last executing test programs: 8.300713625s ago: executing program 1 (id=66): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fcae68da850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000040)=0x8000, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000001600)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r3, &(0x7f0000003040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/174, 0xae}, 0x400}], 0x1, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xfe, 0xa15, &(0x7f00000002c0)="$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") execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x20a0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r7, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x18, &(0x7f0000000100)={0x8, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) unshare(0x42000000) 7.177083446s ago: executing program 0 (id=73): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001100)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.029618933s ago: executing program 0 (id=76): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0) 6.861437082s ago: executing program 0 (id=80): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x6}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) write$binfmt_aout(r2, 0x0, 0xff2e) ioctl$TCSETS(r2, 0x40045431, 0x0) syz_clone(0x10eb22b000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.719203815s ago: executing program 1 (id=82): ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0xc00, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/wakeup_count', 0x302, 0x0) write$cgroup_pid(r5, &(0x7f0000000280), 0x3) 6.544771679s ago: executing program 4 (id=84): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1b, {[@window={0xb, 0x3}, @timestamp={0x5, 0xa, 0x88000, 0x8}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_fc_cleanup\x00', r5}, 0x18) 4.322696362s ago: executing program 2 (id=85): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) lsm_set_self_attr(0x66, 0x0, 0x28, 0x0) 4.078512894s ago: executing program 1 (id=86): unshare(0x22020600) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./bus\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r2) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 3.813009999s ago: executing program 2 (id=87): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) 3.707623255s ago: executing program 2 (id=88): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1010000, &(0x7f0000000480)={[{@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@block_validity}]}, 0x0, 0x4c6, &(0x7f0000000780)="$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") 3.617900469s ago: executing program 4 (id=90): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000200)=ANY=[]) 3.495244909s ago: executing program 1 (id=92): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e2306", 0x12}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="000000f5", @ANYRES16=r3, @ANYRES64=r3], 0xfdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r4 = epoll_create1(0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) epoll_pwait2(r4, &(0x7f0000000380)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0bf2ffff070000000c000000ffffffff01000000e561c4b042ca04f20ed946c6b74e6d3f36622e490962778e7a9fc0243d2228b525f6d06289a2fff3ae67a19651a73a18805e6d8b0dd979feea9fa1b3d99288c0da8c21fd2c8fff17cf9b7dbc917afea05707d5d31ff1cf912fb8e1710babf6b301bb263d", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYRESHEX=r3, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='mpol=interleave=static,mpol=default']) socket$qrtr(0x2a, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x64d14500, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) 3.399152126s ago: executing program 4 (id=93): r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='silent\x00', 0x0, 0x0) 3.300899749s ago: executing program 2 (id=95): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 3.213435722s ago: executing program 4 (id=97): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000005850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 3.006785057s ago: executing program 2 (id=98): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x7, 0x4ab, &(0x7f0000000100)="$eJzs3E9sFFUYAPBvtru0gEhFREFMimhsNLZQUDh4wWjiQRMjHvTYtIUghRpaEyFESmLwaEi8G49eOXhVb8aTiVc8eDAxJMRwATyNmd2Zdrt/Wtpuu+D+fsnS92be7Hvfvnmzb+ftEkDPGsr+SSIei4ibEbGzll1aYKj2596dyxP371yeiPk0PflPUi13N8vniuO255nhUkTpy6ThCWtmL146Oz49PXUhz4/Onft0dPbipVfPnBs/PXV66vzY8eNHjxw+9vrYa6sPqkV9WVx3930xs3/vOx9ff2+iXGwfyP/Wx9EpQzFU35Qb9c16sdOVddmOunRS7mJDWJXs/M+6q1Id/zujL3Qe9Io0TdP+9rvn00ZXm7YAj6wkut0CoDuKN/rs82/x2KSpx0Ph9onaB6As7nv5o7anHKW8TKXh820nDUXER/P/fps9Yrn7EH9uUAMAgJ7z04liJtg4/yvFnrpyj+drKIMR8URE7IqIJyNid0Q8FVEt+3REPNNYQRKRLlP/7oZ88/yndGs98a0km/+9ka9tLZ3/FbO/GOzLczsiignz1KH8NRmOSv+pM9NTh5ep4+e3fv+63b76+V/2yOov5oJ5O26VG27QTY7Pja854Aa3r0bsKzfGn5SzjitWApKI2BsR+1bxvIN16TMvf79/IVNZWm7l+KvSFkt60YmlivS7iJdq/T8fS/p/scZk+fXJ0YGYnjo0mp0Fh1rW8etv195vV/+K8f/wV+Mhbx/78eR6w16Q9f+2uvM/ivXbxfgHk4hkYb12dvV1XPvjq+rzDh1s3rfW839L8mE1vSXf9vn43NyFwxFbknebt48tHlvki/JZ/MMHW4//Xfkx2SvxbERkJ/FzdSdw1vYDEfF8RLQIbcEvb77wSbt9D3j+b5gs/skW178rS/t/cb1+DYm+swdu3m9z8Xiw/j9aTQ3nW1pf/5Ill4gHbWBHXkQAAAB4yJWi+t3/0shCulQaGandA9od20rTM7Nzr5ya+ez8ZO03AoNRKRV3umr3gytJcf9zsC4/1pA/kt83/qZvazU/MjEzPdnt4KHHba+O+aRp/Gf+7ut264AN5yc/0LtWGv97rm9SQ4BN5/0felfd+J9vU2TeN2Xg/8n7P/SuVuP/yhqOAR4tqbEMPc34h95Vjg8W0qWutgTYbN7/oSet53f9KyfS/ta7BqK5cAxsTDO2tqirK4lsZtWV2reu5ajif1NoWyZKq3vC/mje1RedDrkSESsWPr2n4yd/mn9XvtM9eGNTxmmrRFcuRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB33XwAAAP//BnreqA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) open_by_handle_at(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000020000000b00000000000000"], 0x0) 2.893029232s ago: executing program 0 (id=99): ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0xc00, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/wakeup_count', 0x302, 0x0) write$cgroup_pid(r5, &(0x7f0000000280), 0x3) 2.608331224s ago: executing program 4 (id=101): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1b, {[@window={0xb, 0x3}, @timestamp={0x5, 0xa, 0x88000, 0x8}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_fc_cleanup\x00', r5}, 0x18) 1.953042191s ago: executing program 3 (id=102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000540)=ANY=[], 0x8, 0x2fd, &(0x7f0000000e40)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107842, 0x0) sendfile(r3, r3, 0x0, 0x80000000) 1.355250558s ago: executing program 0 (id=103): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xd}}]}}, @TCA_RATE={0x6}]}, 0x4c}}, 0x0) 825.489233ms ago: executing program 2 (id=104): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000200)=ANY=[]) 757.012685ms ago: executing program 3 (id=105): syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') lremovexattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@known='security.apparmor\x00') openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff13, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 608.309102ms ago: executing program 3 (id=106): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20044840}, 0x10) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 388.932626ms ago: executing program 1 (id=107): r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f00000000c0), 0x0) 302.583009ms ago: executing program 3 (id=108): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x6, &(0x7f00000003c0)={r3, @in={{0x2, 0x0, @private}}}, &(0x7f0000000340)=0x90) 269.827958ms ago: executing program 0 (id=109): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fcae68da850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000040)=0x8000, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000001600)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r3, &(0x7f0000003040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/174, 0xae}, 0x400}], 0x1, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xfe, 0xa15, &(0x7f00000002c0)="$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") execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x20a0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r7, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x18, &(0x7f0000000100)={0x8, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) unshare(0x42000000) 215.892167ms ago: executing program 4 (id=110): syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="341c0000", @ANYBLOB="050029000100000005002a"], 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001100)={0x0, 0x6, 0xc, 0x80000000}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) 93.056698ms ago: executing program 1 (id=111): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r2}, 0x69) 92.85865ms ago: executing program 3 (id=112): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) 0s ago: executing program 3 (id=113): ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0xc00, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/wakeup_count', 0x302, 0x0) write$cgroup_pid(r5, &(0x7f0000000280), 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.182' (ED25519) to the list of known hosts. [ 54.247701][ T5833] cgroup: Unknown subsys name 'net' [ 54.392565][ T5833] cgroup: Unknown subsys name 'cpuset' [ 54.400886][ T5833] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.670411][ T5833] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.895826][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.905836][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.912824][ T5861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.914804][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.928568][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.937089][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.945278][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.953774][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.955026][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.961524][ T5863] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.970309][ T5862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.976384][ T5863] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.983223][ T5862] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.990239][ T5863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.997722][ T5862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.003037][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.010580][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.018084][ T5863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.026343][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.035177][ T5863] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.039048][ T5862] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.045663][ T5863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.052662][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.060538][ T5863] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.076345][ T5862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.077177][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.091461][ T5160] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.104571][ T5862] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.112904][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.128080][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.519353][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 58.630246][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 58.649887][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 58.659625][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 58.738046][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 58.765422][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.773387][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.781735][ T5847] bridge_slave_0: entered allmulticast mode [ 58.788602][ T5847] bridge_slave_0: entered promiscuous mode [ 58.833737][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.841477][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.848736][ T5847] bridge_slave_1: entered allmulticast mode [ 58.855788][ T5847] bridge_slave_1: entered promiscuous mode [ 58.938637][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.951301][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.981955][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.989437][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.996818][ T5843] bridge_slave_0: entered allmulticast mode [ 59.003505][ T5843] bridge_slave_0: entered promiscuous mode [ 59.011807][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.018910][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.026256][ T5843] bridge_slave_1: entered allmulticast mode [ 59.033335][ T5843] bridge_slave_1: entered promiscuous mode [ 59.059337][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.066560][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.073807][ T5848] bridge_slave_0: entered allmulticast mode [ 59.080768][ T5848] bridge_slave_0: entered promiscuous mode [ 