 0x0) 698.079507ms ago: executing program 5 (id=1862): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0), 0x0, 0xfffffffd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) syz_read_part_table(0x60c, &(0x7f0000002240)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x105002, 0xdf) writev(r0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0xa4, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0xa4}}, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 641.052338ms ago: executing program 3 (id=1863): r0 = socket$inet(0x2, 0x3, 0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x7f, 0xfffb}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) write(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x482080, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0xb00, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x4004743a, &(0x7f0000000300)) pwritev(r3, 0x0, 0x0, 0x20000002, 0x100400) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f00000003c0)=0xc26080b) write$binfmt_aout(r5, &(0x7f0000000280)=ANY=[], 0xfce1) 613.103348ms ago: executing program 9 (id=1864): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x3c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 441.726172ms ago: executing program 7 (id=1865): prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) msgctl$MSG_STAT(0x0, 0xb, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xf8}, 0x1, 0x0, 0x0, 0xc000}, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = creat(0x0, 0x0) close(r3) r4 = fsmount(r3, 0x1, 0x71) signalfd4(r4, 0x0, 0x0, 0x1000) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) write$UHID_DESTROY(r5, &(0x7f0000000080), 0x4) pwritev(r6, &(0x7f0000000780)=[{&(0x7f00000001c0)="8b7b0aec79948004bb372b0227fd", 0xe}, {0x0}], 0x2, 0x0, 0x9) 386.696462ms ago: executing program 3 (id=1866): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 385.931382ms ago: executing program 9 (id=1867): pipe(&(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001880)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, {0xffff, 0x7}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x50, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x7}}, @TCA_FW_INDEV={0x14, 0x3, 'ip6gre0\x00'}, @TCA_FW_ACT={0x30, 0x4, [@m_bpf={0x2c, 0x9, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48894}, 0x40) 256.375605ms ago: executing program 0 (id=1868): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 187.997206ms ago: executing program 5 (id=1869): bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r0, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) 77.471368ms ago: executing program 9 (id=1870): connect$qrtr(0xffffffffffffffff, 0x0, 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone3(&(0x7f0000000300)={0x136820100, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) umount2(&(0x7f0000000040)='.\x00', 0x2) 0s ago: executing program 0 (id=1871): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%pI4 \x00'}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.6.1316'. [ 245.744817][ T7855] loop6: detected capacity change from 0 to 512 [ 245.804291][ T7855] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 245.827694][ T7855] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.030871][ T5905] EXT4-fs error (device loop6): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /133/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 246.801682][ T7863] team0 (unregistering): Port device team_slave_0 removed [ 246.884464][ T7863] team0 (unregistering): Port device team_slave_1 removed [ 247.564005][ T7891] loop2: detected capacity change from 0 to 512 [ 247.628144][ T7891] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 247.662694][ T7891] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.799041][ T4263] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /293/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 248.806018][ T7920] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 248.872778][ T27] audit: type=1326 audit(1749695600.980:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.7.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e0b8e929 code=0x7ffc0000 [ 248.936966][ T7919] loop7: detected capacity change from 0 to 128 [ 248.955404][ T27] audit: type=1326 audit(1749695601.027:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.7.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e0b8e929 code=0x7ffc0000 [ 249.020060][ T7919] FAT-fs (loop7): Unrecognized mount option "0xffffffffffffffff0000000000000000000018446744073709551615<(K4vi10m$p^|}o_걾+qֿ, priority 0 [ 257.957874][ T27] audit: type=1326 audit(1749695609.212:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.0.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 258.014428][ T27] audit: type=1326 audit(1749695609.212:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.0.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 258.041547][ T27] audit: type=1326 audit(1749695609.212:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.0.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 258.138346][ T27] audit: type=1326 audit(1749695609.212:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.0.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 258.166369][ T4312] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.211960][ T27] audit: type=1326 audit(1749695609.212:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.0.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 258.291421][ T4312] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.410765][ T4312] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.522593][ T4312] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.560910][ T8029] tipc: Disabling bearer [ 259.285998][ T4253] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 259.297254][ T4253] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 259.306577][ T4253] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 259.318551][ T4253] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 259.336621][ T4253] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 259.344051][ T4253] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 260.862842][ T4312] device hsr_slave_0 left promiscuous mode [ 260.892802][ T4312] device hsr_slave_1 left promiscuous mode [ 260.903974][ T4312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.911438][ T4312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.949198][ T4312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.956679][ T4312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.989902][ T4312] device bridge_slave_1 left promiscuous mode [ 260.996867][ T4312] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.033529][ T4312] device bridge_slave_0 left promiscuous mode [ 261.039890][ T4312] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.139584][ T4312] device veth1_macvtap left promiscuous mode [ 261.145976][ T4312] device veth0_macvtap left promiscuous mode [ 261.174094][ T4312] device veth1_vlan left promiscuous mode [ 261.181023][ T4312] device veth0_vlan left promiscuous mode [ 261.393344][ T4260] EXT4-fs (loop1): unmounting filesystem. [ 261.523747][ T4253] Bluetooth: hci1: command 0x0409 tx timeout [ 261.868005][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.171911][ T4267] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 262.183176][ T4267] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 262.211816][ T4267] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 262.233274][ T4267] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 262.241475][ T4267] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 262.250500][ T4267] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 262.899009][ T4312] team0 (unregistering): Port device team_slave_1 removed [ 262.975618][ T4312] team0 (unregistering): Port device team_slave_0 removed [ 262.983660][ T4259] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 263.001880][ T4259] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 263.022657][ T4259] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 263.041416][ T4259] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 263.048901][ T4312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.058652][ T4259] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 263.066307][ T4259] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 263.149496][ T4312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.748798][ T4259] Bluetooth: hci1: command 0x041b tx timeout [ 263.782103][ T4312] bond0 (unregistering): Released all slaves [ 263.888451][ T8037] chnl_net:caif_netlink_parms(): no params data found [ 264.025890][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 264.154406][ T5905] EXT4-fs (loop6): unmounting filesystem. [ 264.272113][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1411'. [ 264.362219][ T8037] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.398960][ T8037] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.430962][ T4259] Bluetooth: hci2: command 0x0409 tx timeout [ 264.473795][ T8037] device bridge_slave_0 entered promiscuous mode [ 264.529368][ T8037] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.536826][ T8037] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.572188][ T8037] device bridge_slave_1 entered promiscuous mode [ 264.679480][ T8037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.831642][ T8037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.902130][ T4253] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 264.913878][ T4253] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 264.925955][ T4253] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 264.935527][ T4253] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 264.943403][ T4253] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 264.955014][ T4253] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 265.054197][ T8037] team0: Port device team_slave_0 added [ 265.109664][ T8037] team0: Port device team_slave_1 added [ 265.207245][ T4312] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.286250][ T4259] Bluetooth: hci3: command 0x0409 tx timeout [ 265.286969][ T8037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.312144][ T8037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.379244][ T8037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.596502][ T8037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.603524][ T8037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.681484][ T8037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.764317][ T4312] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.785642][ T8060] chnl_net:caif_netlink_parms(): no params data found [ 265.913048][ T4312] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.962174][ T8037] device hsr_slave_0 entered promiscuous mode [ 265.970135][ T4259] Bluetooth: hci1: command 0x040f tx timeout [ 265.986228][ T8037] device hsr_slave_1 entered promiscuous mode [ 265.993178][ T8037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.000777][ T8037] Cannot create hsr debugfs directory [ 266.043134][ T4312] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.446312][ T8060] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.455198][ T8060] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.468006][ T8060] device bridge_slave_0 entered promiscuous mode [ 266.479026][ T8060] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.498544][ T8060] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.507182][ T8060] device bridge_slave_1 entered promiscuous mode [ 266.524442][ T8063] chnl_net:caif_netlink_parms(): no params data found [ 266.660989][ T4259] Bluetooth: hci2: command 0x041b tx timeout [ 266.682041][ T8060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.720445][ T8060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.786531][ T4312] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.827694][ T8074] chnl_net:caif_netlink_parms(): no params data found [ 266.885287][ T4312] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.904872][ T8060] team0: Port device team_slave_0 added [ 266.913157][ T8063] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.920416][ T8063] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.929700][ T8063] device bridge_slave_0 entered promiscuous mode [ 266.969405][ T8060] team0: Port device team_slave_1 added [ 267.002194][ T8063] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.010963][ T8063] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.019774][ T8063] device bridge_slave_1 entered promiscuous mode [ 267.079396][ T4312] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.118467][ T8060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.135110][ T8060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.167588][ T4259] Bluetooth: hci4: command 0x0409 tx timeout [ 267.177840][ T8060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.236910][ T4312] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.258654][ T8060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.265923][ T8060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.299397][ T8060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.317560][ T8063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.347833][ T8037] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 