last executing test programs: 21.814047246s ago: executing program 0 (id=60): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 21.501869467s ago: executing program 0 (id=62): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 21.286522539s ago: executing program 0 (id=63): r0 = gettid() r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000240), 0x36, 0xcc800) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close(r6) statfs(&(0x7f0000000300)='./file0\x00', 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) 19.953900229s ago: executing program 0 (id=65): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x75, 0x0, &(0x7f0000001080)) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, 0x0, 0x4d014) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010125bd00"/20, @ANYRES32=r5], 0x20}}, 0x400c004) 14.693094516s ago: executing program 0 (id=79): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000900)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x48}}, 0x0) 13.963960131s ago: executing program 0 (id=83): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0xfffe, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, 'bridge0\x00'}}, 0x1e) syz_open_procfs(0x0, &(0x7f0000000380)='attr/exec\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r3}, 0x10) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB]) r4 = syz_io_uring_setup(0x2e3b, &(0x7f0000000240)={0x0, 0x482b, 0x10100, 0x1}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r4, 0x567, 0xa1ff, 0x0, 0x0, 0x0) close(r2) sendmsg$nl_route_sched(r0, 0x0, 0x4000c00) 13.735748013s ago: executing program 3 (id=84): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x1564}, 0x18) r0 = syz_io_uring_setup(0x3c08, &(0x7f00000005c0)={0x0, 0x8ec7, 0x10, 0x1, 0x39a}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000340)=0x7, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x3f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) io_uring_enter(r0, 0x1d69, 0x0, 0x0, 0x0, 0x0) 13.125216677s ago: executing program 3 (id=87): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_cache\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000150000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0xf, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0xfffc, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x9, 0x40000000000005}, {}, 0x7ff, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in=@rand_addr=0x64010100, 0x0, 0x1, 0x3, 0x0, 0x9075}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 11.928029536s ago: executing program 3 (id=89): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63178e6203c229"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 11.494355839s ago: executing program 3 (id=90): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x2000000000000178, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) mkdir(0x0, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4, 0x0, 0x3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000000020000000000000000000181900", @ANYRES16=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(r3, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 11.2628766s ago: executing program 3 (id=93): socket$key(0xf, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x9}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x61]}}, 0x0, 0x21, 0x0, 0x0, 0x10000, 0x0, @void, @value}, 0x28) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)={0x244000, 0xe3968136f5c15b30, 0x1}, 0x18) faccessat2(r0, &(0x7f0000000300)='./file0\x00', 0xff, 0x1000) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x15, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) listen(0xffffffffffffffff, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r4 = eventfd2(0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) ppoll(&(0x7f00000003c0)=[{0xffffffffffffffff, 0x4000}], 0x1, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) 10.028384789s ago: executing program 3 (id=97): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, &(0x7f0000000cc0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x803, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xffffffff}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r3}, 0x10) syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) 6.705850913s ago: executing program 1 (id=109): r0 = gettid() r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000240), 0x36, 0xcc800) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) close(r5) statfs(&(0x7f0000000300)='./file0\x00', 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) 5.490511422s ago: executing program 1 (id=111): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 5.373520652s ago: executing program 1 (id=112): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18050000000000000010e80500000000b708004960892e2e7c1a00000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f80c0000c0a400000000000007da311c00ffffffb705165526ece3d9729e0200", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x200000000200}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000f303"], 0x14}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000540)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @mcast1, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8}, {}, {}, {0xa888, 0x88be, 0x8000000}}}}}}}, 0x0) r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000480), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) write$binfmt_register(r6, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) 4.860602586s ago: executing program 4 (id=113): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301080, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 4.587896178s ago: executing program 4 (id=116): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='attr/exec\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = syz_io_uring_setup(0x2e3b, &(0x7f0000000240)={0x0, 0x482b, 0x10100, 0x1}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/9, 0x9}], 0x1}) io_uring_enter(r2, 0x567, 0xa1ff, 0x0, 0x0, 0x0) 4.538459068s ago: executing program 2 (id=117): r0 = gettid() r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000240), 0x36, 0xcc800) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close(r5) statfs(&(0x7f0000000300)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) 4.365985099s ago: executing program 4 (id=118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, 0x0, 0xffdd) 3.626936204s ago: executing program 2 (id=119): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x158) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3.525897705s ago: executing program 4 (id=120): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0xc2, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)="cb423a11b33192d673ba4c831a9adca48ca7eb0d2f073f36dfc3a94144bfd9d81639fd65ac4e557e12e7b0d2dfea051a7b440ade19d879e209596bf44477ecf6370e0133e541ef9f9e3631dde33dabf7842deb7a72c3ffe0f611062628683e3db2c685af", &(0x7f0000000640), 0x1003, r0}, 0x38) 3.365844786s ago: executing program 2 (id=121): r0 = gettid() r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000240), 0x36, 0xcc800) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close(r6) statfs(&(0x7f0000000300)='./file0\x00', 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) 3.365249066s ago: executing program 1 (id=122): bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0a000000050000"], 0x48) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x9056, 0x4000000000008b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000180)={0x2020}, 0x2020) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) pipe2$watch_queue(&(0x7f0000000280), 0x80) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xff3a) getpid() 3.133170898s ago: executing program 4 (id=123): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 2.217511724s ago: executing program 2 (id=124): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x2000000000000178, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) mkdir(0x0, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='vnet_tx_trigger\x00', r3, 0x0, 0x3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 1.993275336s ago: executing program 2 (id=125): socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUk4gWC3qvS7INJZtuyW5KEwu2B3vxIkUQsSB69+6x+A/4VxS0UKQEPXiJzGY2XZPZNNlumm3384Fp35uZzZvvvvm+fbOzywbQt8bSfwoRL0fEN0nESMu2wcg2jq3tt/Lw+nS6JLG6+ulfSSTZuub+Sfb/oazyUkT89lXEycLmdmtLy3OlSqW8kNXH6/NXxmtLy6cuzZdmy7Ply5NTU2fempp89523uxbr6+f/+f6Tux+e+fr4yne/3D9yO4mzcTjb1hrHE7jRWhmLsew5GYqzG3ac6EJjvSTZ6wOgIwNZng9FOgaMxECW9blWR57moQG77Ms0rYE+lch/6FPNeUDz2r5L18HPjAfvr10AbY5/cO29kRhuXBsdXEn+d2WUXu+OdqH9tI1f/7xzO12i3fsQ+7vQEMAGN25GxOnBwc3jX5KNf507vY19NrbRb68/sJfupvOfN/LmP4X1+U/kzH8O5eRuJx6f/4X7XWimrXT+917u/Hf9ptXoQFZ7oTHnG0ouXqqU07HtxYg4EUP70/pERHyQfxPk88LKvdV27bfO/9Ilbb85F8yO4/7ghvnfTKleevLI1zy4GfFK7vw3We//JKf/0+fj/DbbOFa+82q7bY+Pf3et/hTxWm7/P+rMZOv7k+ON82G8eVZs9vetY7+3a3+v40/7/+DW8Y8mrfdraztv48fhf8vttnV6/u9LPmuU92XrrpXq9YWJiH3Jx5vXTz56bLPe3D+N/8Txrce/vPP/QJrY24z/1tFbrbsO7yz+3ZXGP7Oj/t954d5HX/zQrv3t9f+bjdKJbM12xr/tHuCTPHcAAAAAAADQawoRcTiSQnG9XCgUi2uf7zgaBwuVaq1+8mJ18fJMNL4rOxpDhead7pGWz0NMZJ+HbdYnN9SnIuJIRHw7cKBRL05XKzN7HTwAAAAAAAAAAAAAAAAAAAD0iEMRw3nf/0/9MZD/mDargWfRFj/5DTzn2ud/tqUbv/QE9CSv/9C/5D/0L/kP/Uv+Q/+S/9C/5D/0L/kP/Wsn+f/zuV08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+nD93Ll1WVx5en07rM1eXFueqV0/NlGtzxfnF6eJ0deFKcbZana2Ui9PV+cf9vUq1emViMhavjdfLtfp4bWn5wnx18XL9wqX50mz5QnnoqUQFAAAAAAAAAAAAAAAAAAAAz5ba0vJcqVIpLygodFQY7I3D6MFCoTcOo8PCXo9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDIfwEAAP//wGE62g==") r0 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x7, 0x1, 0x5, 0x6, 0x5, 0x1, {0x1, 0x180, 0xff, 0x5, 0xff, 0xd615, 0x2, 0x800001, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x6, 0x800001}}}}, 0xa0) 1.957727256s ago: executing program 4 (id=126): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x274, &(0x7f0000000000)="$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") openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000100)={[{@resgid}, {@resgid}, {@noblock_validity}]}, 0xff, 0x454, &(0x7f0000001080)="$eJzs281vVFUbAPDn3umUlxewFfGDD7WKxsaPlgIqCxdqNHGBiYkudNm0hSADNbQmQoiCMbgyxsS9cem/4Eo3xrgycat7Q0IMG8DVmDtzL50pM0M7zHQK8/slF86599ye88y5Z+bce2YCGFoT2T9JxPaI+DMixurZ5gIT9f+uXz0/d+Pq+bkkqtV3/0lq5a5dPT9XFC3O25ZnJtOI9Isk9raod+nsuZOzlcrCmTw/vXzqo+mls+deOHFq9vjC8YXTB48cOXxo5uWXDr7YkzizNl3b8+nivt1vffDN20e/aop/VRw9MtHp4NPVao+rG6wdDelkZIANYV1KEZF1V7k2/seiFCudNxZvfj7QxgF9Va1Wq9vaH75QBe5hSTTnDXkYFsUHfXb/W2yrJwGv9m/6MXBXXqvfAGVxX8+3+pGRSPMy5fz+ttSH+ici4v0L/36XbdGf5xAAAE1+yuY/z7ea/6XxUEO5+/K1ofGIuD8idkbEAxGxKyIejKiVfTgiHlln/Q2LJNej5fwnvdx1cGuQzf9eyde2mud/xewvxkt5bkct/nJy7ERl4UD+mkxGeUuWn+lQx89v/PF1u2ON879sy+ov5oJ5Oy6PbGk+Z352efZOYm505WLEnpFW8Sc3VwKSiNgdEXu6rOPEsz/sa3fs9vF30IN1pur3Ec/U+/9CrIq/kHRen5z+X1QWDkwXV8Wtfvv90jvt6r+j+Hsg6///t7z+b8Y/njSu1y6tv45Lf33Z9p6m2+t/NHmvlh7N930yu7x8ZiZiNDlab3Tj/oMr5xb5onwW/+T+1uN/Z6y8EnsjIruIH42IxyLi8bztT0TEkxGxv0P8v77+1Ifdx99fWfzz6+r/lcRorN7TOlE6+cuPTZWO3xL/jc79f7iWmsz3rOX9by3t6u5qBgAAgLtPGhHbI0mnbqbTdGqq/n35XRFpZXFp+bljix+fnq//RmA8Ii2edI01PA+dyW/r6/mLEVH/akFx/FD+3Pjb0tZafmpusTI/6OBhyG1rM/4zf/fjCy/A5uL3WjC8jH8YXsY/DK91jP+kn+0ANl6L8b91EO0ANl6rz//PBtAOYOOtGv+W/WCIeP4Hw8v4h+Fl/MNQWtoat/+RfMdE8Ze6PP2eTUR5UzSjb4lIN0UzNm2ifJePi8G9JwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTSfwEAAP//L1neZg==") r2 = creat(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000000)) splice(r0, 0x0, r1, 0x0, 0x8000f28, 0x0) memfd_create(&(0x7f00000004c0)='\'\x00', 0x1) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r3 = open(0x0, 0x64842, 0x86) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) r4 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000340)=""/28) 479.201987ms ago: executing program 2 (id=127): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x274, &(0x7f0000000000)="$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") openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000100)={[{@resgid}, {@resgid}, {@noblock_validity}]}, 0xff, 0x454, &(0x7f0000001080)="$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") creat(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) r3 = memfd_create(&(0x7f00000004c0)='\'\x00', 0x1) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r3, 0x4002f516, &(0x7f0000000500)={0x98, 0x4}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") 237.559088ms ago: executing program 1 (id=128): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8) r2 = socket(0x2a, 0x2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000080)=0x2, 0x12) sendto(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)=@qipcrtr, 0x80) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x0) r5 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=129): r0 = gettid() r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000240), 0x36, 0xcc800) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close(r5) statfs(&(0x7f0000000300)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts. syzkaller login: [ 58.390644][ T4157] cgroup: Unknown subsys name 'net' [ 58.524036][ T4157] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.068631][ T4157] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.052067][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 62.071241][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 62.117874][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 62.141490][ T4171] chnl_net:caif_netlink_parms(): no params data found [ 62.164993][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 62.252245][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.260517][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.269478][ T4169] device bridge_slave_0 entered promiscuous mode [ 62.301886][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.309225][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.317068][ T4169] device bridge_slave_1 entered promiscuous mode [ 62.335357][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.342519][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.350869][ T4167] device bridge_slave_0 entered promiscuous mode [ 62.382380][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.389572][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.397386][ T4167] device bridge_slave_1 entered promiscuous mode [ 62.450820][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.462601][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.486713][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.493897][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.505944][ T4170] device bridge_slave_0 entered promiscuous mode [ 62.513605][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.520863][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.529032][ T4171] device bridge_slave_0 entered promiscuous mode [ 62.550291][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.557918][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.565766][ T4168] device bridge_slave_0 entered promiscuous mode [ 62.573987][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.581336][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.589373][ T4170] device bridge_slave_1 entered promiscuous mode [ 62.596440][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.603672][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.612006][ T4171] device bridge_slave_1 entered promiscuous mode [ 62.620833][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.638542][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.645591][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.654199][ T4168] device bridge_slave_1 entered promiscuous mode [ 62.679502][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.691695][ T4169] team0: Port device team_slave_0 added [ 62.737778][ T4169] team0: Port device team_slave_1 added [ 62.754237][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.765698][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.777305][ T4167] team0: Port device team_slave_0 added [ 62.793181][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.803920][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.815106][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.825360][ T4167] team0: Port device team_slave_1 added [ 62.848721][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.893876][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.901182][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.927502][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.939645][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.946611][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.972673][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.013391][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.020537][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.046612][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.058548][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.065518][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.091610][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.104998][ T4168] team0: Port device team_slave_0 added [ 63.114528][ T4170] team0: Port device team_slave_0 added [ 63.122903][ T4171] team0: Port device team_slave_0 added [ 63.139506][ T4168] team0: Port device team_slave_1 added [ 63.147298][ T4170] team0: Port device team_slave_1 added [ 63.156930][ T4171] team0: Port device team_slave_1 added [ 63.196972][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.204044][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.230224][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.279210][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.286181][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.312461][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.326746][ T4167] device hsr_slave_0 entered promiscuous mode [ 63.334352][ T4167] device hsr_slave_1 entered promiscuous mode [ 63.348100][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.355104][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.381267][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.393807][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.401089][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.427070][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.442163][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.449363][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.475314][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.493364][ T4169] device hsr_slave_0 entered promiscuous mode [ 63.500837][ T4169] device hsr_slave_1 entered promiscuous mode [ 63.508224][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.515956][ T4169] Cannot create hsr debugfs directory [ 63.522293][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.529816][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.555804][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.627244][ T4171] device hsr_slave_0 entered promiscuous mode [ 63.634168][ T4171] device hsr_slave_1 entered promiscuous mode [ 63.641526][ T4171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.649379][ T4171] Cannot create hsr debugfs directory [ 63.698513][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 63.698675][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 63.715844][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 63.716245][ T4168] device hsr_slave_0 entered promiscuous mode [ 63.723165][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 63.734763][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 63.735909][ T4168] device hsr_slave_1 entered promiscuous mode [ 63.747442][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.755758][ T4168] Cannot create hsr debugfs directory [ 63.777092][ T4170] device hsr_slave_0 