59.087911][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.095120][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.102550][ T5848] bridge_slave_1: entered allmulticast mode [ 59.109052][ T5848] bridge_slave_1: entered promiscuous mode [ 59.131140][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.138275][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.145846][ T5846] bridge_slave_0: entered allmulticast mode [ 59.152447][ T5846] bridge_slave_0: entered promiscuous mode [ 59.196227][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.203567][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.211112][ T5846] bridge_slave_1: entered allmulticast mode [ 59.217956][ T5846] bridge_slave_1: entered promiscuous mode [ 59.227299][ T5847] team0: Port device team_slave_0 added [ 59.237161][ T5847] team0: Port device team_slave_1 added [ 59.251825][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.263126][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.305207][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.323464][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.340160][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.347139][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.373328][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.386471][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.393602][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.419919][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.431966][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.439143][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.446467][ T5844] bridge_slave_0: entered allmulticast mode [ 59.453108][ T5844] bridge_slave_0: entered promiscuous mode [ 59.461851][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.468975][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.476316][ T5844] bridge_slave_1: entered allmulticast mode [ 59.483354][ T5844] bridge_slave_1: entered promiscuous mode [ 59.507064][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.537426][ T5848] team0: Port device team_slave_0 added [ 59.546642][ T5848] team0: Port device team_slave_1 added [ 59.561462][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.595746][ T5843] team0: Port device team_slave_0 added [ 59.604617][ T5843] team0: Port device team_slave_1 added [ 59.628824][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.662412][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.669499][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.696700][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.713042][ T5846] team0: Port device team_slave_0 added [ 59.721958][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.739556][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.746977][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.773757][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.786857][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.794173][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.820264][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.839037][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.846397][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.872450][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.889083][ T5846] team0: Port device team_slave_1 added [ 59.910664][ T5844] team0: Port device team_slave_0 added [ 59.920624][ T5847] hsr_slave_0: entered promiscuous mode [ 59.927439][ T5847] hsr_slave_1: entered promiscuous mode [ 59.960375][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.967624][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.993962][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.010456][ T5844] team0: Port device team_slave_1 added [ 60.030482][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.037473][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.063810][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.075406][ T5850] Bluetooth: hci1: command tx timeout [ 60.135900][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.143368][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.170162][ T5850] Bluetooth: hci2: command tx timeout [ 60.170237][ T5862] Bluetooth: hci0: command tx timeout [ 60.176330][ T5850] Bluetooth: hci4: command tx timeout [ 60.182174][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.203156][ T5843] hsr_slave_0: entered promiscuous mode [ 60.209422][ T5843] hsr_slave_1: entered promiscuous mode [ 60.216263][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.224604][ T5843] Cannot create hsr debugfs directory [ 60.237468][ T5848] hsr_slave_0: entered promiscuous mode [ 60.243654][ T5850] Bluetooth: hci3: command tx timeout [ 60.251404][ T5848] hsr_slave_1: entered promiscuous mode [ 60.257420][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.265500][ T5848] Cannot create hsr debugfs directory [ 60.279565][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.286762][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.313609][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.343521][ T5846] hsr_slave_0: entered promiscuous mode [ 60.349872][ T5846] hsr_slave_1: entered promiscuous mode [ 60.356395][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.364643][ T5846] Cannot create hsr debugfs directory [ 60.449324][ T5844] hsr_slave_0: entered promiscuous mode [ 60.455962][ T5844] hsr_slave_1: entered promiscuous mode [ 60.462622][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.471266][ T5844] Cannot create hsr debugfs directory [ 60.716225][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.742160][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.752652][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.765565][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.844531][ T5846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.857058][ T5846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.868299][ T5846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.885886][ T5846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.926790][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.935903][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.953451][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.963535][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.021443][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.043587][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.085172][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.095812][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.158723][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.183020][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.191015][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.213445][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.225530][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.254633][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.292555][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.325608][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.332961][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.358375][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.368405][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.395835][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.403020][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.438581][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.445712][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.458416][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.465671][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.477639][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.515129][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.522336][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.566690][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.573855][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.591874][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.632508][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.692004][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.714147][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.743723][ T2903] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.750926][ T2903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.785100][ T2903] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.792373][ T2903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.838069][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.883413][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.890634][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.903191][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.910793][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.946983][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.995537][ T5843] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.009970][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.092916][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.156990][ T5850] Bluetooth: hci1: command tx timeout [ 62.230356][ T5862] Bluetooth: hci0: command tx timeout [ 62.236260][ T5862] Bluetooth: hci2: command tx timeout [ 62.244473][ T5850] Bluetooth: hci4: command tx timeout [ 62.254247][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.311430][ T5850] Bluetooth: hci3: command tx timeout [ 62.327776][ T5847] veth0_vlan: entered promiscuous mode [ 62.367918][ T5847] veth1_vlan: entered promiscuous mode [ 62.393740][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.461897][ T5844] veth0_vlan: entered promiscuous mode [ 62.482232][ T5844] veth1_vlan: entered promiscuous mode [ 62.502285][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.510873][ T5847] veth0_macvtap: entered promiscuous mode [ 62.520531][ T5847] veth1_macvtap: entered promiscuous mode [ 62.538518][ T5848] veth0_vlan: entered promiscuous mode [ 62.588550][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.598036][ T5848] veth1_vlan: entered promiscuous mode [ 62.613443][ T5846] veth0_vlan: entered promiscuous mode [ 62.631867][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.655426][ T5846] veth1_vlan: entered promiscuous mode [ 62.668982][ T5844] veth0_macvtap: entered promiscuous mode [ 62.686641][ T5847] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.696468][ T5847] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.705740][ T5847] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.715159][ T5847] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.732269][ T5844] veth1_macvtap: entered promiscuous mode [ 62.766509][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.777737][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.789348][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.820878][ T5848] veth0_macvtap: entered promiscuous mode [ 62.835460][ T5846] veth0_macvtap: entered promiscuous mode [ 62.847545][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.858393][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.872278][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.883052][ T5844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.892967][ T5844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.902010][ T5844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.912068][ T5844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.937899][ T5848] veth1_macvtap: entered promiscuous mode [ 62.964388][ T5846] veth1_macvtap: entered promiscuous mode [ 62.985363][ T5843] veth0_vlan: entered promiscuous mode [ 63.018118][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.029473][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.040663][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.053215][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.065171][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.087386][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.105249][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.116408][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.127021][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.137917][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.158737][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.164070][ T5843] veth1_vlan: entered promiscuous mode [ 63.172893][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.204136][ T5848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.213984][ T5848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.223219][ T5848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.232316][ T5848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.247311][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.258662][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.268844][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.282733][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.292774][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.303628][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.314938][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.341123][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.341563][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.348960][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.360894][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.377873][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.389031][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.399227][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.410432][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.421611][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.445156][ T5846] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.455057][ T5846] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.463998][ T5846] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.474777][ T5846] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.521183][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.543399][ T5843] veth0_macvtap: entered promiscuous mode [ 63.552803][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.578119][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.587220][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.601335][ T5843] veth1_macvtap: entered promiscuous mode [ 63.686254][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.698888][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.713415][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.722993][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 63.724947][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.752424][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.763287][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.773754][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.784866][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.796241][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.824555][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.834080][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.850399][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.864091][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.874415][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.886556][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.897438][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.908329][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.918554][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.930597][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.942748][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.972665][ T5843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.983993][ T5843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.994484][ T5843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.004903][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.052492][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.074094][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.142247][ T5932] macsec0: entered promiscuous mode [ 64.150830][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.172136][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.179353][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.196764][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.216743][ T5932] veth1_macvtap: left promiscuous mode [ 64.230929][ T5850] Bluetooth: hci1: command tx timeout [ 64.270951][ T5932] macsec0 (unregistering): left promiscuous mode [ 64.286554][ T5935] loop3: detected capacity change from 0 to 164 [ 64.294201][ T5935] ======================================================= [ 64.294201][ T5935] WARNING: The mand mount option has been deprecated and [ 64.294201][ T5935] and is ignored by this kernel. Remove the mand [ 64.294201][ T5935] option from the mount to silence this warning. [ 64.294201][ T5935] ======================================================= [ 64.353955][ T5850] Bluetooth: hci4: command tx timeout [ 64.353993][ T5860] Bluetooth: hci0: command tx timeout [ 64.366087][ T5862] Bluetooth: hci2: command tx timeout [ 64.366697][ T5935] Unable to read rock-ridge attributes [ 64.390313][ T5862] Bluetooth: hci3: command tx timeout [ 64.406154][ T5935] Unable to read rock-ridge attributes [ 64.440704][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.448683][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.535791][ T5937] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.607380][ T5940] syz.2.3: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 64.629480][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.649888][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.696479][ T5940] CPU: 0 UID: 0 PID: 5940 Comm: syz.2.3 Not tainted 6.12.0-rc5-next-20241101-syzkaller #0 [ 64.706562][ T5940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 64.717192][ T5940] Call Trace: [ 64.720514][ T5940] [ 64.723477][ T5940] dump_stack_lvl+0x241/0x360 [ 64.728297][ T5940] ? __pfx_dump_stack_lvl+0x10/0x10 [ 64.733939][ T5940] ? __pfx__printk+0x10/0x10 [ 64.738774][ T5940] ? __rcu_read_unlock+0xa1/0x110 [ 64.743995][ T5940] warn_alloc+0x278/0x410 [ 64.748555][ T5940] ? stack_depot_save_flags+0x6e4/0x830 [ 64.754176][ T5940] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 64.760381][ T5940] ? __pfx_warn_alloc+0x10/0x10 [ 64.765640][ T5940] ? kasan_save_track+0x3f/0x80 [ 64.770627][ T5940] ? __kasan_kmalloc+0x98/0xb0 [ 64.775433][ T5940] ? xsk_setsockopt+0x598/0x950 [ 64.780447][ T5940] ? do_sock_setsockopt+0x3af/0x720 [ 64.785698][ T5940] ? __sys_setsockopt+0x1a2/0x250 [ 64.790792][ T5940] ? __x64_sys_setsockopt+0xb5/0xd0 [ 64.796178][ T5940] ? do_syscall_64+0xf3/0x230 [ 64.800986][ T5940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.807157][ T5940] __vmalloc_node_range_noprof+0x126/0x1380 [ 64.813741][ T5940] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 64.820121][ T5940] ? __kasan_kmalloc+0x98/0xb0 [ 64.825087][ T5940] vmalloc_user_noprof+0x74/0x80 [ 64.830089][ T5940] ? xskq_create+0xb6/0x170 [ 64.834672][ T5940] xskq_create+0xb6/0x170 [ 64.839047][ T5940] xsk_init_queue+0xa1/0x100 [ 64.843684][ T5940] xsk_setsockopt+0x598/0x950 [ 64.848411][ T5940] ? __pfx_xsk_setsockopt+0x10/0x10 [ 64.853657][ T5940] ? __pfx_aa_sk_perm+0x10/0x10 [ 64.858645][ T5940] ? __pfx_lock_acquire+0x10/0x10 [ 64.863712][ T5940] ? aa_sock_opt_perm+0x79/0x120 [ 64.868692][ T5940] ? __pfx_xsk_setsockopt+0x10/0x10 [ 64.874019][ T5940] do_sock_setsockopt+0x3af/0x720 [ 64.879088][ T5940] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 64.884846][ T5940] ? __fget_files+0x2a/0x410 [ 64.889490][ T5940] ? __fget_files+0x395/0x410 [ 64.894225][ T5940] ? __fget_files+0x2a/0x410 [ 64.898885][ T5940] __sys_setsockopt+0x1a2/0x250 [ 64.903793][ T5940] __x64_sys_setsockopt+0xb5/0xd0 [ 64.908957][ T5940] do_syscall_64+0xf3/0x230 [ 64.913581][ T5940] ? clear_bhb_loop+0x35/0x90 [ 64.918296][ T5940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.924239][ T5940] RIP: 0033:0x7f773337e719 [ 64.928700][ T5940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.948604][ T5940] RSP: 002b:00007f7734246038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 64.957061][ T5940] RAX: ffffffffffffffda RBX: 00007f7733535f80 RCX: 00007f773337e719 [ 64.965249][ T5940] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 64.973350][ T5940] RBP: 00007f77333f132e R08: 0000000000000020 R09: 0000000000000000 [ 64.981367][ T5940] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 64.989766][ T5940] R13: 0000000000000000 R14: 00007f7733535f80 R15: 00007ffc50ae5868 [ 64.998403][ T5940] [ 65.018132][ T5940] Mem-Info: [ 65.021982][ T5940] active_anon:4402 inactive_anon:0 isolated_anon:0 [ 65.021982][ T5940] active_file:1052 inactive_file:38178 isolated_file:0 [ 65.021982][ T5940] unevictable:768 dirty:607 writeback:0 [ 65.021982][ T5940] slab_reclaimable:9856 slab_unreclaimable:96001 [ 65.021982][ T5940] mapped:20842 shmem:1424 pagetables:680 [ 65.021982][ T5940] sec_pagetables:0 bounce:0 [ 65.021982][ T5940] kernel_misc_reclaimable:0 [ 65.021982][ T5940] free:1358280 free_pcp:533 free_cma:0 [ 65.102669][ T5940] Node 0 active_anon:17608kB inactive_anon:0kB active_file:4208kB inactive_file:152640kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:83368kB dirty:2420kB writeback:0kB shmem:4160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10840kB pagetables:2720kB sec_pagetables:0kB all_unreclaimable? no [ 65.182666][ T5940] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 65.229396][ T5940] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 65.295594][ T5954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 65.306961][ T5940] lowmem_reserve[]: 0 2463 2464 0 0 [ 65.325811][ T5956] netlink: 'syz.0.12': attribute type 10 has an invalid length. [ 65.328664][ T5940] Node 0 DMA32 free:1508316kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:17740kB inactive_anon:0kB active_file:4872kB inactive_file:152096kB unevictable:1536kB writepending:2528kB present:3129332kB managed:2550468kB mlocked:0kB bounce:0kB free_pcp:1556kB local_pcp:628kB free_cma:0kB [ 65.328746][ T5940] lowmem_reserve[]: 0 0 0 0 0 [ 65.328788][ T5940] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:564kB unevictable:0kB writepending:8kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 65.328897][ T5940] lowmem_reserve[]: 0 0 0 0 0 [ 65.328946][ T5940] Node 1 Normal free:3908380kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:740kB local_pcp:404kB free_cma:0kB [ 65.329003][ T5940] lowmem_reserve[]: 0 0 0 0 0 [ 65.329049][ T5940] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 65.329211][ T5940] Node 0 DMA32: 7*4kB (UM) 96*8kB (UME) 18*16kB (UM) 7*32kB (UME) 4*64kB (UE) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 1*1024kB (M) 2*2048kB (M) 366*4096kB (M) = 1508252kB [ 65.329413][ T5940] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 65.329541][ T5940] Node 1 Normal: 71*4kB (UE) 50*8kB (UME) 33*16kB (UME) 211*32kB (UME) 104*64kB (UME) 36*128kB (UME) 18*256kB (UM) 9*512kB (UM) 5*1024kB (UME) 4*2048kB (UE) 944*4096kB (M) = 3908380kB [ 65.333337][ T5940] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 65.333358][ T5940] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 65.333376][ T5940] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 65.333393][ T5940] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 65.333411][ T5940] 40827 total pagecache pages [ 65.333424][ T5940] 0 pages in swap cache [ 65.333432][ T5940] Free swap = 124996kB [ 65.333441][ T5940] Total swap = 124996kB [ 65.333452][ T5940] 2097051 pages RAM [ 65.333460][ T5940] 0 pages HighMem/MovableOnly [ 65.333469][ T5940] 427648 pages reserved [ 65.333477][ T5940] 0 pages cma reserved [ 65.378019][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.545056][ T5953] syz.3.11 uses obsolete (PF_INET,SOCK_PACKET) [ 65.552461][ C0] Illegal XDP return value 16128 on prog (id 12) dev bond_slave_1, expect packet loss! [ 65.715058][ T29] audit: type=1326 audit(1730559726.010:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.3.11" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02e2f7e719 code=0x0 [ 65.869048][ T5965] smc: net device bond0 applied user defined pnetid SYZ0 [ 65.906935][ T5969] hsr_slave_0: left promiscuous mode [ 65.914822][ T5965] smc: net device bond0 erased user defined pnetid SYZ0 [ 65.960494][ T5969] hsr_slave_1: left promiscuous mode [ 66.156437][ T5976] loop2: detected capacity change from 0 to 512 [ 66.306376][ T5976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.307706][ T29] audit: type=1326 audit(1730559726.610:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaaa57e719 code=0x7ffc0000 [ 66.319641][ T5976] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.340122][ T5862] Bluetooth: hci1: command tx timeout [ 66.358151][ T29] audit: type=1326 audit(1730559726.640:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaaa57e719 code=0x7ffc0000 [ 66.384755][ T29] audit: type=1326 audit(1730559726.640:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffaaa57e719 code=0x7ffc0000 [ 66.408711][ T5862] Bluetooth: hci2: command tx timeout [ 66.414301][ T5862] Bluetooth: hci0: command tx timeout [ 66.420518][ T5860] Bluetooth: hci4: command tx timeout [ 66.426991][ T29] audit: type=1326 audit(1730559726.640:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaaa57e719 code=0x7ffc0000 [ 66.450166][ T29] audit: type=1326 audit(1730559726.640:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaaa57e719 code=0x7ffc0000 [ 66.472856][ T5860] Bluetooth: hci3: command tx timeout [ 66.478629][ T29] audit: type=1326 audit(1730559726.690:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffaaa57e719 code=0x7ffc0000 [ 66.519635][ T29] audit: type=1326 audit(1730559726.690:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaaa57e719 code=0x7ffc0000 [ 66.556533][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.628509][ T29] audit: type=1326 audit(1730559726.690:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaaa57e719 code=0x7ffc0000 [ 66.769511][ T29] audit: type=1326 audit(1730559726.780:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffaaa57e719 code=0x7ffc0000 [ 66.894426][ T5992] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 66.962622][ T5995] loop1: detected capacity change from 0 to 1764 [ 67.042735][ T5995] process 'syz.1.23' launched './file0' with NULL argv: empty string added [ 67.065768][ T6001] loop4: detected capacity change from 0 to 512 [ 67.178206][ T6001] EXT4-fs (loop4): too many log groups per flexible block group [ 67.195661][ T6001] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 67.216709][ T6001] EXT4-fs (loop4): mount failed [ 67.648856][ T6018] loop3: detected capacity change from 0 to 512 [ 67.676882][ T6018] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.701789][ T6018] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 67.729210][ T6018] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 67.764497][ T6018] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (22669!