267.367991][ T8037] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 267.415125][ T8063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.435581][ T8074] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.443828][ T8074] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.452586][ T8074] device bridge_slave_0 entered promiscuous mode [ 267.460280][ T8037] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 267.504730][ T8074] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.512233][ T8074] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.520355][ T4259] Bluetooth: hci3: command 0x041b tx timeout [ 267.521418][ T8074] device bridge_slave_1 entered promiscuous mode [ 267.535116][ T8037] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 267.549422][ T8060] device hsr_slave_0 entered promiscuous mode [ 267.558952][ T8060] device hsr_slave_1 entered promiscuous mode [ 267.569122][ T8060] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.577464][ T8060] Cannot create hsr debugfs directory [ 267.587074][ T8063] team0: Port device team_slave_0 added [ 267.635011][ T8063] team0: Port device team_slave_1 added [ 267.717601][ T8074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.764638][ T8074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.796074][ T8063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.812925][ T8063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.847181][ T8063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.860673][ T8063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.868466][ T8063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.901623][ T8063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.997836][ T4312] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.025302][ T8074] team0: Port device team_slave_0 added [ 268.055747][ T8074] team0: Port device team_slave_1 added [ 268.074309][ T8063] device hsr_slave_0 entered promiscuous mode [ 268.081422][ T8063] device hsr_slave_1 entered promiscuous mode [ 268.088623][ T8063] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.098514][ T8063] Cannot create hsr debugfs directory [ 268.140994][ T4312] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.205210][ T4259] Bluetooth: hci1: command 0x0419 tx timeout [ 268.222896][ T8074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.231181][ T8074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.259311][ T8074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.318775][ T4312] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.349497][ T8074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.358331][ T8074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.386205][ T8074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.447696][ T4312] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.488015][ T8037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.563246][ T8074] device hsr_slave_0 entered promiscuous mode [ 268.570982][ T8074] device hsr_slave_1 entered promiscuous mode [ 268.577618][ T8074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.585381][ T8074] Cannot create hsr debugfs directory [ 268.642061][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.651492][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.679058][ T8037] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.729613][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.745439][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.756208][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.763471][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.808544][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 268.817436][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.826934][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.835838][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.842980][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.878119][ T4259] Bluetooth: hci2: command 0x040f tx timeout [ 268.893620][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 268.904383][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 268.926017][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 268.937446][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 268.960633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 269.013219][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 269.024590][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.042643][ T8060] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 269.084412][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.111862][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.136225][ T8060] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 269.153202][ T8060] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 269.165432][ T4312] tipc: Left network mode [ 269.213572][ T8060] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 269.235688][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.245287][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.254365][ T4312] tipc: Left network mode [ 269.282466][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 269.394098][ T4259] Bluetooth: hci4: command 0x041b tx timeout [ 269.434763][ T8060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.556545][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 269.573304][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.599054][ T8060] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.726493][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 269.741486][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.744446][ T4259] Bluetooth: hci3: command 0x040f tx timeout [ 269.760985][ T6824] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.768185][ T6824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.801164][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 269.876410][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 269.898641][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.912170][ T4391] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.919357][ T4391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.942455][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 270.046148][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 270.056309][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 270.067128][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 270.076339][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 270.083848][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 270.144255][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.153375][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 270.163803][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 270.178867][ T8037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.274367][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 270.286656][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 270.429240][ T8060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.441346][ T8060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 270.452878][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 270.472124][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.810840][ T8158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1434'. [ 270.838516][ T8158] IPVS: Error joining to the multicast group [ 270.847822][ T8063] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 270.877496][ T8063] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 270.999335][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 270.999350][ T27] audit: type=1326 audit(1749695621.683:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 271.033213][ T8063] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 271.057893][ T8063] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 271.081616][ T4312] IPVS: stopping backup sync thread 7021 ... [ 271.081710][ T2185] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 271.111622][ T4259] Bluetooth: hci2: command 0x0419 tx timeout [ 271.142371][ T27] audit: type=1326 audit(1749695621.720:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 271.165323][ T2185] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 271.166829][ T27] audit: type=1326 audit(1749695621.720:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 271.216163][ T27] audit: type=1326 audit(1749695621.720:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 271.241396][ T27] audit: type=1326 audit(1749695621.720:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 271.263464][ T27] audit: type=1326 audit(1749695621.720:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 271.329723][ T27] audit: type=1326 audit(1749695621.720:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 271.352694][ T27] audit: type=1326 audit(1749695621.720:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 271.375960][ T27] audit: type=1326 audit(1749695621.720:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 271.399011][ T27] audit: type=1326 audit(1749695621.720:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 271.472186][ T8074] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 271.517263][ T8074] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 271.538186][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 271.559451][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 271.593870][ T8074] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 271.625237][ T4259] Bluetooth: hci4: command 0x040f tx timeout [ 271.658880][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.666590][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.687125][ T8074] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 271.716092][ T8060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.735082][ T8037] device veth0_vlan entered promiscuous mode [ 271.742544][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 271.751140][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 271.939447][ T8037] device veth1_vlan entered promiscuous mode [ 271.956325][ T4259] Bluetooth: hci3: command 0x0419 tx timeout [ 271.959596][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 271.971917][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 271.981493][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 272.018557][ T8063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.105979][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 272.113953][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 272.142850][ T8063] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.244178][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 272.261549][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 272.278852][ T8037] device veth0_macvtap entered promiscuous mode [ 272.361001][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 272.369636][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 272.378820][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 272.387385][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.394531][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.402692][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.412272][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.420868][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.428207][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.436231][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.445146][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.454001][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 272.463302][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 272.572596][ T8037] device veth1_macvtap entered promiscuous mode [ 272.595663][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 272.605749][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.621644][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 272.633748][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 272.643202][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 272.653286][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 272.662715][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.672429][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 272.680951][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.692663][ T8063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 272.831010][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.848000][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.861058][ T8037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.881193][ T8074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.900120][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 272.910661][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 272.930258][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 272.941697][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 272.959289][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.970642][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.984189][ T8037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.006899][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 273.020518][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 273.046189][ T8037] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.068685][ T8037] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.077566][ T8037] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.110941][ T8037] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.144563][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.153109][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.165935][ T8074] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.180681][ T8060] device veth0_vlan entered promiscuous mode [ 273.202739][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 273.212361][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.221374][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.231590][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 273.253596][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.283513][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.313858][ T6824] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.321054][ T6824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.344417][ T8060] device veth1_vlan entered promiscuous mode [ 273.373799][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 273.395660][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.408327][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.425051][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.436778][ T6824] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.444064][ T6824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.489816][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 273.512926][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 273.535617][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.616979][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.636134][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.650370][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 273.659656][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.673078][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 273.683514][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 273.706322][ T8063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.762480][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 273.771354][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 273.789307][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.805183][ T8060] device veth0_macvtap entered promiscuous mode [ 273.829854][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 273.838613][ T4259] Bluetooth: hci4: command 0x0419 tx timeout [ 273.857387][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 273.867449][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.885549][ T8074] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.934691][ T8074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 273.967593][ T8060] device veth1_macvtap entered promiscuous mode [ 273.976777][ T5312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.986221][ T5312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.009277][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 274.018379][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.036783][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.055137][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 274.144614][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.161937][ T8060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.177865][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.210259][ T8060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.255642][ T8060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.279569][ T8060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.294311][ T8060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.304079][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 274.336114][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 274.349163][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 274.371325][ T4312] device hsr_slave_0 left promiscuous mode [ 274.394535][ T4312] device hsr_slave_1 left promiscuous mode [ 274.418582][ T4312] device hsr_slave_0 left promiscuous mode [ 274.437333][ T4312] device hsr_slave_1 left promiscuous mode [ 274.468392][ T4312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.477045][ T4312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.507328][ T4312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.525347][ T4312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.546761][ T4312] device hsr_slave_0 left promiscuous mode [ 274.565103][ T4312] device hsr_slave_1 left promiscuous mode [ 274.655063][ T4312] device veth1_macvtap left promiscuous mode [ 274.662240][ T4312] device veth0_macvtap left promiscuous mode [ 274.669794][ T4312] device veth1_vlan left promiscuous mode [ 274.685168][ T4312] device veth0_vlan left promiscuous mode [ 274.694474][ T4312] device veth1_macvtap left promiscuous mode [ 274.700960][ T4312] device veth0_macvtap left promiscuous mode [ 274.708046][ T4312] device veth1_vlan left promiscuous mode [ 274.714632][ T4312] device veth0_vlan left promiscuous mode [ 274.723979][ T4312] device veth1_macvtap left promiscuous mode [ 274.731767][ T4312] device veth0_macvtap left promiscuous mode [ 274.920142][ T4312] infiniband syz1: set down [ 275.069682][ T4312] bond1 (unregistering): (slave vlan2): Releasing active interface [ 275.087814][ T4312] device veth0_to_bond entered promiscuous mode [ 275.117226][ T4312] bond1 (unregistering): (slave veth3): Releasing active interface [ 275.126320][ T4312] bond1 (unregistering): (slave veth3): the permanent HWaddr of slave - 6a:39:bf:7b:34:bc - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 275.281523][ T4312] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 275.290268][ T4312] device veth0_to_bond left promiscuous mode [ 275.300976][ T4312] bond1 (unregistering): Released all slaves [ 275.782632][ T4312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.828767][ T4312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.120623][ T4312] bond0 (unregistering): Released all slaves [ 276.672839][ T4312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.721884][ T4312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.834929][ T4391] smc: removing ib device syz1 [ 277.080780][ T4312] bond0 (unregistering): Released all slaves [ 277.831176][ T4312] bond0 (unregistering): Released all slaves [ 277.860069][ T8060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.874794][ T8060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.886468][ T8060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.901083][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 277.946678][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 278.012828][ T8060] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.030282][ T8060] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.051025][ T8060] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.069755][ T8060] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.201237][ T27] kauditd_printk_skb: 42 callbacks suppressed [ 278.201252][ T27] audit: type=1326 audit(1749695628.419:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.8.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cf98e929 code=0x7ffc0000 [ 278.400588][ T27] audit: type=1326 audit(1749695628.419:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.8.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cf98e929 code=0x7ffc0000 [ 278.433236][ T27] audit: type=1326 audit(1749695628.447:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.8.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fa6cf98e929 code=0x7ffc0000 [ 278.520362][ T27] audit: type=1326 audit(1749695628.447:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.8.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cf98e929 code=0x7ffc0000 [ 278.521510][ T8074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.601503][ T27] audit: type=1326 audit(1749695628.447:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.8.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cf98e929 code=0x7ffc0000 [ 278.601730][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.710958][ T27] audit: type=1326 audit(1749695628.447:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.8.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6cf98e929 code=0x7ffc0000 [ 278.734307][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.741864][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 278.814197][ T27] audit: type=1326 audit(1749695628.447:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.8.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cf98e929 code=0x7ffc0000 [ 278.819718][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 278.888823][ T27] audit: type=1326 audit(1749695628.447:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.8.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cf98e929 code=0x7ffc0000 [ 278.991967][ T4317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.001231][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 279.031247][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.041755][ T27] audit: type=1326 audit(1749695628.447:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.8.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa6cf98e929 code=0x7ffc0000 [ 279.065789][ T4317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.100570][ T8063] device veth0_vlan entered promiscuous mode [ 279.117435][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 279.141286][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 279.149238][ T27] audit: type=1326 audit(1749695628.447:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.8.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cf98e929 code=0x7ffc0000 [ 279.173026][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 279.199385][ T8063] device veth1_vlan entered promiscuous mode [ 279.306221][ T6824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.322060][ T6824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.343192][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 279.359741][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.388760][ T8063] device veth0_macvtap entered promiscuous mode [ 279.410666][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 279.429227][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 279.467994][ T8063] device veth1_macvtap entered promiscuous mode [ 279.530823][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.588200][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.598812][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.641515][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.712369][ T8063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.741005][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 279.760861][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 279.810057][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 279.869410][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.892129][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.990344][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.120927][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.139913][ T8063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.285622][ T8247] loop9: detected capacity change from 0 to 512 [ 280.301895][ T8247] EXT4-fs: Ignoring removed nobh option [ 280.581280][ T8247] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 282.997909][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 283.007050][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 283.018074][ T8063] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.029770][ T8063] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.047041][ T8063] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.056013][ T8063] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.118982][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 284.135712][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 284.161570][ T27] kauditd_printk_skb: 71 callbacks suppressed [ 284.161584][ T27] audit: type=1326 audit(1749695633.985:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.0.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 284.487344][ T8255] xt_hashlimit: size too large, truncated to 1048576 [ 284.494461][ T8255] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 284.640267][ T27] audit: type=1800 audit(1749695634.294:2779): pid=8247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1409" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 284.704030][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 284.719252][ T27] audit: type=1326 audit(1749695634.303:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.0.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 284.740002][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 284.770425][ T8074] device veth0_vlan entered promiscuous mode [ 284.772504][ T27] audit: type=1326 audit(1749695634.303:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.0.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 284.811343][ T8258] tipc: Enabling of bearer rejected, failed to enable media [ 284.836718][ T27] audit: type=1326 audit(1749695634.303:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.0.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 284.867114][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 284.895527][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 284.905642][ T27] audit: type=1326 audit(1749695634.303:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.0.