entered promiscuous mode [ 63.784056][ T4170] device hsr_slave_1 entered promiscuous mode [ 63.791313][ T4170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.799054][ T4170] Cannot create hsr debugfs directory [ 64.108344][ T4167] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.125002][ T4167] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.135008][ T4167] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.146366][ T4167] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.201147][ T4169] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.210806][ T4169] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.222586][ T4169] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.232434][ T4169] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.296844][ T4168] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.312560][ T4168] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.331932][ T4168] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.351386][ T4168] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.416448][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.449407][ T4170] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.474385][ T4170] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.484424][ T4170] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.511183][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.521876][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.530709][ T4170] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.543976][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.555408][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.581901][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.591077][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.600560][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.611073][ T1244] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.618378][ T1244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.627397][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.637890][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.645701][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.660838][ T4171] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.672189][ T4171] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.684893][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.693999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.703286][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.710406][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.734952][ T4171] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.745422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.754802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.765021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.774666][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.781787][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.791028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.813077][ T4171] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.825447][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.836444][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.845803][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.854631][ T1287] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.861841][ T1287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.871636][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.911593][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.922077][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.931515][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.940536][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.949639][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.962755][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.005696][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.014224][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.023212][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.032795][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.042265][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.051242][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.060555][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.069603][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.078154][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.086480][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.095615][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.104480][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.117697][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.126327][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.141504][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.165152][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.175201][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.187186][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.234397][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.243761][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.252798][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.259919][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.269912][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.299678][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.310255][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.322242][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.329405][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.355776][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.399296][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.409166][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.423526][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.444797][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.465680][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.475032][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.485749][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.497287][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.506735][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.525519][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.543859][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.553345][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.565080][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.573371][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.581742][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.590007][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.600289][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.620680][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.629588][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.639212][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.648342][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.656938][ T1287] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.664078][ T1287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.673571][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.682476][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.691092][ T1287] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.698205][ T1287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.733375][ T4168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.745665][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.756231][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.765897][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.774162][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.782711][ T4212] Bluetooth: hci0: command 0x041b tx timeout [ 65.783410][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.797474][ T4214] Bluetooth: hci1: command 0x041b tx timeout [ 65.798560][ T1287] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.810096][ T4214] Bluetooth: hci2: command 0x041b tx timeout [ 65.810580][ T1287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.816507][ T4214] Bluetooth: hci4: command 0x041b tx timeout [ 65.824857][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.837497][ T4214] Bluetooth: hci3: command 0x041b tx timeout [ 65.839867][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.853038][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.864104][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.872674][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.881672][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.890617][ T1287] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.897755][ T1287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.905609][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.914534][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.923363][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.949750][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.970852][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.983506][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.991997][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.000169][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.013190][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.024874][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.034483][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.043962][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.052756][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.072398][ T4171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.086240][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.099987][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.116263][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.126902][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.142158][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.152584][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.177133][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.186311][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.195241][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.205200][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.214829][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.223966][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.233419][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.242272][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.250954][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.259986][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.268500][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.276679][ T4169] device veth0_vlan entered promiscuous mode [ 66.306727][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.318103][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.327448][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.365991][ T4169] device veth1_vlan entered promiscuous mode [ 66.379866][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.396221][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.405226][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.436692][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.465392][ T4167] device veth0_vlan entered promiscuous mode [ 66.473522][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.489232][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.506154][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.543544][ T4167] device veth1_vlan entered promiscuous mode [ 66.575246][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.584613][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.593792][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.602403][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.612216][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.619935][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.627341][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.643545][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.659371][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.704645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.715440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.724951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.745088][ T4169] device veth0_macvtap entered promiscuous mode [ 66.779923][ T4167] device veth0_macvtap entered promiscuous mode [ 66.786987][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.796059][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.805083][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.814072][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.825277][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.834323][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.843408][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.852885][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.866878][ T4169] device veth1_macvtap entered promiscuous mode [ 66.888059][ T4167] device veth1_macvtap entered promiscuous mode [ 66.911618][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.920617][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.932904][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.942281][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.952048][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.960574][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.969509][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.977382][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.985833][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.994768][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.006689][ T4171] device veth0_vlan entered promiscuous mode [ 67.025900][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.036941][ T4170] device veth0_vlan entered promiscuous mode [ 67.051372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.061983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.074016][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.084276][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.095713][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.108387][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.123403][ T4170] device veth1_vlan entered promiscuous mode [ 67.133010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.142872][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.152156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.161844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.170878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.180934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.190061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.209253][ T4167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.220490][ T4167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.232551][ T4167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.241668][ T4167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.255468][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.267245][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.279924][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.295903][ T4171] device veth1_vlan entered promiscuous mode [ 67.320641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.331410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.345011][ T4169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.355227][ T4169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.364089][ T4169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.373079][ T4169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.404760][ T4170] device veth0_macvtap entered promiscuous mode [ 67.416354][ T4170] device veth1_macvtap entered promiscuous mode [ 67.425468][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.434781][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.445735][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.474563][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.487803][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.497730][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.509035][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.520718][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.532130][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.543323][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.556147][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.567460][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.579454][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.598950][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.607164][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.616079][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.627023][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.636465][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.645595][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.654394][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.671629][ T4168] device veth0_vlan entered promiscuous mode [ 67.693227][ T4170] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.703053][ T4170] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.715943][ T4170] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.724996][ T4170] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.741855][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.750849][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.759005][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.767504][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.780077][ T4171] device veth0_macvtap entered promiscuous mode [ 67.794650][ T4171] device veth1_macvtap entered promiscuous mode [ 67.860243][ T4213] Bluetooth: hci2: command 0x040f tx timeout [ 67.866344][ T4213] Bluetooth: hci1: command 0x040f tx timeout [ 67.867936][ T4214] Bluetooth: hci3: command 0x040f tx timeout [ 67.883781][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.887080][ T4213] Bluetooth: hci0: command 0x040f tx timeout [ 67.896678][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.912672][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.916795][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.920437][ T4214] Bluetooth: hci4: command 0x040f tx timeout [ 67.937135][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.950258][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.961333][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.971797][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.983004][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.997338][ T4168] device veth1_vlan entered promiscuous mode [ 68.018142][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.029034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.037169][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.049140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.057506][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.067040][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.079189][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.090235][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.100512][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.113047][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.123121][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.133893][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.145235][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.165244][ T1287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.173468][ T1287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.184689][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.197252][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.206297][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.215174][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.225504][ T4171] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.234919][ T4171] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.243980][ T4171] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.252912][ T4171] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.284795][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.295634][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.312021][ T4168] device veth0_macvtap entered promiscuous mode [ 68.345540][ T4168] device veth1_macvtap entered promiscuous mode [ 68.391908][ T1287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.408113][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.415736][ T1287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.416122][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.447060][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.455488][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.464022][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.472314][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.482566][ T1287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.517099][ T1287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.542717][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.557180][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.567217][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.578263][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.588187][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.598958][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.609043][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.621568][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.634127][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.654281][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.676166][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.686678][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.710247][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.723595][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.733893][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.744918][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.755756][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.766296][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.776311][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.786788][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.799161][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.817520][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.827359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.850508][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.867345][ T1287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.871381][ T4168] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.898431][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.914308][ T1287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.917745][ T4168] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.931251][ T4168] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.942556][ T4168] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.987057][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.020242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.065702][ T4252] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 69.088511][ T4253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'. [ 69.121739][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.131719][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.143380][ T4253] device macvlan2 entered promiscuous mode [ 69.179479][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.274155][ T4238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.302481][ T4238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.325554][ T4255] loop2: detected capacity change from 0 to 2048 [ 69.368529][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.387145][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.390064][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.406472][ T26] audit: type=1326 audit(1742470004.409:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4256 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e47ec2169 code=0x7ffc0000 [ 69.437222][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.449291][ T26] audit: type=1326 audit(1742470004.409:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4256 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e47ec2169 code=0x7ffc0000 [ 69.476758][ T26] audit: type=1326 audit(1742470004.439:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4256 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f4e47ec2169 code=0x7ffc0000 [ 69.526966][ T26] audit: type=1326 audit(1742470004.449:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4256 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e47ec2169 code=0x7ffc0000 [ 69.584264][ T4255] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 69.657857][ T4255] System zones: 0-4 [ 69.688834][ T4255] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,minixdf,debug,bsddf,,errors=continue. Quota mode: none. [ 69.713714][ T26] audit: type=1326 audit(1742470004.449:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4256 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e47ec2169 code=0x7ffc0000 [ 69.753982][ T4265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 69.787888][ T4255] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.847927][ T26] audit: type=1326 audit(1742470004.449:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4256 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e47ec2169 code=0x7ffc0000 [ 69.903993][ T26] audit: type=1326 audit(1742470004.449:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4256 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e47ec2169 code=0x7ffc0000 [ 69.947165][ T4172] Bluetooth: hci3: command 0x0419 tx timeout [ 69.949338][ T4215] Bluetooth: hci2: command 0x0419 tx timeout [ 69.967440][ T4172] Bluetooth: hci0: command 0x0419 tx timeout [ 69.983589][ T4172] Bluetooth: hci1: command 0x0419 tx timeout [ 69.991616][ T26] audit: type=1326 audit(1742470004.449:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4256 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e47ec2169 code=0x7ffc0000 [ 70.019672][ T4172] Bluetooth: hci4: command 0x0419 tx timeout [ 70.023178][ T26] audit: type=1326 audit(1742470004.449:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4256 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4e47ec2169 code=0x7ffc0000 [ 70.058511][ T26] audit: type=1326 audit(1742470004.449:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4256 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e47ec2169 code=0x7ffc0000 [ 70.216928][ T4271] loop0: detected capacity change from 0 to 8192 [ 70.284060][ T4274] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.369309][ T4276] netlink: 'syz.1.10': attribute type 10 has an invalid length. [ 70.376996][ T4276] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10'. [ 70.476403][ T4276] team0: Port device geneve0 added [ 70.574298][ T144] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:1: bg 0: block 345: padding at end of block bitmap is not set [ 70.619334][ T4274] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.652072][ T144] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 702 with error 117 [ 70.679342][ T4278] loop0: detected capacity change from 0 to 1024 [ 70.699876][ T144] EXT4-fs (loop2): This should not happen!! Data will be lost [ 70.699876][ T144] [ 70.825459][ T4274] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.862984][ T4278] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.221756][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.380433][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.610008][ T4277] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 71.626485][ T4277] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 71.638971][ T4277] EXT4-fs (loop0): This should not happen!! Data will be lost [ 71.638971][ T4277] [ 71.648726][ T4277] EXT4-fs (loop0): Total free blocks count 0 [ 71.654763][ T4277] EXT4-fs (loop0): Free/Dirty block details [ 71.660799][ T4277] EXT4-fs (loop0): free_blocks=68451041280 [ 71.666728][ T4277] EXT4-fs (loop0): dirty_blocks=32 [ 71.671921][ T4277] EXT4-fs (loop0): Block reservation details [ 71.677986][ T4277] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 71.940930][ T4274] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.113516][ T4297] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 72.121659][ T4297] bridge0: port 3(batadv1) entered blocking state [ 72.132929][ T4297] bridge0: port 3(batadv1) entered disabled state [ 72.211782][ T4297] device batadv1 entered promiscuous mode [ 72.432051][ T4297] bridge0: port 3(batadv1) entered blocking state [ 72.438874][ T4297] bridge0: port 3(batadv1) entered forwarding state [ 73.053928][ T144] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 73.064641][ T144] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 74.193891][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.202482][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.315218][ T4327] device bridge_slave_1 left promiscuous mode [ 74.328913][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.427529][ T4327] device bridge_slave_0 left promiscuous mode [ 74.434421][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.942549][ T4348] loop0: detected capacity change from 0 to 1024 [ 76.136683][ T4348] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.424259][ T4361] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 76.843880][ T4347] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 76.860231][ T4347] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 76.872509][ T4347] EXT4-fs (loop0): This should not happen!! Data will be lost [ 76.872509][ T4347] [ 76.882259][ T4347] EXT4-fs (loop0): Total free blocks count 0 [ 76.888329][ T4347] EXT4-fs (loop0): Free/Dirty block details [ 76.894299][ T4347] EXT4-fs (loop0): free_blocks=68451041280 [ 76.900191][ T4347] EXT4-fs (loop0): dirty_blocks=16 [ 76.905364][ T4347] EXT4-fs (loop0): Block reservation details [ 76.911478][ T4347] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 77.040282][ T4361] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 77.063173][ T4359] loop3: detected capacity change from 0 to 512 [ 77.178224][ T4359] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 77.207870][ T4359] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 77.243426][ T4359] EXT4-fs (loop3): 1 truncate cleaned up [ 77.255843][ T4359] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,lazytime,journal_path=./bus,bsdgroups,lazytime,noload,,errors=continue. Quota mode: none. [ 77.282244][ T4375] 9pnet: Insufficient options for proto=fd [ 77.581013][ T4379] loop0: detected capacity change from 0 to 512 [ 78.617874][ T4386] fuse: Bad value for 'fd' [ 78.861672][ T4385] sched: RT throttling activated [ 79.770499][ T4379] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 79.846125][ T4379] EXT4-fs (loop0): 1 truncate cleaned up [ 79.851876][ T4379] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,resgid=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 80.542232][ T4401] Zero length message leads to an empty skb [ 80.582243][ T4405] loop2: detected capacity change from 0 to 1024 [ 81.117831][ T4405] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.536296][ T1108] cfg80211: failed to load regulatory.db [ 82.137225][ T4403] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 82.153697][ T4403] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 82.165998][ T4403] EXT4-fs (loop2): This should not happen!! Data will be lost [ 82.165998][ T4403] [ 82.175748][ T4403] EXT4-fs (loop2): Total free blocks count 0 [ 82.182013][ T4403] EXT4-fs (loop2): Free/Dirty block details [ 82.188027][ T4403] EXT4-fs (loop2): free_blocks=68451041280 [ 82.193903][ T4403] EXT4-fs (loop2): dirty_blocks=16 [ 82.199131][ T4403] EXT4-fs (loop2): Block reservation details [ 82.205313][ T4403] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 82.293876][ T4423] loop0: detected capacity change from 0 to 512 [ 82.431118][ T4423] ======================================================= [ 82.431118][ T4423] WARNING: The mand mount option has been deprecated and [ 82.431118][ T4423] and is ignored by this kernel. Remove the mand [ 82.431118][ T4423] option from the mount to silence this warning. [ 82.431118][ T4423] ======================================================= [ 82.522093][ T4423] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 82.541562][ T4431] netlink: 'syz.1.56': attribute type 4 has an invalid length. [ 82.597678][ T4431] netlink: 16 bytes leftover after parsing attributes in process `syz.1.56'. [ 82.662550][ T4433] loop3: detected capacity change from 0 to 512 [ 82.672912][ T4433] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.683507][ T4431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.56'. [ 82.710809][ T4423] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,sb=0x0000000000000000,usrjquota=./file0,,errors=continue. Quota mode: writeback. [ 82.782580][ T4433] EXT4-fs (loop3): 1 truncate cleaned up [ 82.788388][ T4433] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,resgid=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 82.947421][ T4423] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.544984][ T4440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.55'. [ 83.622000][ T4440] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 83.655711][ T4444] lo speed is unknown, defaulting to 1000 [ 83.677872][ T4440] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 83.706179][ T4444] lo speed is unknown, defaulting to 1000 [ 83.706462][ T4445] dummy0 speed is unknown, defaulting to 1000 [ 83.765501][ T4445] dummy0 speed is unknown, defaulting to 1000 [ 83.814254][ T4445] dummy0 speed is unknown, defaulting to 1000 [ 83.833725][ T4444] lo speed is unknown, defaulting to 1000 [ 85.701649][ T4463] loop3: detected capacity change from 0 to 1024 [ 85.713891][ T4462] loop2: detected capacity change from 0 to 164 [ 85.807774][ T4462] Unable to read rock-ridge attributes [ 85.857155][ T4462] Unable to read rock-ridge attributes [ 85.901127][ T4463] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 85.945797][ T7] lo speed is unknown, defaulting to 1000 [ 85.944607][ T4444] infiniband sz1: set active [ 86.057184][ T4444] infiniband sz1: added lo [ 86.199840][ T4444] infiniband sz1: Couldn't open port 1 [ 86.664842][ T4461] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 86.680407][ T4461] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 86.692766][ T4461] EXT4-fs (loop3): This should not happen!! Data will be lost [ 86.692766][ T4461] [ 86.702556][ T4461] EXT4-fs (loop3): Total free blocks count 0 [ 86.708626][ T4461] EXT4-fs (loop3): Free/Dirty block details [ 86.714606][ T4461] EXT4-fs (loop3): free_blocks=68451041280 [ 86.720520][ T4461] EXT4-fs (loop3): dirty_blocks=32 [ 86.725691][ T4461] EXT4-fs (loop3): Block reservation details [ 86.731763][ T4461] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 86.918228][ T4444] RDS/IB: sz1: added [ 86.933592][ T4444] smc: adding ib device sz1 with port count 1 [ 86.957336][ T4444] smc: ib device sz1 port 1 has pnetid [ 86.964835][ T1347] lo speed is unknown, defaulting to 1000 [ 86.979526][ T4444] lo speed is unknown, defaulting to 1000 [ 87.108766][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 87.108781][ T26] audit: type=1326 audit(1742470022.119:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4478 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e47ec2169 code=0x7ffc0000 [ 87.148246][ T26] audit: type=1326 audit(1742470022.149:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4478 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e47ec2169 code=0x7ffc0000 [ 87.170887][ T26] audit: type=1326 audit(1742470022.149:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4478 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e47ec2169 code=0x7ffc0000 [ 87.193051][ T4444] lo speed is unknown, defaulting to 1000 [ 87.207371][ T26] audit: type=1326 audit(1742470022.149:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4478 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e47ec2169 code=0x7ffc0000 [ 87.237691][ T26] audit: type=1326 audit(1742470022.149:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4478 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e47ec2169 code=0x7ffc0000 [ 87.268548][ T26] audit: type=1326 audit(1742470022.149:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4478 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e47ec2169 code=0x7ffc0000 [ 87.303987][ T4481] loop4: detected capacity change from 0 to 512 [ 87.389183][ T26] audit: type=1326 audit(1742470022.149:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4478 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e47ec2169 code=0x7ffc0000 [ 87.449147][ T4481] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 87.487050][ T4481] EXT4-fs (loop4): 1 truncate cleaned up [ 87.493150][ T4481] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,resgid=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 87.524091][ T26] audit: type=1326 audit(1742470022.149:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4478 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e47ec2169 code=0x7ffc0000 [ 87.547042][ T26] audit: type=1326 audit(1742470022.149:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4478 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e47ec2169 code=0x7ffc0000 [ 88.168898][ T26] audit: type=1326 audit(1742470022.149:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4478 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e47ec2169 code=0x7ffc0000 [ 88.441526][ T4444] lo speed is unknown, defaulting to 1000 [ 88.441963][ T4490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.71'. [ 88.447984][ T4488] loop3: detected capacity change from 0 to 164 [ 88.491978][ T4490] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.539926][ T4490] device macvlan2 entered promiscuous mode [ 88.590126][ T4444] lo speed is unknown, defaulting to 1000 [ 88.769549][ T4444] lo speed is unknown, defaulting to 1000 [ 88.941722][ T4500] loop3: detected capacity change from 0 to 128 [ 89.218340][ T4500] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 89.393709][ T4500] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 89.705467][ T4217] dummy0 speed is unknown, defaulting to 1000 [ 89.705398][ T4445] infiniband syz2: set active [ 89.732543][ T4445] infiniband syz2: added dummy0 [ 89.794688][ T4445] infiniband syz2: Couldn't open port 1 [ 89.856292][ T4445] RDS/IB: syz2: added [ 89.861506][ T4445] smc: adding ib device syz2 with port count 1 [ 89.868371][ T4445] smc: ib device syz2 port 1 has pnetid [ 89.874489][ T4211] dummy0 speed is unknown, defaulting to 1000 [ 89.882286][ T4445] dummy0 speed is unknown, defaulting to 1000 [ 90.088024][ T4445] dummy0 speed is unknown, defaulting to 1000 [ 91.066994][ T4445] dummy0 speed is unknown, defaulting to 1000 [ 91.068223][ T4515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.79'. [ 91.077600][ T4519] loop2: detected capacity change from 0 to 512 [ 91.111468][ T4515] bridge0: port 3(batadv1) entered blocking state [ 91.141294][ T4515] bridge0: port 3(batadv1) entered disabled state [ 91.188906][ T4515] device batadv1 entered promiscuous mode [ 91.253141][ T4519] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 92.012528][ T4410] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 92.021999][ T4410] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 92.211791][ T4519] loop2: detected capacity change from 0 to 512 [ 92.280939][ T4445] dummy0 speed is unknown, defaulting to 1000 [ 92.459002][ T4529] lo speed is unknown, defaulting to 1000 [ 93.753344][ T4540] IPVS: persistence engine module ip_vs_pe_@ not found [ 93.801475][ T4544] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.808958][ T4544] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.931131][ T4545] device bridge_slave_1 left promiscuous mode [ 93.937486][ T4545] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.029749][ T4545] device bridge_slave_0 left promiscuous mode [ 94.063644][ T4545] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.225468][ T4445] dummy0 speed is unknown, defaulting to 1000 [ 95.480857][ T4529] dummy0 speed is unknown, defaulting to 1000 [ 96.420695][ T4564] lo speed is unknown, defaulting to 1000 [ 96.451566][ T4445] dummy0 speed is unknown, defaulting to 1000 [ 96.733161][ T4578] loop2: detected capacity change from 0 to 512 [ 96.896780][ T4578] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 96.950527][ T4582] loop4: detected capacity change from 0 to 2048 [ 97.004116][ T4582] loop4: p1 < > p4 [ 97.012364][ T4582] loop4: p4 size 8388608 extends beyond EOD, truncated [ 97.211645][ T4578] loop2: detected capacity change from 0 to 512 [ 98.163013][ T4578] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 98.283127][ T4578] EXT4-fs (loop2): 1 truncate cleaned up [ 98.290187][ T4578] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,resgid=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 98.836270][ T4428] udevd[4428]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 98.896596][ T4597] loop2: detected capacity change from 0 to 1024 [ 98.934441][ T4428] udevd[4428]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 99.075509][ T4428] udevd[4428]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 99.088245][ T4429] udevd[4429]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 99.219970][ T4606] fuse: Bad value for 'group_id' [ 99.349735][ T4597] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.426085][ T4595] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 100.442359][ T4595] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 100.454758][ T4595] EXT4-fs (loop2): This should not happen!! Data will be lost [ 100.454758][ T4595] [ 100.464559][ T4595] EXT4-fs (loop2): Total free blocks count 0 [ 100.470643][ T4595] EXT4-fs (loop2): Free/Dirty block details [ 100.476596][ T4595] EXT4-fs (loop2): free_blocks=68451041280 [ 100.482496][ T4595] EXT4-fs (loop2): dirty_blocks=16 [ 100.487691][ T4595] EXT4-fs (loop2): Block reservation details [ 100.493723][ T4595] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 100.523910][ T4621] netlink: 28 bytes leftover after parsing attributes in process `syz.1.112'. [ 100.684813][ T4621] netlink: 28 bytes leftover after parsing attributes in process `syz.1.112'. [ 100.825947][ T4622] loop1: detected capacity change from 0 to 512 [ 100.958899][ T4622] EXT4-fs (loop1): orphan cleanup on readonly fs [ 100.990188][ T4392] kernel write not supported for file /77/attr/exec (pid: 4392 comm: kworker/1:8) [ 101.033960][ T4622] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.112: bg 0: block 248: padding at end of block bitmap is not set [ 101.090403][ T4622] __quota_error: 30 callbacks suppressed [ 101.090430][ T4622] Quota error (device loop1): write_blk: dquota write failed [ 101.180097][ T4622] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 101.221113][ T4622] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.112: Failed to acquire dquot type 1 [ 101.259705][ T4622] EXT4-fs (loop1): 1 truncate cleaned up [ 101.278582][ T4622] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 101.359049][ T4640] fuse: Unknown parameter '0x0000000000000007' [ 101.624529][ T4619] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 101.720928][ T4639] device syzkaller0 entered promiscuous mode [ 101.761149][ T4619] Quota error (device loop1): write_blk: dquota write failed [ 101.808072][ T4619] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 101.879031][ T4622] syz.1.112 (4622) used greatest stack depth: 19200 bytes left [ 101.916776][ T4619] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.112: Failed to acquire dquot type 1 [ 102.033990][ T4619] EXT4-fs warning (device loop1): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-28, ino=4). Please run e2fsck to fix. [ 103.617117][ T4663] loop4: detected capacity change from 0 to 512 [ 103.655164][ T4661] loop2: detected capacity change from 0 to 1024 [ 103.714704][ T4663] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 103.810929][ T4661] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.562843][ T4660] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 104.563530][ T4660] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 104.563620][ T4660] EXT4-fs (loop2): This should not happen!! Data will be lost [ 104.563620][ T4660] [ 104.563683][ T4660] EXT4-fs (loop2): Total free blocks count 0 [ 104.563744][ T4660] EXT4-fs (loop2): Free/Dirty block details [ 104.563804][ T4660] EXT4-fs (loop2): free_blocks=68451041280 [ 104.563867][ T4660] EXT4-fs (loop2): dirty_blocks=16 [ 104.563927][ T4660] EXT4-fs (loop2): Block reservation details [ 104.563985][ T4660] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 105.066433][ T4663] loop4: detected capacity change from 0 to 512 [ 105.137990][ T4663] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 105.179820][ T4663] EXT4-fs (loop4): 1 truncate cleaned up [ 105.185509][ T4663] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,resgid=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 105.292870][ T4673] loop2: detected capacity change from 0 to 512 [ 105.471618][ T4673] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 210.617522][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 210.624596][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4564/1:b..l [ 210.632977][ C1] (detected by 1, t=10502 jiffies, g=9505, q=43) [ 210.639408][ C1] task:syz.3.97 state:R running task stack:23520 pid: 4564 ppid: 4171 flags:0x00004004 [ 210.650909][ C1] Call Trace: [ 210.654221][ C1] [ 210.657170][ C1] __schedule+0x12c4/0x45b0 [ 210.661720][ C1] ? mark_lock+0x98/0x340 [ 210.666064][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 210.672061][ C1] ? release_firmware_map_entry+0x190/0x190 [ 210.677983][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 210.683205][ C1] ? preempt_schedule_irq+0xec/0x1c0 [ 210.688507][ C1] preempt_schedule_irq+0xf7/0x1c0 [ 210.693721][ C1] ? __cond_resched+0xf0/0xf0 [ 210.698431][ C1] irqentry_exit+0x53/0x80 [ 210.702859][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 210.708853][ C1] RIP: 0010:lock_acquire+0x252/0x4f0 [ 210.714150][ C1] Code: 2b 00 74 08 4c 89 f7 e8 0c ac 67 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 210.733770][ C1] RSP: 0018:ffffc900032ff580 EFLAGS: 00000206 [ 210.739852][ C1] RAX: 0000000000000001 RBX: 1ffff9200065febc RCX: 1ffff9200065fe5c [ 210.747835][ C1] RDX: dffffc0000000000 RSI: ffffffff8aab3d00 RDI: ffffffff8af9fa80 [ 210.755816][ C1] RBP: ffffc900032ff6e0 R08: dffffc0000000000 R09: fffffbfff2131e19 [ 210.763802][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200065feb8 [ 210.771785][ C1] R13: dffffc0000000000 R14: ffffc900032ff5e0 R15: 0000000000000246 [ 210.779795][ C1] ? read_lock_is_recursive+0x10/0x10 [ 210.785189][ C1] ? __might_sleep+0xc0/0xc0 [ 210.789803][ C1] rcu_lock_acquire+0x2a/0x30 [ 210.794489][ C1] ? rcu_lock_acquire+0x5/0x30 [ 210.799264][ C1] inet_twsk_purge+0x129/0x9e0 [ 210.804060][ C1] ? __inet_twsk_schedule+0x130/0x130 [ 210.809445][ C1] ? iput+0x6f5/0x8b0 [ 210.813444][ C1] ? dccp_v4_exit_net+0x80/0x80 [ 210.818312][ C1] setup_net+0x8cf/0xad0 [ 210.822593][ C1] ? copy_net_ns+0x5d0/0x5d0 [ 210.827198][ C1] ? copy_net_ns+0x378/0x5d0 [ 210.831809][ C1] copy_net_ns+0x392/0x5d0 [ 210.836260][ C1] create_new_namespaces+0x425/0x7a0 [ 210.841554][ C1] ? bpf_lsm_capable+0x5/0x10 [ 210.846266][ C1] copy_namespaces+0x365/0x3b0 [ 210.851054][ C1] copy_process+0x1841/0x3ef0 [ 210.855743][ C1] ? reacquire_held_locks+0x660/0x660 [ 210.861150][ C1] ? __fget_files+0x413/0x480 [ 210.865843][ C1] ? pidfd_show_fdinfo+0x2e0/0x2e0 [ 210.870969][ C1] ? __lock_acquire+0x1295/0x1ff0 [ 210.876028][ C1] kernel_clone+0x210/0x960 [ 210.880548][ C1] ? create_io_thread+0x1c0/0x1c0 [ 210.885595][ C1] ? read_lock_is_recursive+0x10/0x10 [ 210.890985][ C1] __x64_sys_clone+0x237/0x2a0 [ 210.895768][ C1] ? __do_sys_vfork+0x120/0x120 [ 210.900630][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 210.906641][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 210.912631][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 210.917845][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 210.923838][ C1] do_syscall_64+0x3b/0xb0 [ 210.928269][ C1] ? clear_bhb_loop+0x15/0x70 [ 210.932961][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 210.938874][ C1] RIP: 0033:0x7f4e47ec2169 [ 210.943299][ C1] RSP: 002b:00007f4e45d2afe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 210.951727][ C1] RAX: ffffffffffffffda RBX: 00007f4e480dafa0 RCX: 00007f4e47ec2169 [ 210.959708][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040004000 [ 210.967692][ C1] RBP: 00007f4e47f432a0 R08: 0000000000000000 R09: 0000000000000000 [ 210.975670][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 210.983650][ C1] R13: 0000000000000000 R14: 00007f4e480dafa0 R15: 00007ffdb1c19f78 [ 210.991666][ C1] [ 210.994695][ C1] rcu: rcu_preempt kthread starved for 10536 jiffies! g9505 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 211.005804][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 211.015773][ C1] rcu: RCU grace-period kthread stack dump: [ 211.021658][ C1] task:rcu_preempt state:R running task stack:27000 pid: 15 ppid: 2 flags:0x00004000 [ 211.032449][ C1] Call Trace: [ 211.035735][ C1] [ 211.038677][ C1] __schedule+0x12c4/0x45b0 [ 211.043200][ C1] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 211.049110][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 211.055030][ C1] ? __mod_timer+0xa8e/0xeb0 [ 211.059644][ C1] ? release_firmware_map_entry+0x190/0x190 [ 211.065552][ C1] ? mod_timer_pending+0x20/0x20 [ 211.070504][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 211.075915][ C1] schedule+0x11b/0x1f0 [ 211.080084][ C1] schedule_timeout+0x1b9/0x300 [ 211.084975][ C1] ? console_conditional_schedule+0x40/0x40 [ 211.090881][ C1] ? update_process_times+0x200/0x200 [ 211.096275][ C1] ? prepare_to_swait_event+0x321/0x340 [ 211.101833][ C1] rcu_gp_fqs_loop+0x2bf/0x1080 [ 211.106703][ C1] ? dump_blkd_tasks+0x810/0x810 [ 211.111759][ C1] ? rcu_gp_init+0x1140/0x1140 [ 211.116539][ C1] ? finish_swait+0xc5/0x1d0 [ 211.121146][ C1] rcu_gp_kthread+0xa4/0x360 [ 211.125746][ C1] ? _raw_spin_unlock+0x40/0x40 [ 211.130606][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 211.135746][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 211.141687][ C1] ? __kthread_parkme+0x15c/0x1c0 [ 211.146741][ C1] kthread+0x3f6/0x4f0 [ 211.150822][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 211.155965][ C1] ? kthread_blkcg+0xd0/0xd0 [ 211.160572][ C1] ret_from_fork+0x1f/0x30 [ 211.165016][ C1] [ 211.168041][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 211.174363][ C1] NMI backtrace for cpu 1 [ 211.178705][ C1] CPU: 1 PID: 4663 Comm: syz.4.126 Not tainted 5.15.179-syzkaller #0 [ 211.186781][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 211.196838][ C1] Call Trace: [ 211.200123][ C1] [ 211.202970][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 211.207663][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 211.213317][ C1] ? panic+0x860/0x860 [ 211.217420][ C1] nmi_cpu_backtrace+0x46a/0x4a0 [ 211.222370][ C1] ? __wake_up_klogd+0xd5/0x100 [ 211.227240][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 211.233410][ C1] ? _printk+0xd1/0x120 [ 211.237586][ C1] ? cpu_online+0x1f/0x40 [ 211.241934][ C1] ? panic+0x860/0x860 [ 211.246025][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 211.252128][ C1] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 211.258142][ C1] rcu_check_gp_kthread_starvation+0x1d2/0x240 [ 211.264328][ C1] print_other_cpu_stall+0x137a/0x14d0 [ 211.269828][ C1] ? print_cpu_stall+0x600/0x600 [ 211.271120][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 211.274805][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 211.281127][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.286048][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 211.297459][ C1] rcu_sched_clock_irq+0xa38/0x1150 [ 211.302685][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 211.307564][ C1] ? hrtimer_run_queues+0x163/0x450 [ 211.312779][ C1] ? account_process_tick+0x232/0x3a0 [ 211.318201][ C1] update_process_times+0x196/0x200 [ 211.323510][ C1] tick_sched_timer+0x386/0x550 [ 211.328386][ C1] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 211.333954][ C1] __hrtimer_run_queues+0x55b/0xcf0 [ 211.339249][ C1] ? hrtimer_interrupt+0x980/0x980 [ 211.344390][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 211.350485][ C1] hrtimer_interrupt+0x392/0x980 [ 211.355465][ C1] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 211.361472][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 211.367132][ C1] [ 211.370078][ C1] [ 211.373024][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 211.379040][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 211.384870][ C1] Code: 31 60 f6 ff 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ce 67 19 f7 48 89 df e8 26 bc 1a f7 e8 11 7c 3d f7 fb bf 01 00 00 00 16 00 0e f7 65 8b 05 87 d0 b8 75 85 c0 74 02 5b c3 e8 54 ed b6 [ 211.404497][ C1] RSP: 0018:ffffc90002fbfbc0 EFLAGS: 00000282 [ 211.410596][ C1] RAX: 12b4972dd44bcb00 RBX: ffff8880789fca00 RCX: ffffffff96a95f03 [ 211.418587][ C1] RDX: dffffc0000000000 RSI: ffffffff8aab2a60 RDI: 0000000000000001 [ 211.426584][ C1] RBP: 0000000000000000 R08: ffffffff81871b70 R09: ffffed100f13f941 [ 211.434578][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000021 [ 211.442567][ C1] R13: dffffc0000000000 R14: ffff8880789fce98 R15: ffff8880789fca00 [ 211.450564][ C1] ? trace_hardirqs_on+0x30/0x80 [ 211.455539][ C1] get_signal+0x13ee/0x14e0 [ 211.460084][ C1] arch_do_signal_or_restart+0xc3/0x1890 [ 211.465739][ C1] ? __do_compat_sys_x32_rt_sigreturn+0x250/0x250 [ 211.472202][ C1] ? __might_fault+0xb4/0x110 [ 211.476912][ C1] ? _copy_from_user+0x10f/0x170 [ 211.481868][ C1] ? restore_altstack+0x274/0x400 [ 211.486924][ C1] ? get_sigframe_size+0x10/0x10 [ 211.491896][ C1] ? __ia32_sys_sigaltstack+0x60/0x60 [ 211.497304][ C1] ? __do_sys_rt_sigreturn+0x19d/0x250 [ 211.502786][ C1] ? exit_to_user_mode_loop+0x39/0x130 [ 211.508266][ C1] exit_to_user_mode_loop+0x97/0x130 [ 211.513584][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 211.519149][ C1] syscall_exit_to_user_mode+0x5d/0x240 [ 211.524720][ C1] do_syscall_64+0x47/0xb0 [ 211.529155][ C1] ? clear_bhb_loop+0x15/0x70 [ 211.533856][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 211.539846][ C1] RIP: 0033:0x7fd65048f167 [ 211.544272][ C1] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 211.563892][ C1] RSP: 002b:00007fd64e2f8038 EFLAGS: 00000246 [ 211.569979][ C1] RAX: 0000000000000113 RBX: 00007fd6506a7fa0 RCX: 00007fd65048f169 [ 211.577966][ C1] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000005 [ 211.585954][ C1] RBP: 00007fd6505102a0 R08: 0000000008000f28 R09: 0000000000000000 [ 211.593946][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.601928][ C1] R13: 0000000000000000 R14: 00007fd6506a7fa0 R15: 00007ffd8ebe7a38 [ 211.609960][ C1] SYZFAIL: failed to send rpc fd=3 want=360 sent=0 n=-1 (errno 32: Broken pipe) [ 213.297933][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 214.185725][ T155] device hsr_slave_0 left promiscuous mode [ 214.194463][ T155] device hsr_slave_1 left promiscuous mode [ 214.207524][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.214988][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.224126][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.231641][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.241632][ T155] device bridge_slave_1 left promiscuous mode [ 214.249199][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.262015][ T155] device bridge_slave_0 left promiscuous mode [ 214.269479][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.284368][ T155] rdma_rxe: ignoring netdev event = 10 for dummy0 [ 214.291021][ T155] rdma_rxe: ignoring netdev event = 10 for lo [ 214.300357][ T155] device veth1_macvtap left promiscuous mode [ 214.307002][ T155] device veth0_macvtap left promiscuous mode [ 214.313696][ T155] device veth1_vlan left promiscuous mode [ 214.320069][ T155] device veth0_vlan left promiscuous mode [ 214.417078][ T155] infiniband syz2: set down [ 214.432366][ T155] infiniband sz1: set down [ 214.444537][ T155] team0 (unregistering): Port device geneve0 removed [ 214.534633][ T155] team0 (unregistering): Port device team_slave_1 removed [ 214.551497][ T155] team0 (unregistering): Port device team_slave_0 removed [ 214.565507][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.582000][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.642070][ T4556] smc: removing ib device syz2 [ 214.663564][ T155] bond0 (unregistering): Released all slaves [ 214.703250][ T1244] smc: removing ib device sz1 [ 214.743259][ T4217] dummy0 speed is unknown, defaulting to 1000 [ 214.749536][ T4172] lo speed is unknown, defaulting to 1000 [ 217.737266][ T155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.807990][ T155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.852676][ T155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.895967][ T155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.008890][ T155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.074991][ T155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.126569][ T155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.201725][ T155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.343157][ T155] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.431892][ T155] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.485090][ T155] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.544430][ T155] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.674510][ T155] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.718542][ T155] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.784632][ T155] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.816449][ T155] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.490890][ T155] device hsr_slave_0 left promiscuous mode [ 220.497399][ T155] device hsr_slave_1 left promiscuous mode [ 220.505699][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.513786][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.523298][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.531759][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.544938][ T155] device hsr_slave_0 left promiscuous mode [ 220.551930][ T155] device hsr_slave_1 left promiscuous mode [ 220.558804][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.566238][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.576235][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.584579][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.592809][ T155] device batadv1 left promiscuous mode [ 220.598925][ T155] bridge0: port 3(batadv1) entered disabled state [ 220.607136][ T155] device bridge_slave_1 left promiscuous mode [ 220.614266][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.623447][ T155] device bridge_slave_0 left promiscuous mode [ 220.631184][ T155] bridge0: port 1(bridge_slave_0) entered disabled state