=50318) [ 67.780091][ T6018] EXT4-fs (loop3): group descriptors corrupted! [ 67.895882][ T6016] loop4: detected capacity change from 0 to 8192 [ 68.086323][ T6016] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 68.147637][ T6016] FAT-fs (loop4): Filesystem has been set read-only [ 68.179888][ T6016] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 68.199050][ T6016] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 68.259879][ T6016] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 68.287011][ T6016] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 68.327009][ T6016] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 68.353267][ T6016] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 68.383332][ T6016] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 68.417185][ T6016] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 68.443291][ T6016] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 68.476930][ T6016] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 68.517573][ T6016] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 68.559141][ T6016] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 68.588628][ T6016] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 68.623623][ T6016] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 68.658704][ T6016] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 68.673218][ T6016] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 68.722969][ T6016] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 68.752662][ T6016] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 68.785115][ T6016] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 68.881935][ T6016] syz.4.32 (6016) used greatest stack depth: 18064 bytes left [ 69.247100][ T6050] loop3: detected capacity change from 0 to 1764 [ 69.616289][ T6059] loop4: detected capacity change from 0 to 8192 [ 69.629011][ T6059] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.301418][ T6100] Zero length message leads to an empty skb [ 71.314476][ T6102] loop0: detected capacity change from 0 to 128 [ 71.377928][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 71.377946][ T29] audit: type=1326 audit(1730559731.680:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e2f7e719 code=0x7ffc0000 [ 71.407381][ T29] audit: type=1326 audit(1730559731.680:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e2f7e719 code=0x7ffc0000 [ 71.430136][ T29] audit: type=1326 audit(1730559731.680:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02e2f7e719 code=0x7ffc0000 [ 71.452333][ T29] audit: type=1326 audit(1730559731.680:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e2f7e719 code=0x7ffc0000 [ 71.474617][ T29] audit: type=1326 audit(1730559731.680:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e2f7e719 code=0x7ffc0000 [ 71.496838][ T29] audit: type=1326 audit(1730559731.680:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02e2f7e719 code=0x7ffc0000 [ 71.547845][ T29] audit: type=1326 audit(1730559731.850:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e2f7e719 code=0x7ffc0000 [ 71.571236][ T29] audit: type=1326 audit(1730559731.850:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e2f7e719 code=0x7ffc0000 [ 71.600103][ T29] audit: type=1326 audit(1730559731.900:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f02e2f7e719 code=0x7ffc0000 [ 71.623761][ T29] audit: type=1326 audit(1730559731.900:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e2f7e719 code=0x7ffc0000 [ 71.677965][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.687340][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.946487][ T6113] loop1: detected capacity change from 0 to 1764 [ 72.940500][ T6136] program syz.0.76 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.737967][ T6156] loop2: detected capacity change from 0 to 128 [ 75.815880][ T6150] veth0_to_team: entered promiscuous mode [ 75.850009][ T6150] macsec1: entered promiscuous mode [ 75.933773][ T6150] macsec1: entered allmulticast mode [ 75.939655][ T6150] veth0_to_team: entered allmulticast mode [ 76.041947][ T6150] veth0_to_team: left allmulticast mode [ 76.048709][ T6150] veth0_to_team: left promiscuous mode [ 76.149087][ T6169] loop1: detected capacity change from 0 to 8192 [ 76.306683][ T6175] loop2: detected capacity change from 0 to 512 [ 76.364339][ T6178] program syz.4.90 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.422030][ T6175] EXT4-fs (loop2): failed to initialize system zone (-117) [ 76.481751][ T6175] EXT4-fs (loop2): mount failed [ 76.672852][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 76.672871][ T29] audit: type=1326 audit(1730559736.980:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6181 comm="syz.1.92" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15f217e719 code=0x0 [ 76.758159][ T6190] loop4: detected capacity change from 0 to 512 [ 76.776048][ T6190] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.798086][ T6190] EXT4-fs (loop4): orphan cleanup on readonly fs [ 76.825153][ T6190] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.97: bg 0: block 248: padding at end of block bitmap is not set [ 76.851177][ T6190] Quota error (device loop4): write_blk: dquota write failed [ 76.860878][ T6190] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 76.880208][ T6190] EXT4-fs error (device loop4): ext4_acquire_dquot:6887: comm syz.4.97: Failed to acquire dquot type 1 [ 76.955645][ T6197] loop2: detected capacity change from 0 to 512 [ 76.986223][ T6190] EXT4-fs (loop4): 1 truncate cleaned up [ 77.026586][ T6190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.175774][ T6197] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.98: invalid indirect