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 284.944824][ T8074] device veth1_vlan entered promiscuous mode [ 284.952297][ T6256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.980853][ T6256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.996319][ T27] audit: type=1326 audit(1749695634.303:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.0.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 285.027992][ T6824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.034008][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 285.073674][ T6824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.083164][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 285.089267][ T27] audit: type=1326 audit(1749695634.303:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.0.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 285.130539][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 285.157682][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 285.202063][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 285.230854][ T27] audit: type=1326 audit(1749695634.303:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.0.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 285.245529][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 285.292838][ T27] audit: type=1326 audit(1749695634.303:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.0.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 285.323781][ T8074] device veth0_macvtap entered promiscuous mode [ 285.363695][ T8074] device veth1_macvtap entered promiscuous mode [ 285.426433][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.445915][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.455838][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.470714][ T8060] EXT4-fs (loop9): unmounting filesystem. [ 285.499675][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.531966][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.563581][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.586158][ T8074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.630611][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.661731][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.691904][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.749206][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.787074][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.797647][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.809260][ T8074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.822756][ T8074] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.832957][ T8074] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.841750][ T8074] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.850576][ T8074] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.078828][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 286.098272][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 286.141396][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 286.165910][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 286.181133][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 286.201236][ T8269] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1453'. [ 286.349294][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.373363][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.419202][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 286.452056][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.476323][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.560344][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 287.122722][ T8300] xt_connbytes: Forcing CT accounting to be enabled [ 287.193945][ T8300] set match dimension is over the limit! [ 287.421071][ T8307] loop5: detected capacity change from 0 to 2048 [ 287.453972][ T8305] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1466'. [ 287.497658][ T8305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1466'. [ 287.502239][ T8307] loop5: p1 < > p4 [ 287.523169][ T8305] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 287.556763][ T8307] loop5: p4 size 8388608 extends beyond EOD, truncated [ 287.563404][ T8305] loop4: detected capacity change from 0 to 128 [ 287.602918][ T8305] FAT-fs (loop4): Directory bread(block 162) failed [ 287.614577][ T8305] FAT-fs (loop4): Directory bread(block 163) failed [ 287.637278][ T8305] FAT-fs (loop4): Directory bread(block 164) failed [ 287.645734][ T8305] FAT-fs (loop4): Directory bread(block 165) failed [ 287.667408][ T8305] FAT-fs (loop4): Directory bread(block 166) failed [ 287.678252][ T8305] FAT-fs (loop4): Directory bread(block 167) failed [ 287.689098][ T8305] FAT-fs (loop4): Directory bread(block 168) failed [ 287.708656][ T8305] FAT-fs (loop4): Directory bread(block 169) failed [ 287.813308][ T8305] FAT-fs (loop4): Directory bread(block 162) failed [ 287.855481][ T8305] FAT-fs (loop4): Directory bread(block 163) failed [ 287.874075][ T8305] syz.4.1466: attempt to access beyond end of device [ 287.874075][ T8305] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 287.920016][ T8305] syz.4.1466: attempt to access beyond end of device [ 287.920016][ T8305] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 289.761925][ T8343] loop5: detected capacity change from 0 to 256 [ 290.536845][ T8347] loop5: detected capacity change from 0 to 512 [ 290.625602][ T8347] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 290.666735][ T8347] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 290.742363][ T8347] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #2: comm syz.5.1479: corrupted inode contents [ 290.826885][ T8347] EXT4-fs error (device loop5): ext4_dirty_inode:6118: inode #2: comm syz.5.1479: mark_inode_dirty error [ 290.845114][ T8347] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #2: comm syz.5.1479: corrupted inode contents [ 290.862693][ T8354] loop4: detected capacity change from 0 to 2048 [ 290.899102][ T8347] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.1479: mark_inode_dirty error [ 290.991762][ T8354] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 291.028986][ T8354] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.099620][ T8074] EXT4-fs (loop5): unmounting filesystem. [ 291.254125][ T8063] EXT4-fs (loop4): unmounting filesystem. [ 291.367622][ T8366] device wireguard0 entered promiscuous mode [ 291.676201][ T8375] netlink: 'syz.4.1488': attribute type 21 has an invalid length. [ 291.697813][ T8375] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1488'. [ 291.831956][ T8377] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 292.513174][ T8387] syz.4.1494[8387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.513336][ T8387] syz.4.1494[8387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.656491][ T8390] device syzkaller1 entered promiscuous mode [ 292.969475][ T8292] Set syz1 is full, maxelem 65536 reached [ 293.251786][ T8403] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.426789][ T4355] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.552014][ T8403] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.627486][ T4355] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.735639][ T8403] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.839206][ T4355] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.974629][ T8403] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.067527][ T4355] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.233298][ T8420] loop9: detected capacity change from 0 to 512 [ 294.303346][ T8420] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 294.337176][ T8403] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.368706][ T8420] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 294.402522][ T4267] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 294.412710][ T4267] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 294.420973][ T4267] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 294.433501][ T4267] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 294.442433][ T4267] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 294.449808][ T4267] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 294.508380][ T8403] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.587481][ T8060] EXT4-fs (loop9): unmounting filesystem. [ 294.613000][ T8403] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.699585][ T8403] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.936165][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1516'. [ 295.175244][ T8436] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1517'. [ 295.526888][ T4267] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 295.543573][ T4267] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 295.561953][ T4267] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 295.571640][ T4267] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 295.580786][ T4267] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 295.588137][ T4267] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 295.870890][ T8423] chnl_net:caif_netlink_parms(): no params data found [ 296.152997][ T8460] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1525'. [ 296.326757][ T8423] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.335701][ T8423] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.355058][ T8423] device bridge_slave_0 entered promiscuous mode [ 296.409179][ T8423] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.409239][ T27] kauditd_printk_skb: 61 callbacks suppressed [ 296.409251][ T27] audit: type=1326 audit(1749695645.445:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.5.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a578e929 code=0x7ffc0000 [ 296.434538][ T8423] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.468941][ T8423] device bridge_slave_1 entered promiscuous mode [ 296.530808][ T27] audit: type=1326 audit(1749695645.445:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.5.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a578e929 code=0x7ffc0000 [ 296.594662][ T27] audit: type=1326 audit(1749695645.492:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.5.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f59a578e929 code=0x7ffc0000 [ 296.669870][ T4267] Bluetooth: hci1: command 0x0409 tx timeout [ 296.691220][ T27] audit: type=1326 audit(1749695645.492:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.5.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a578e929 code=0x7ffc0000 [ 296.715120][ T27] audit: type=1326 audit(1749695645.492:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.5.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a578e929 code=0x7ffc0000 [ 296.769465][ T8423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.776716][ T8468] loop5: detected capacity change from 0 to 512 [ 296.861696][ T8423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.863005][ T8468] EXT4-fs (loop5): 1 orphan inode deleted [ 296.884094][ T11] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 296.900909][ T11] EXT4-fs error (device loop5): ext4_release_dquot:6850: comm kworker/u4:1: Failed to release dquot type 1 [ 296.929443][ T8468] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 296.979832][ T8468] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.009351][ T8423] team0: Port device team_slave_0 added [ 297.042992][ T4355] device hsr_slave_0 left promiscuous mode [ 297.050846][ T4355] device hsr_slave_1 left promiscuous mode [ 297.070079][ T8474] loop9: detected capacity change from 0 to 512 [ 297.082631][ T4355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.091313][ T4355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.108697][ T4355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.117062][ T8474] EXT4-fs: Ignoring removed nobh option [ 297.123138][ T4355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.146109][ T4355] device bridge_slave_1 left promiscuous mode [ 297.156350][ T4355] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.179198][ T4355] device bridge_slave_0 left promiscuous mode [ 297.188812][ T4355] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.199901][ T8474] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 297.244792][ T8474] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.263083][ T27] audit: type=1326 audit(1749695646.250:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8473 comm="syz.9.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0278e929 code=0x7ffc0000 [ 297.294982][ T27] audit: type=1326 audit(1749695646.278:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8473 comm="syz.9.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0278e929 code=0x7ffc0000 [ 297.320024][ T27] audit: type=1326 audit(1749695646.278:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8473 comm="syz.9.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d0278e929 code=0x7ffc0000 [ 297.343865][ T27] audit: type=1326 audit(1749695646.278:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8473 comm="syz.9.