mapped block 256 (level 2) [ 77.269374][ T6190] syz.4.97 (6190) used greatest stack depth: 17656 bytes left [ 77.278719][ T5846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.287666][ T6197] EXT4-fs (loop2): 2 truncates cleaned up [ 77.288592][ T6197] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.284522][ T6212] loop3: detected capacity change from 0 to 128 [ 78.451684][ T29] audit: type=1800 audit(1730559738.700:91): pid=6212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.102" name="file1" dev="loop3" ino=1048605 res=0 errno=0 [ 78.935743][ T6201] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 79.143404][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.848953][ T6235] program syz.2.104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.958811][ T6231] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN PTI [ 79.971630][ T6231] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 79.980067][ T6231] CPU: 0 UID: 0 PID: 6231 Comm: syz.4.110 Not tainted 6.12.0-rc5-next-20241101-syzkaller #0 [ 79.990272][ T6231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 80.000354][ T6231] RIP: 0010:io_sqe_buffer_register+0xaa8/0x2cf0 [ 80.006623][ T6231] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 d0 70 55 fd 48 8b 1b 48 83 c3 18 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 aa 70 55 fd 48 8b 03 48 89 44 24 60 [ 80.026252][ T6231] RSP: 0018:ffffc900176cf640 EFLAGS: 00010206 [ 80.032348][ T6231] RAX: 0000000000000003 RBX: 0000000000000018 RCX: dffffc0000000000 [ 80.040346][ T6231] RDX: ffff8880243a2128 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.048332][ T6231] RBP: ffffc900176cf7f0 R08: ffffffff84aa9107 R09: 1ffffd40005a2000 [ 80.056401][ T6231] R10: dffffc0000000000 R11: fffff940005a2001 R12: ffffea0002d10000 [ 80.064389][ T6231] R13: 0000000000000006 R14: 1ffff1100627f2e0 R15: ffff8880313f9700 [ 80.072370][ T6231] FS: 00007fdb91ada6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 80.081316][ T6231] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.087979][ T6231] CR2: 000000110c2e2337 CR3: 00000000308a2000 CR4: 00000000003526f0 [ 80.095954][ T6231] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.103925][ T6231] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.112003][ T6231] Call Trace: [ 80.115277][ T6231] [ 80.118211][ T6231] ? __die_body+0x5f/0xb0 [ 80.122545][ T6231] ? die_addr+0xb0/0xe0 [ 80.126730][ T6231] ? exc_general_protection+0x3dd/0x5d0 [ 80.129837][ T6233] loop0: detected capacity change from 0 to 1764 [ 80.132297][ T6231] ? asm_exc_general_protection+0x26/0x30 [ 80.144364][ T6231] ? io_sqe_buffer_register+0xa27/0x2cf0 [ 80.150036][ T6231] ? io_sqe_buffer_register+0xaa8/0x2cf0 [ 80.152632][ T6233] ISO 9660 Extensions: Microsoft Joliet Level 3 [ 80.155688][ T6231] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 80.167929][ T6231] ? __might_fault+0xc6/0x120 [ 80.172643][ T6231] __io_register_rsrc_update+0x5c8/0x1320 [ 80.178389][ T6231] ? __pfx___might_resched+0x10/0x10 [ 80.183768][ T6231] ? __pfx___io_register_rsrc_update+0x10/0x10 [ 80.189922][ T6231] ? rcu_is_watching+0x15/0xb0 [ 80.194681][ T6231] ? __pfx_lock_release+0x10/0x10 [ 80.199697][ T6231] ? trace_contention_end+0x3c/0x120 [ 80.204986][ T6231] ? __mutex_lock+0x37f/0xee0 [ 80.209663][ T6231] ? __might_fault+0xc6/0x120 [ 80.214347][ T6231] io_register_rsrc_update+0x1d1/0x230 [ 80.219804][ T6231] ? __pfx_io_register_rsrc_update+0x10/0x10 [ 80.225776][ T6231] ? __fget_files+0x395/0x410 [ 80.230444][ T6231] ? __fget_files+0x2a/0x410 [ 80.235024][ T6231] __se_sys_io_uring_register+0x8ee/0x40d0 [ 80.240830][ T6231] ? __pfx_futex_wake_mark+0x10/0x10 [ 80.246116][ T6231] ? do_raw_spin_unlock+0x13c/0x8b0 [ 80.251398][ T6231] ? wake_up_q+0xdc/0x120 [ 80.255728][ T6231] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 80.261961][ T6231] ? __pfx_futex_wait+0x10/0x10 [ 80.266806][ T6231] ? bpf_trace_run2+0x1fc/0x540 [ 80.271654][ T6231] ? __pfx_lock_release+0x10/0x10 [ 80.276672][ T6231] ? do_futex+0x33b/0x560 [ 80.281002][ T6231] ? __pfx_do_futex+0x10/0x10 [ 80.285678][ T6231] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 80.291658][ T6231] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 80.297983][ T6231] ? do_syscall_64+0x100/0x230 [ 80.302742][ T6231] ? do_syscall_64+0xb6/0x230 [ 80.307421][ T6231] do_syscall_64+0xf3/0x230 [ 80.311919][ T6231] ? clear_bhb_loop+0x35/0x90 [ 80.316594][ T6231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.322503][ T6231] RIP: 0033:0x7fdb90d7e719 [ 80.326909][ T6231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.346514][ T6231] RSP: 002b:00007fdb91ada038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 80.354939][ T6231] RAX: ffffffffffffffda RBX: 00007fdb90f35f80 RCX: 00007fdb90d7e719 [ 80.362919][ T6231] RDX: 0000000020000600 RSI: 0000000000000010 RDI: 0000000000000006 [ 80.370891][ T6231] RBP: 00007fdb90df132e R08: 0000000000000000 R09: 0000000000000000 [ 80.378854][ T6231] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 80.386819][ T6231] R13: 0000000000000000 R14: 00007fdb90f35f80 R15: 00007ffd35204488 [ 80.394793][ T6231] [ 80.397805][ T6231] Modules linked in: [ 80.403340][ T6231] ---[ end trace 0000000000000000 ]--- [ 80.436828][ T6231] RIP: 0010:io_sqe_buffer_register+0xaa8/0x2cf0 [ 80.443263][ T6231] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 d0 70 55 fd 48 8b 1b 48 83 c3 18 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 aa 70 55 fd 48 8b 03 48 89 44 24 60 [ 80.871522][ T6231] RSP: 0018:ffffc900176cf640 EFLAGS: 00010206 [ 80.877649][ T6231] RAX: 0000000000000003 RBX: 0000000000000018 RCX: dffffc0000000000 [ 80.885705][ T6231] RDX: ffff8880243a2128 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.894025][ T6231] RBP: ffffc900176cf7f0 R08: ffffffff84aa9107 R09: 1ffffd40005a2000 [ 80.902061][ T6231] R10: dffffc0000000000 R11: fffff940005a2001 R12: ffffea0002d10000 [ 80.910134][ T6231] R13: 0000000000000006 R14: 1ffff1100627f2e0 R15: ffff8880313f9700 [ 80.918137][ T6231] FS: 00007fdb91ada6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 80.928166][ T6231] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.935383][ T6231] CR2: 00007f02e3d6ad58 CR3: 00000000308a2000 CR4: 00000000003526f0 [ 80.943527][ T6231] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.951608][ T6231] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.959653][ T6231] Kernel panic - not syncing: Fatal exception [ 80.965967][ T6231] Kernel Offset: disabled [ 80.970461][ T6231] Rebooting in 86400 seconds..