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0278e929 code=0x7ffc0000 [ 297.374333][ T4355] device veth1_macvtap left promiscuous mode [ 297.389105][ T8474] EXT4-fs error (device loop9): ext4_generic_delete_entry:2729: inode #2: block 3: comm syz.9.1529: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 297.393841][ T4355] device veth0_macvtap left promiscuous mode [ 297.454898][ T8474] EXT4-fs error (device loop9) in ext4_delete_entry:2800: Corrupt filesystem [ 297.472796][ T4355] device veth1_vlan left promiscuous mode [ 297.487306][ T8474] EXT4-fs warning (device loop9): ext4_rename_delete:3778: inode #2: comm syz.9.1529: Deleting old file: nlink 4, error=-117 [ 297.487325][ T4355] device veth0_vlan left promiscuous mode [ 297.725095][ T8060] EXT4-fs (loop9): unmounting filesystem. [ 297.781569][ T4267] Bluetooth: hci3: command 0x0409 tx timeout [ 297.943928][ T8483] 9pnet_fd: Insufficient options for proto=fd [ 298.893063][ T4267] Bluetooth: hci1: command 0x041b tx timeout [ 298.905326][ T8489] loop9: detected capacity change from 0 to 1024 [ 298.934809][ T8489] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 298.954083][ T4355] team0 (unregistering): Port device team_slave_1 removed [ 299.019011][ T8489] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c800e02c, mo2=0000] [ 299.073021][ T8489] EXT4-fs error (device loop9): ext4_map_blocks:635: inode #3: block 2: comm syz.9.1535: lblock 2 mapped to illegal pblock 2 (length 1) [ 299.091398][ T4355] team0 (unregistering): Port device team_slave_0 removed [ 299.129150][ T8489] EXT4-fs (loop9): Remounting filesystem read-only [ 299.136474][ T8489] EXT4-fs error (device loop9): ext4_map_blocks:635: inode #3: block 48: comm syz.9.1535: lblock 0 mapped to illegal pblock 48 (length 1) [ 299.199404][ T8489] EXT4-fs (loop9): Remounting filesystem read-only [ 299.220531][ T8489] EXT4-fs error (device loop9): ext4_acquire_dquot:6814: comm syz.9.1535: Failed to acquire dquot type 0 [ 299.234769][ T4355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.255191][ T8489] EXT4-fs (loop9): Remounting filesystem read-only [ 299.281635][ T8489] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 299.325063][ T8489] EXT4-fs (loop9): Remounting filesystem read-only [ 299.347426][ T8489] EXT4-fs error (device loop9): ext4_evict_inode:279: inode #11: comm syz.9.1535: mark_inode_dirty error [ 299.381773][ T8489] EXT4-fs (loop9): Remounting filesystem read-only [ 299.395624][ T4355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.409857][ T8489] EXT4-fs warning (device loop9): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 299.455996][ T8489] EXT4-fs (loop9): 1 orphan inode deleted [ 299.470596][ T8489] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 299.479200][ T4391] EXT4-fs error (device loop9): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 299.519058][ T4391] EXT4-fs (loop9): Remounting filesystem read-only [ 299.534402][ T4391] EXT4-fs error (device loop9): ext4_release_dquot:6850: comm kworker/u4:11: Failed to release dquot type 0 [ 299.560760][ T4391] EXT4-fs (loop9): Remounting filesystem read-only [ 299.612452][ T8060] EXT4-fs (loop9): unmounting filesystem. [ 299.618987][ T8060] EXT4-fs error (device loop9): __ext4_get_inode_loc:4507: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 299.654672][ T8060] EXT4-fs (loop9): Remounting filesystem read-only [ 299.661424][ T8060] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 299.692333][ T8060] EXT4-fs (loop9): Remounting filesystem read-only [ 299.713111][ T8060] EXT4-fs error (device loop9): ext4_quota_off:7120: inode #3: comm syz-executor: mark_inode_dirty error [ 299.734120][ T8060] EXT4-fs (loop9): Remounting filesystem read-only [ 300.008504][ T4267] Bluetooth: hci3: command 0x041b tx timeout [ 300.147356][ T4355] bond0 (unregistering): Released all slaves [ 300.257188][ T8423] team0: Port device team_slave_1 added [ 300.279080][ T8480] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1532'. [ 300.289233][ T8492] lo speed is unknown, defaulting to 1000 [ 300.344756][ T8492] lo speed is unknown, defaulting to 1000 [ 300.366194][ T8423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.384005][ T8423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.417994][ T8423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.433953][ T8492] lo speed is unknown, defaulting to 1000 [ 300.488153][ T8423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.497567][ T8492] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 300.506458][ T8423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.544752][ T8423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.570605][ T8492] lo speed is unknown, defaulting to 1000 [ 300.611935][ T8492] lo speed is unknown, defaulting to 1000 [ 300.675982][ T8492] lo speed is unknown, defaulting to 1000 [ 300.699920][ T8443] chnl_net:caif_netlink_parms(): no params data found [ 300.721707][ T8423] device hsr_slave_0 entered promiscuous mode [ 300.731427][ T8423] device hsr_slave_1 entered promiscuous mode [ 300.742001][ T8423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.752631][ T8423] Cannot create hsr debugfs directory [ 300.770459][ T8492] lo speed is unknown, defaulting to 1000 [ 300.790696][ T8492] lo speed is unknown, defaulting to 1000 [ 300.816265][ T8492] lo speed is unknown, defaulting to 1000 [ 300.841101][ T8492] lo speed is unknown, defaulting to 1000 [ 301.020632][ T8443] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.027897][ T8443] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.045842][ T8443] device bridge_slave_0 entered promiscuous mode [ 301.094906][ T8443] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.102149][ T8443] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.116589][ T4259] Bluetooth: hci1: command 0x040f tx timeout [ 301.124071][ T8443] device bridge_slave_1 entered promiscuous mode [ 301.223670][ T8443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.247614][ T8443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.445763][ T4355] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.510764][ T8443] team0: Port device team_slave_0 added [ 301.564328][ T8443] team0: Port device team_slave_1 added [ 301.574641][ T8508] 9pnet_fd: Insufficient options for proto=fd [ 301.654150][ T4355] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.673965][ T8443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.680959][ T8443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.707683][ T8443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.740665][ T8443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.747852][ T8443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.776624][ T8443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.822192][ T4355] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.940903][ T4355] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.976920][ T8443] device hsr_slave_0 entered promiscuous mode [ 301.984778][ T8443] device hsr_slave_1 entered promiscuous mode [ 301.991563][ T8443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.999243][ T8443] Cannot create hsr debugfs directory [ 302.147718][ T8074] EXT4-fs (loop5): unmounting filesystem. [ 302.179054][ T8423] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 302.207708][ T8423] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 302.229639][ T4259] Bluetooth: hci3: command 0x040f tx timeout [ 302.236304][ T8423] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 302.263264][ T8423] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 302.332104][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1545'. [ 302.343420][ T8516] IPVS: Error joining to the multicast group [ 302.518089][ T8423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.538596][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 302.561999][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 302.590068][ T8423] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.647890][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 302.677708][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 302.707542][ T4312] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.714809][ T4312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.732489][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 302.781152][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 302.796841][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 302.808169][ T8527] loop9: detected capacity change from 0 to 512 [ 302.810792][ T6256] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.821628][ T6256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.840412][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 302.850038][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 302.903054][ T8527] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 302.929439][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 302.939283][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 302.949012][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 302.951793][ T8527] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 302.958194][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 302.979343][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 303.014898][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 303.025084][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 303.038630][ T8423] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 303.050928][ T8423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 303.063000][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 303.098566][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 303.128324][ T8060] EXT4-fs (loop9): unmounting filesystem. [ 303.211993][ T8532] 9pnet_fd: Insufficient options for proto=fd [ 303.301243][ T8443] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 303.319630][ T8443] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 303.337086][ T8443] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 303.344999][ T4267] Bluetooth: hci1: command 0x0419 tx timeout [ 303.420138][ T8443] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 303.677117][ T8542] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 303.684250][ T8542] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 303.700149][ T8542] vhci_hcd vhci_hcd.0: Device attached [ 303.711812][ T8543] vhci_hcd: connection closed [ 303.716046][ T4391] vhci_hcd: stop threads [ 303.729794][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 303.733995][ T4391] vhci_hcd: release socket [ 303.742148][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 303.754727][ T4391] vhci_hcd: disconnect device [ 303.764254][ T8423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.881760][ T8443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.916694][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 303.940716][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 303.954202][ T8443] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.967158][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 303.976092][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 304.018910][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 304.038784][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 304.054447][ T4391] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.061662][ T4391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.077758][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 304.086832][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 304.095773][ T4391] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.102947][ T4391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.116310][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 304.163114][ T4355] device hsr_slave_0 left promiscuous mode [ 304.169769][ T4355] device hsr_slave_1 left promiscuous mode [ 304.176863][ T4355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.189894][ T4355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.200224][ T4355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.213307][ T4355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.222420][ T4355] device bridge_slave_1 left promiscuous mode [ 304.228932][ T4355] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.242498][ T4355] device bridge_slave_0 left promiscuous mode [ 304.249240][ T4355] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.266122][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1556'. [ 304.287973][ T4355] device veth1_macvtap left promiscuous mode [ 304.294365][ T4355] device veth0_macvtap left promiscuous mode [ 304.300513][ T4355] device veth1_vlan left promiscuous mode [ 304.306762][ T4355] device veth0_vlan left promiscuous mode [ 304.451906][ T4259] Bluetooth: hci3: command 0x0419 tx timeout [ 304.886273][ T8556] xt_hashlimit: max too large, truncated to 1048576 [ 304.930326][ T4355] team0 (unregistering): Port device team_slave_1 removed [ 304.982965][ T4355] team0 (unregistering): Port device team_slave_0 removed [ 305.051598][ T4355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.119332][ T4355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.789820][ T4355] bond0 (unregistering): Released all slaves [ 305.910695][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 305.919697][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 305.929239][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 305.941521][ T8423] device veth0_vlan entered promiscuous mode [ 305.962644][ T8550] IPVS: Error joining to the multicast group [ 305.971191][ T8554] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 306.004353][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 306.034701][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 306.064275][ T8423] device veth1_vlan entered promiscuous mode [ 306.097805][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 306.156732][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 306.196778][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 306.223938][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 306.267931][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 306.293402][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 306.350024][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 306.376648][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.407451][ T8443] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.456997][ T8443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 306.474364][ T8423] device veth0_macvtap entered promiscuous mode [ 306.492923][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 306.511307][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.532278][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 306.558490][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 306.576837][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 306.627440][ T8573] loop9: detected capacity change from 0 to 512 [ 306.638998][ T8423] device veth1_macvtap entered promiscuous mode [ 306.649724][ T8573] EXT4-fs: Ignoring removed nobh option [ 306.714836][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.744108][ T8573] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 306.757930][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.775882][ T8573] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.797256][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.806508][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 306.806528][ T27] audit: type=1326 audit(1749695655.165:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8572 comm="syz.9.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0278e929 code=0x7ffc0000 [ 306.831465][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.855714][ T8573] EXT4-fs error (device loop9): ext4_generic_delete_entry:2729: inode #2: block 3: comm syz.9.1566: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 306.896623][ T27] audit: type=1326 audit(1749695655.212:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8572 comm="syz.9.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d0278e929 code=0x7ffc0000 [ 306.897443][ T8423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.942990][ T8573] EXT4-fs error (device loop9) in ext4_delete_entry:2800: Corrupt filesystem [ 306.963942][ T8573] EXT4-fs warning (device loop9): ext4_rename_delete:3778: inode #2: comm syz.9.1566: Deleting old file: nlink 4, error=-117 [ 306.985158][ T27] audit: type=1326 audit(1749695655.212:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8572 comm="syz.9.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0278e929 code=0x7ffc0000 [ 307.036924][ T8580] netlink: 'syz.0.1567': attribute type 7 has an invalid length. [ 307.056418][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1567'. [ 307.060891][ T27] audit: type=1326 audit(1749695655.212:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8572 comm="syz.9.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f8d0278e929 code=0x7ffc0000 [ 307.106939][ T27] audit: type=1326 audit(1749695655.380:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8572 comm="syz.9.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0278e929 code=0x7ffc0000 [ 307.111834][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 307.144664][ T27] audit: type=1326 audit(1749695655.380:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8572 comm="syz.9.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0278e929 code=0x7ffc0000 [ 307.151688][ T8060] EXT4-fs (loop9): unmounting filesystem. [ 307.201161][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 307.216378][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 307.243875][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.294804][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.314081][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.326303][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.347911][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1571'. [ 307.352667][ T8423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.376446][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 307.395806][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 307.410603][ T8589] IPVS: Error joining to the multicast group [ 307.432277][ T8423] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.483669][ T8423] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.503955][ T8423] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.522916][ T8423] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.591971][ T8598] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1573'. [ 307.741308][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 307.750775][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.769974][ T8443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.789171][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.812835][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.845761][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 307.885332][ T6256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.914711][ T6256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.939125][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 308.103623][ T8609] sctp: [Deprecated]: syz.3.1507 (pid 8609) Use of struct sctp_assoc_value in delayed_ack socket option. [ 308.103623][ T8609] Use struct sctp_sack_info instead [ 308.294913][ T27] audit: type=1326 audit(1749695656.568:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8615 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a578e929 code=0x7ffc0000 [ 308.374700][ T27] audit: type=1326 audit(1749695656.568:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8615 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a578e929 code=0x7ffc0000 [ 308.443769][ T27] audit: type=1326 audit(1749695656.568:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8615 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f59a578e929 code=0x7ffc0000 [ 308.556861][ T27] audit: type=1326 audit(1749695656.568:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8615 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a578e929 code=0x7ffc0000 [ 308.910834][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1586'. [ 308.941151][ T8635] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 309.001762][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 309.033104][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 309.105864][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 309.130980][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 309.162028][ T8443] device veth0_vlan entered promiscuous mode [ 309.182280][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 309.202404][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 309.243498][ T8443] device veth1_vlan entered promiscuous mode [ 309.270983][ T8630] lo speed is unknown, defaulting to 1000 [ 309.361234][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 309.373158][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 309.396368][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 309.410196][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 309.436431][ T8443] device veth0_macvtap entered promiscuous mode [ 309.471618][ T8443] device veth1_macvtap entered promiscuous mode [ 309.509429][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 309.523855][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 309.538424][ T8443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.562102][ T8443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.590332][ T8443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.614953][ T8443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.625513][ T8651] random: crng reseeded on system resumption [ 309.635918][ T8443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.662194][ T8443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.697391][ T8443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.712612][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 309.738519][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 309.763742][ T8443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.817445][ T8443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.839439][ T8443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.863536][ T8443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.884748][ T8443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.897497][ T8443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.932666][ T8443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.943258][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 309.959470][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 309.977662][ T8443] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.995412][ T8443] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.008351][ T8443] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.078763][ T8443] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.022688][ T8662] lo speed is unknown, defaulting to 1000 [ 311.426659][ T4312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.483690][ T4312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.515900][ T5312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.529091][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 311.554439][ T5312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.595842][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 311.780721][ T8686] netlink: 'syz.7.1513': attribute type 21 has an invalid length. [ 311.999103][ T8693] netlink: 'syz.7.1607': attribute type 2 has an invalid length. [ 312.039959][ T8691] loop5: detected capacity change from 0 to 2048 [ 312.102008][ T8691] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 312.431249][ T8704] netlink: 'syz.7.1609': attribute type 1 has an invalid length. [ 312.541486][ T8707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1611'. [ 312.658159][ T8713] loop3: detected capacity change from 0 to 512 [ 312.691089][ T8713] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 312.719424][ T8713] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 312.733837][ T8074] EXT4-fs (loop5): unmounting filesystem. [ 312.892864][ T8423] EXT4-fs (loop3): unmounting filesystem. [ 313.115705][ T27] kauditd_printk_skb: 102 callbacks suppressed [ 313.115723][ T27] audit: type=1326 audit(1749695661.078:2979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f7b8e929 code=0x7ffc0000 [ 313.201488][ T27] audit: type=1326 audit(1749695661.106:2980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f7b8e929 code=0x7ffc0000 [ 313.245706][ T8731] loop5: detected capacity change from 0 to 512 [ 313.265530][ T27] audit: type=1326 audit(1749695661.106:2981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb6f7b8e929 code=0x7ffc0000 [ 313.309556][ T8731] EXT4-fs (loop5): 1 orphan inode deleted [ 313.317687][ T27] audit: type=1326 audit(1749695661.106:2982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f7b8e929 code=0x7ffc0000 [ 313.320503][ T8731] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 313.365169][ T11] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 313.375686][ T11] EXT4-fs error (device loop5): ext4_release_dquot:6850: comm kworker/u4:1: Failed to release dquot type 1 [ 313.385179][ T27] audit: type=1326 audit(1749695661.106:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f7b8e929 code=0x7ffc0000 [ 313.411533][ T8731] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.527474][ T27] audit: type=1326 audit(1749695661.106:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6f7b8e929 code=0x7ffc0000 [ 313.533401][ T8741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1623'. [ 313.604877][ T27] audit: type=1326 audit(1749695661.106:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f7b8e929 code=0x7ffc0000 [ 313.660849][ T8074] EXT4-fs (loop5): unmounting filesystem. [ 313.681088][ T27] audit: type=1326 audit(1749695661.106:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f7b8e929 code=0x7ffc0000 [ 313.762015][ T27] audit: type=1326 audit(1749695661.106:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6f7b8e929 code=0x7ffc0000 [ 313.904192][ T8750] loop9: detected capacity change from 0 to 512 [ 313.982031][ T8750] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 314.007737][ T8750] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 314.219669][ T8060] EXT4-fs (loop9): unmounting filesystem. [ 314.370337][ T8772] usb usb1: usbfs: process 8772 (syz.9.1635) did not claim interface 0 before use [ 314.422004][ T8775] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1637'. [ 314.437222][ T8770] loop3: detected capacity change from 0 to 2048 [ 314.478978][ T8770] loop3: p1 < > p4 [ 314.484547][ T8770] loop3: p4 size 8388608 extends beyond EOD, truncated [ 314.825921][ T8788] loop9: detected capacity change from 0 to 512 [ 314.909004][ T8791] program syz.5.1645 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.940418][ T8788] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 314.996324][ T8788] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 315.023467][ T8788] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.222763][ T8788] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.246904][ T8804] netlink: 'syz.9.1643': attribute type 10 has an invalid length. [ 315.267473][ T8806] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1649'. [ 315.290385][ T8804] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1643'. [ 315.456542][ T8804] team0: Port device geneve0 added [ 315.543649][ T8788] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.699427][ T8788] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.244159][ T8788] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.523688][ T8830] device macvlan1 entered promiscuous mode [ 317.802947][ T8830] device ipvlan0 entered promiscuous mode [ 317.842117][ T8830] device ipvlan0 left promiscuous mode [ 317.886835][ T8830] device macvlan1 left promiscuous mode [ 317.997218][ T8788] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.015787][ T8788] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.034625][ T8788] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.051210][ T8788] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.102358][ T8060] EXT4-fs (loop9): unmounting filesystem. [ 318.436518][ T8843] loop9: detected capacity change from 0 to 128 [ 318.602219][ T8847] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1663'. [ 318.777096][ T27] kauditd_printk_skb: 155 callbacks suppressed [ 318.777113][ T27] audit: type=1326 audit(1749695666.382:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fadb8e929 code=0x7ffc0000 [ 318.853443][ T27] audit: type=1326 audit(1749695666.410:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2fadb8e929 code=0x7ffc0000 [ 318.911874][ T27] audit: type=1326 audit(1749695666.410:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fadb8e929 code=0x7ffc0000 [ 318.983598][ T27] audit: type=1326 audit(1749695666.410:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fadb8e929 code=0x7ffc0000 [ 319.042129][ T27] audit: type=1326 audit(1749695666.410:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fadb8e929 code=0x7ffc0000 [ 319.105346][ T27] audit: type=1326 audit(1749695666.410:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fadb8e929 code=0x7ffc0000 [ 319.168919][ T27] audit: type=1326 audit(1749695666.410:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fadb8e929 code=0x7ffc0000 [ 319.224563][ T27] audit: type=1326 audit(1749695666.410:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2fadb8e929 code=0x7ffc0000 [ 319.273478][ T27] audit: type=1326 audit(1749695666.410:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fadb8e929 code=0x7ffc0000 [ 319.318110][ T27] audit: type=1326 audit(1749695666.410:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fadb8e929 code=0x7ffc0000 [ 319.403329][ T8865] loop9: detected capacity change from 0 to 256 [ 319.756385][ T8875] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1676'. [ 319.998721][ T8881] loop9: detected capacity change from 0 to 512 [ 320.007913][ T8881] EXT4-fs: Ignoring removed nobh option [ 320.100340][ T8881] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 320.122079][ T8881] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.169366][ T8881] EXT4-fs error (device loop9): ext4_generic_delete_entry:2729: inode #2: block 3: comm syz.9.1679: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 320.202168][ T8881] EXT4-fs error (device loop9) in ext4_delete_entry:2800: Corrupt filesystem [ 320.214105][ T8881] EXT4-fs warning (device loop9): ext4_rename_delete:3778: inode #2: comm syz.9.1679: Deleting old file: nlink 4, error=-117 [ 320.293328][ T8060] EXT4-fs (loop9): unmounting filesystem. [ 320.420589][ T8894] loop3: detected capacity change from 0 to 2048 [ 320.480611][ T8894] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 320.592018][ T8423] EXT4-fs (loop3): unmounting filesystem. [ 320.697533][ T4242] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 320.715546][ T4242] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 321.119688][ T8903] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1687'. [ 321.299985][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1688'. [ 321.318248][ T8907] IPVS: Error joining to the multicast group [ 322.568667][ T8916] lo speed is unknown, defaulting to 1000 [ 322.918258][ T8924] xt_hashlimit: size too large, truncated to 1048576 [ 323.462656][ T8933] xt_hashlimit: size too large, truncated to 1048576 [ 323.497157][ T8933] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 323.893230][ T8942] loop7: detected capacity change from 0 to 2048 [ 324.193909][ T8942] loop7: p1 < > p4 [ 324.211371][ T8942] loop7: p4 size 8388608 extends beyond EOD, truncated [ 324.511420][ T8946] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1698'. [ 325.198850][ T8939] tipc: Enabling of bearer rejected, failed to enable media [ 325.412471][ T27] kauditd_printk_skb: 130 callbacks suppressed [ 325.412489][ T27] audit: type=1326 audit(1749695672.575:3283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8951 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f7b8e929 code=0x7ffc0000 [ 325.462084][ T4305] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 325.482762][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1701'. [ 325.488040][ T4305] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 325.519975][ T27] audit: type=1326 audit(1749695672.613:3284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8951 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f7b8e929 code=0x7ffc0000 [ 325.554202][ T8950] IPVS: Error joining to the multicast group [ 325.589937][ T27] audit: type=1326 audit(1749695672.613:3285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8951 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb6f7b8e929 code=0x7ffc0000 [ 325.658996][ T27] audit: type=1326 audit(1749695672.613:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8951 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f7b8e929 code=0x7ffc0000 [ 325.739830][ T27] audit: type=1326 audit(1749695672.613:3287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8951 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6f7b8e929 code=0x7ffc0000 [ 325.822452][ T27] audit: type=1326 audit(1749695672.613:3288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8951 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f7b8e929 code=0x7ffc0000 [ 325.903761][ T27] audit: type=1326 audit(1749695672.613:3289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8951 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6f7b8e929 code=0x7ffc0000 [ 326.007665][ T27] audit: type=1326 audit(1749695672.613:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8951 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f7b8e929 code=0x7ffc0000 [ 326.096062][ T27] audit: type=1326 audit(1749695672.622:3291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8951 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb6f7b8e929 code=0x7ffc0000 [ 326.173621][ T27] audit: type=1326 audit(1749695672.622:3292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8951 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f7b8e929 code=0x7ffc0000 [ 326.617176][ T8813] Set syz1 is full, maxelem 65536 reached [ 326.763915][ T8970] netlink: 'syz.7.1708': attribute type 10 has an invalid length. [ 326.807979][ T8970] batman_adv: batadv0: Adding interface: team0 [ 326.815495][ T8973] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1710'. [ 326.845486][ T8970] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.930973][ T8970] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 326.968804][ T8974] netlink: 'syz.7.1708': attribute type 10 has an invalid length. [ 326.998062][ T8974] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1708'. [ 327.046985][ T8974] device team0 entered promiscuous mode [ 327.059254][ T8974] device team_slave_0 entered promiscuous mode [ 327.066077][ T8974] device team_slave_1 entered promiscuous mode [ 327.090025][ T8974] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.108574][ T8974] batman_adv: batadv0: Interface activated: team0 [ 327.144952][ T8974] batman_adv: batadv0: Interface deactivated: team0 [ 327.151751][ T8974] batman_adv: batadv0: Removing interface: team0 [ 327.196895][ T8974] bridge0: port 3(team0) entered blocking state [ 327.219819][ T8974] bridge0: port 3(team0) entered disabled state [ 327.234882][ T8974] bridge0: port 3(team0) entered blocking state [ 327.241372][ T8974] bridge0: port 3(team0) entered forwarding state [ 327.292274][ T8988] loop3: detected capacity change from 0 to 1024 [ 327.327455][ T8988] EXT4-fs: Ignoring removed nobh option [ 327.333099][ T8988] EXT4-fs: Ignoring removed bh option [ 327.371376][ T8988] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 327.431259][ T8990] loop5: detected capacity change from 0 to 1024 [ 327.460270][ T8990] EXT4-fs: Ignoring removed orlov option [ 327.472050][ T8988] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 327.503997][ T8990] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 327.543046][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.686688][ T8423] EXT4-fs (loop3): unmounting filesystem. [ 328.265963][ T9009] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1725'. [ 328.586909][ T8074] EXT4-fs (loop5): unmounting filesystem. [ 328.597174][ T9018] loop9: detected capacity change from 0 to 2048 [ 328.674394][ T9018] loop9: p1 < > p4 [ 328.680652][ T9018] loop9: p4 size 8388608 extends beyond EOD, truncated [ 329.006066][ T9040] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1738'. [ 329.075632][ T9042] random: crng reseeded on system resumption [ 329.770623][ T9068] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1752'. [ 330.091882][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888057252800: rx timeout, send abort [ 330.210169][ T2185] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 330.238717][ T2185] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 330.317378][ T9091] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1763'. [ 330.547193][ T9091] IPVS: Error joining to the multicast group [ 330.636462][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888057252800: abort rx timeout. Force session deactivation [ 330.832384][ T9100] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1767'. [ 330.858200][ T9102] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1768'. [ 330.883265][ T9102] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1768'. [ 330.915324][ T9102] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1768'. [ 330.991899][ T9108] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1771'. [ 331.150211][ T27] kauditd_printk_skb: 111 callbacks suppressed [ 331.150227][ T27] audit: type=1326 audit(1749695677.945:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.0.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 331.249519][ T27] audit: type=1326 audit(1749695677.945:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.0.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 331.320790][ T27] audit: type=1326 audit(1749695677.945:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.0.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 331.382038][ T27] audit: type=1326 audit(1749695677.945:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.0.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 331.406721][ T9128] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1781'. [ 331.425116][ T27] audit: type=1326 audit(1749695677.945:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.0.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 331.453947][ T4300] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 331.485857][ T4300] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 331.520088][ T27] audit: type=1326 audit(1749695677.945:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.0.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 331.575522][ T27] audit: type=1326 audit(1749695677.945:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.0.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 331.577953][ T9134] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1783'. [ 331.620161][ T27] audit: type=1326 audit(1749695677.973:3411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.0.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 331.664736][ T27] audit: type=1326 audit(1749695677.973:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.0.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 331.687515][ T9134] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1783'. [ 331.719900][ T9134] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1783'. [ 331.728940][ T27] audit: type=1326 audit(1749695677.973:3413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.0.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efc8258e929 code=0x7ffc0000 [ 331.840393][ T9137] loop5: detected capacity change from 0 to 512 [ 331.931051][ T9137] EXT4-fs (loop5): 1 orphan inode deleted [ 331.958782][ T8831] EXT4-fs error (device loop5): ext4_release_dquot:6850: comm kworker/u4:15: Failed to release dquot type 1 [ 331.976014][ T9137] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 332.024329][ T9137] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.237561][ T9136] lo speed is unknown, defaulting to 1000 [ 332.283790][ T9152] loop9: detected capacity change from 0 to 128 [ 332.437856][ T9152] syz.9.1790: attempt to access beyond end of device [ 332.437856][ T9152] loop9: rw=2049, sector=145, nr_sectors = 552 limit=128 [ 332.567807][ T8074] EXT4-fs (loop5): unmounting filesystem. [ 332.901501][ T4300] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 332.932990][ T4300] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 333.595105][ T9185] lo speed is unknown, defaulting to 1000 [ 333.834944][ T9202] loop3: detected capacity change from 0 to 512 [ 333.850635][ T9202] EXT4-fs: Ignoring removed nobh option [ 333.890131][ T9202] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 333.899137][ T9202] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.029703][ T8423] EXT4-fs (loop3): unmounting filesystem. [ 334.335851][ T4300] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 334.365500][ T4300] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 334.803870][ T9241] loop3: detected capacity change from 0 to 512 [ 334.836008][ T9241] EXT4-fs: Ignoring removed nobh option [ 334.896668][ T9223] lo speed is unknown, defaulting to 1000 [ 334.914486][ T9241] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 334.940201][ T9241] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.088841][ T8423] EXT4-fs (loop3): unmounting filesystem. [ 335.149175][ T9248] loop5: detected capacity change from 0 to 128 [ 335.274177][ T9254] syz.5.1827: attempt to access beyond end of device [ 335.274177][ T9254] loop5: rw=2049, sector=145, nr_sectors = 88 limit=128 [ 335.323765][ T9248] syz.5.1827: attempt to access beyond end of device [ 335.323765][ T9248] loop5: rw=2049, sector=233, nr_sectors = 808 limit=128 [ 335.380373][ T9259] loop3: detected capacity change from 0 to 1024 [ 335.408723][ T9254] syz.5.1827: attempt to access beyond end of device [ 335.408723][ T9254] loop5: rw=0, sector=97, nr_sectors = 32 limit=128 [ 335.430668][ T9259] EXT4-fs: Ignoring removed nobh option [ 335.444845][ T9254] syz.5.1827: attempt to access beyond end of device [ 335.444845][ T9254] loop5: rw=0, sector=145, nr_sectors = 88 limit=128 [ 335.458849][ T9259] EXT4-fs: Ignoring removed bh option [ 335.476707][ T9259] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 335.593507][ T9259] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 336.150115][ T9275] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.1828: Allocating blocks 497-513 which overlap fs metadata [ 336.307416][ T4304] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 336.343645][ T4304] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 336.518606][ T9299] loop9: detected capacity change from 0 to 512 [ 336.562227][ T8423] EXT4-fs (loop3): unmounting filesystem. [ 336.668140][ T9301] loop0: detected capacity change from 0 to 2048 [ 336.781766][ T9301] loop0: p1 < > p4 [ 336.786307][ T27] kauditd_printk_skb: 372 callbacks suppressed [ 336.786322][ T27] audit: type=1326 audit(1749695683.221:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9291 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a578e929 code=0x7ffc0000 [ 336.819735][ T9301] loop0: p4 size 8388608 extends beyond EOD, truncated [ 336.869454][ T27] audit: type=1326 audit(1749695683.231:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9291 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a578e929 code=0x7ffc0000 [ 336.953987][ T9307] __nla_validate_parse: 6 callbacks suppressed [ 336.954030][ T9307] netlink: 41 bytes leftover after parsing attributes in process `wޣ'. [ 337.066755][ T9308] loop9: detected capacity change from 0 to 1024 [ 337.078185][ T9308] EXT4-fs: Ignoring removed nomblk_io_submit option [ 337.268472][ T9308] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 337.657841][ T27] audit: type=1326 audit(1749695683.773:3787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9291 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f59a578e929 code=0x7ffc0000 [ 337.658969][ T8060] EXT4-fs (loop9): unmounting filesystem. [ 337.683644][ T27] audit: type=1326 audit(1749695683.942:3788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9291 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a578e929 code=0x7ffc0000 [ 337.729765][ T27] audit: type=1326 audit(1749695683.942:3789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9291 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a578e929 code=0x7ffc0000 [ 337.921582][ T9319] loop0: detected capacity change from 0 to 2048 [ 337.985854][ T9319] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 338.311659][ T9342] syz.5.1859 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 338.720196][ T9354] loop5: detected capacity change from 0 to 2048 [ 338.793579][ T9354] loop5: p1 < > p4 [ 338.813434][ T9354] loop5: p4 size 8388608 extends beyond EOD, truncated [ 338.865610][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 338.930757][ T27] audit: type=1326 audit(1749695685.233:3790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f7b8e929 code=0x7ffc0000 [ 338.999635][ T27] audit: type=1326 audit(1749695685.251:3791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f7b8e929 code=0x7ffc0000 [ 339.113425][ T27] audit: type=1326 audit(1749695685.251:3792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb6f7b8e929 code=0x7ffc0000 [ 339.190807][ T27] audit: type=1326 audit(1749695685.251:3793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f7b8e929 code=0x7ffc0000 [ 339.248165][ T9379] [ 339.250586][ T9379] ====================================================== [ 339.257647][ T9379] WARNING: possible circular locking dependency detected [ 339.264761][ T9379] 6.1.141-syzkaller #0 Not tainted [ 339.266461][ T27] audit: type=1326 audit(1749695685.251:3794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f7b8e929 code=0x7ffc0000 [ 339.269905][ T9379] ------------------------------------------------------ [ 339.269916][ T9379] syz.0.1871/9379 is trying to acquire lock: [ 339.269927][ T9379] ffff8880b8f281d8 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x184/0x870 [ 339.313487][ T9379] [ 339.313487][ T9379] but task is already holding lock: [ 339.320969][ T9379] ffff8880b8f28418 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 339.330004][ T9379] [ 339.330004][ T9379] which lock already depends on the new lock. [ 339.330004][ T9379] [ 339.340456][ T9379] [ 339.340456][ T9379] the existing dependency chain (in reverse order) is: [ 339.349747][ T9379] [ 339.349747][ T9379] -> #1 (&base->lock){-.-.}-{2:2}: [ 339.357452][ T9379] _raw_spin_lock_irqsave+0xa4/0xf0 [ 339.363184][ T9379] lock_timer_base+0x123/0x270 [ 339.368479][ T9379] __mod_timer+0x117/0xd20 [ 339.373421][ T9379] queue_delayed_work_on+0x126/0x1e0 [ 339.379275][ T9379] kvfree_call_rcu+0x4cb/0x870 [ 339.384581][ T9379] rtnl_register_internal+0x489/0x590 [ 339.390488][ T9379] rtnl_register+0x2e/0x70 [ 339.395626][ T9379] ip_rt_init+0x323/0x3b5 [ 339.400499][ T9379] ip_init+0xa/0x14 [ 339.404935][ T9379] inet_init+0x2bd/0x3cf [ 339.409699][ T9379] do_one_initcall+0x214/0x7a0 [ 339.414991][ T9379] do_initcall_level+0x137/0x1e4 [ 339.420447][ T9379] do_initcalls+0x4b/0x8a [ 339.425296][ T9379] kernel_init_freeable+0x3fa/0x5ac [ 339.431454][ T9379] kernel_init+0x19/0x1b0 [ 339.436310][ T9379] ret_from_fork+0x1f/0x30 [ 339.441259][ T9379] [ 339.441259][ T9379] -> #0 (krc.lock){..-.}-{2:2}: [ 339.448294][ T9379] __lock_acquire+0x2cf8/0x7c50 [ 339.453671][ T9379] lock_acquire+0x1b4/0x490 [ 339.458702][ T9379] _raw_spin_lock+0x2a/0x40 [ 339.463738][ T9379] kvfree_call_rcu+0x184/0x870 [ 339.469034][ T9379] trie_delete_elem+0x52d/0x690 [ 339.474413][ T9379] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 339.480493][ T9379] bpf_trace_run3+0x1e3/0x400 [ 339.485713][ T9379] enqueue_timer+0x411/0x5c0 [ 339.491112][ T9379] __mod_timer+0x8e1/0xd20 [ 339.496090][ T9379] sk_reset_timer+0x1f/0xb0 [ 339.501133][ T9379] tipc_sk_finish_conn+0x154/0x7e0 [ 339.506782][ T9379] tipc_socketpair+0x250/0x470 [ 339.512185][ T9379] __sys_socketpair+0x2ac/0x540 [ 339.517713][ T9379] __x64_sys_socketpair+0x97/0xb0 [ 339.523295][ T9379] do_syscall_64+0x4c/0xa0 [ 339.528284][ T9379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.534726][ T9379] [ 339.534726][ T9379] other info that might help us debug this: [ 339.534726][ T9379] [ 339.544970][ T9379] Possible unsafe locking scenario: [ 339.544970][ T9379] [ 339.552416][ T9379] CPU0 CPU1 [ 339.557786][ T9379] ---- ---- [ 339.563147][ T9379] lock(&base->lock); [ 339.567248][ T9379] lock(krc.lock); [ 339.573572][ T9379] lock(&base->lock); [ 339.580157][ T9379] lock(krc.lock); [ 339.584036][ T9379] [ 339.584036][ T9379] *** DEADLOCK *** [ 339.584036][ T9379] [ 339.592891][ T9379] 2 locks held by syz.0.1871/9379: [ 339.598030][ T9379] #0: ffff8880b8f28418 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 339.607457][ T9379] #1: ffffffff8c92aaa0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0xf0/0x400 [ 339.617045][ T9379] [ 339.617045][ T9379] stack backtrace: [ 339.622974][ T9379] CPU: 1 PID: 9379 Comm: syz.0.1871 Not tainted 6.1.141-syzkaller #0 [ 339.631062][ T9379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 339.641140][ T9379] Call Trace: [ 339.644610][ T9379] [ 339.647642][ T9379] dump_stack_lvl+0x168/0x22e [ 339.652437][ T9379] ? load_image+0x3b0/0x3b0 [ 339.656946][ T9379] ? show_regs_print_info+0x12/0x12 [ 339.662156][ T9379] ? print_circular_bug+0x12b/0x1a0 [ 339.667378][ T9379] check_noncircular+0x274/0x310 [ 339.672327][ T9379] ? add_chain_block+0x940/0x940 [ 339.677272][ T9379] ? lockdep_lock+0xdc/0x1e0 [ 339.681973][ T9379] ? _find_first_zero_bit+0xcf/0x100 [ 339.687263][ T9379] __lock_acquire+0x2cf8/0x7c50 [ 339.692121][ T9379] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 339.698269][ T9379] ? verify_lock_unused+0x140/0x140 [ 339.703487][ T9379] ? kasan_save_stack+0x4c/0x60 [ 339.708451][ T9379] ? kasan_save_stack+0x3a/0x60 [ 339.713316][ T9379] ? __kasan_record_aux_stack+0xb2/0xc0 [ 339.718874][ T9379] ? kvfree_call_rcu+0x108/0x870 [ 339.723828][ T9379] ? trie_delete_elem+0x52d/0x690 [ 339.728862][ T9379] ? bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 339.734496][ T9379] ? bpf_trace_run3+0x1e3/0x400 [ 339.739349][ T9379] ? enqueue_timer+0x411/0x5c0 [ 339.744108][ T9379] ? __mod_timer+0x8e1/0xd20 [ 339.748704][ T9379] ? sk_reset_timer+0x1f/0xb0 [ 339.753389][ T9379] ? tipc_sk_finish_conn+0x154/0x7e0 [ 339.758686][ T9379] ? tipc_socketpair+0x250/0x470 [ 339.763638][ T9379] ? __sys_socketpair+0x2ac/0x540 [ 339.768675][ T9379] ? __x64_sys_socketpair+0x97/0xb0 [ 339.774385][ T9379] ? do_syscall_64+0x4c/0xa0 [ 339.779030][ T9379] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.785142][ T9379] lock_acquire+0x1b4/0x490 [ 339.789663][ T9379] ? kvfree_call_rcu+0x184/0x870 [ 339.794619][ T9379] ? read_lock_is_recursive+0x10/0x10 [ 339.800009][ T9379] ? __phys_addr+0xb6/0x170 [ 339.804905][ T9379] _raw_spin_lock+0x2a/0x40 [ 339.809432][ T9379] ? kvfree_call_rcu+0x184/0x870 [ 339.814472][ T9379] kvfree_call_rcu+0x184/0x870 [ 339.819683][ T9379] ? rcu_leak_callback+0x10/0x10 [ 339.824628][ T9379] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 339.830526][ T9379] ? _raw_spin_unlock+0x40/0x40 [ 339.835383][ T9379] trie_delete_elem+0x52d/0x690 [ 339.840265][ T9379] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 339.845724][ T9379] bpf_trace_run3+0x1e3/0x400 [ 339.850438][ T9379] ? do_raw_spin_unlock+0x11d/0x230 [ 339.855678][ T9379] ? bpf_trace_run3+0xf0/0x400 [ 339.860456][ T9379] ? bpf_trace_run2+0x3b0/0x3b0 [ 339.865323][ T9379] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 339.871234][ T9379] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 339.876634][ T9379] ? _raw_spin_lock+0x40/0x40 [ 339.881411][ T9379] enqueue_timer+0x411/0x5c0 [ 339.886009][ T9379] __mod_timer+0x8e1/0xd20 [ 339.890453][ T9379] sk_reset_timer+0x1f/0xb0 [ 339.894985][ T9379] tipc_sk_finish_conn+0x154/0x7e0 [ 339.900194][ T9379] tipc_socketpair+0x250/0x470 [ 339.904968][ T9379] __sys_socketpair+0x2ac/0x540 [ 339.909954][ T9379] __x64_sys_socketpair+0x97/0xb0 [ 339.915023][ T9379] do_syscall_64+0x4c/0xa0 [ 339.919490][ T9379] ? clear_bhb_loop+0x60/0xb0 [ 339.924258][ T9379] ? clear_bhb_loop+0x60/0xb0 [ 339.928937][ T9379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.934845][ T9379] RIP: 0033:0x7efc8258e929 [ 339.939265][ T9379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.958884][ T9379] RSP: 002b:00007efc8332d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 339.967310][ T9379] RAX: ffffffffffffffda RBX: 00007efc827b5fa0 RCX: 00007efc8258e929 [ 339.975290][ T9379] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 339.983258][ T9379] RBP: 00007efc82610b39 R08: 0000000000000000 R09: 0000000000000000 [ 339.991230][ T9379] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000000 [ 339.999208][ T9379] R13: 0000000000000000 R14: 00007efc827b5fa0 R15: 00007ffdbdac2548 [ 340.007197][ T9379]