last executing test programs: 9.185046903s ago: executing program 2 (id=222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r10, {0xb}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 7.869171105s ago: executing program 2 (id=229): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@nolazytime}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@minixdf}, {@stripe}, {@norecovery}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") chdir(0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) 6.663581366s ago: executing program 2 (id=237): pselect6(0x0, 0x0, &(0x7f0000000140)={0xffffffffffff2f43, 0x2, 0xdc, 0x1436bcbe, 0xdb, 0x0, 0x5, 0x1ff}, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) 5.955112252s ago: executing program 2 (id=240): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="f2570040", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\b\x00', @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 5.828450003s ago: executing program 3 (id=242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 5.022218902s ago: executing program 2 (id=244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000003f40000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c"], 0x140}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.632120873s ago: executing program 3 (id=247): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@nolazytime}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@minixdf}, {@stripe}, {@norecovery}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) 4.558421623s ago: executing program 2 (id=248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0xe000202b}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setgroups(0x0, 0x0) 4.119661006s ago: executing program 1 (id=251): capset(0x0, &(0x7f00000000c0)={0x200000, 0x200000, 0x7, 0x0, 0x0, 0xa}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x48) 3.76638222s ago: executing program 1 (id=253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1800}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, 0x0}, 0x4) 3.236395213s ago: executing program 3 (id=256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r10, {0xb}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2.966282365s ago: executing program 1 (id=257): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2.914424496s ago: executing program 0 (id=258): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000003f40000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c"], 0x140}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.786920415s ago: executing program 4 (id=259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20048000) 2.439255352s ago: executing program 4 (id=260): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880), 0x0, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 2.426021601s ago: executing program 0 (id=261): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f00000018c0)=""/4105, 0x1009}, {&(0x7f0000000340)=""/139, 0x8b}, {&(0x7f0000000100)=""/149, 0x95}, {&(0x7f0000000500)=""/140, 0x8c}, {&(0x7f0000000400)=""/60, 0x3c}], 0x7}, 0x8}], 0x1, 0x40000000, 0x0) 2.164459931s ago: executing program 3 (id=262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x5, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x5, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.929541666s ago: executing program 0 (id=263): capset(0x0, &(0x7f00000000c0)={0x200000, 0x200000, 0x7, 0x0, 0x0, 0xa}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x48) 1.682382751s ago: executing program 4 (id=264): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="2190", 0x2}], 0x1}, 0x1) bind$unix(r1, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000000), 0x4) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='X', 0x1}], 0x1) 1.626876993s ago: executing program 1 (id=265): syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.396344271s ago: executing program 0 (id=266): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@nolazytime}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@minixdf}, {@stripe}, {@norecovery}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) 1.137696533s ago: executing program 1 (id=267): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1800}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)}, 0x4) 1.131830942s ago: executing program 4 (id=268): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[], 0x48}}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) 911.655154ms ago: executing program 3 (id=269): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x80002, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, 0x0, 0x18}, 0x2000c8d0) 599.916773ms ago: executing program 0 (id=270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20048000) 528.439696ms ago: executing program 4 (id=271): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r0, 0x0, 0x0, 0x4}, 0x20) 315.967556ms ago: executing program 3 (id=272): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r10, {0xb}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 273.67497ms ago: executing program 1 (id=273): r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc, 0x2}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x40) 103.123997ms ago: executing program 4 (id=274): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880), 0x0, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 0s ago: executing program 0 (id=275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. [ 156.160634][ T5759] cgroup: Unknown subsys name 'net' [ 156.290871][ T5759] cgroup: Unknown subsys name 'cpuset' [ 156.304440][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 161.836708][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 167.227672][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 167.236431][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 167.246327][ T5788] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 167.254580][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 167.263915][ T5788] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 167.268807][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.273207][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 167.279503][ T5793] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 167.292448][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 167.302874][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 167.311908][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 167.324397][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 167.326830][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.346400][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.347017][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 167.355643][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 167.370563][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 167.373433][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 167.391261][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.403479][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.416756][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 167.426387][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 167.427537][ T5785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 167.450137][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 167.461306][ T5794] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 168.774356][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 168.929149][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 169.111748][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 169.166033][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 169.308235][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 169.459960][ T5788] Bluetooth: hci2: command tx timeout [ 169.465875][ T5791] Bluetooth: hci3: command tx timeout [ 169.561555][ T5791] Bluetooth: hci0: command tx timeout [ 169.621694][ T5791] Bluetooth: hci1: command tx timeout [ 169.627352][ T5791] Bluetooth: hci4: command tx timeout [ 169.890173][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.910554][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.918149][ T5779] bridge_slave_0: entered allmulticast mode [ 169.946105][ T5779] bridge_slave_0: entered promiscuous mode [ 169.979506][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.986968][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.012032][ T5780] bridge_slave_0: entered allmulticast mode [ 170.022547][ T5780] bridge_slave_0: entered promiscuous mode [ 170.037048][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.044931][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.052679][ T5779] bridge_slave_1: entered allmulticast mode [ 170.061494][ T5779] bridge_slave_1: entered promiscuous mode [ 170.102975][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.110771][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.118438][ T5780] bridge_slave_1: entered allmulticast mode [ 170.133789][ T5780] bridge_slave_1: entered promiscuous mode [ 170.295044][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.302818][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.310639][ T5778] bridge_slave_0: entered allmulticast mode [ 170.318828][ T5778] bridge_slave_0: entered promiscuous mode [ 170.377474][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.385280][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.393109][ T5777] bridge_slave_0: entered allmulticast mode [ 170.401775][ T5777] bridge_slave_0: entered promiscuous mode [ 170.422579][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.432464][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.440393][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.447830][ T5778] bridge_slave_1: entered allmulticast mode [ 170.456440][ T5778] bridge_slave_1: entered promiscuous mode [ 170.473932][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.506736][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.514317][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.522151][ T5777] bridge_slave_1: entered allmulticast mode [ 170.530600][ T5777] bridge_slave_1: entered promiscuous mode [ 170.547557][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.586471][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.596811][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.605184][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.612689][ T5781] bridge_slave_0: entered allmulticast mode [ 170.621268][ T5781] bridge_slave_0: entered promiscuous mode [ 170.803457][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.814740][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.822922][ T5781] bridge_slave_1: entered allmulticast mode [ 170.836098][ T5781] bridge_slave_1: entered promiscuous mode [ 170.902667][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.920366][ T5780] team0: Port device team_slave_0 added [ 170.955351][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.971912][ T5779] team0: Port device team_slave_0 added [ 170.985230][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.001696][ T5780] team0: Port device team_slave_1 added [ 171.037107][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.053459][ T5779] team0: Port device team_slave_1 added [ 171.114083][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.224350][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.284334][ T5778] team0: Port device team_slave_0 added [ 171.292644][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.300613][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.326855][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.371077][ T5777] team0: Port device team_slave_0 added [ 171.378908][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.387311][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.414801][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.433475][ T5778] team0: Port device team_slave_1 added [ 171.441626][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.448998][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.476045][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.516524][ T5777] team0: Port device team_slave_1 added [ 171.539771][ T5788] Bluetooth: hci2: command tx timeout [ 171.545535][ T5791] Bluetooth: hci3: command tx timeout [ 171.558109][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.565386][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.591776][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.619430][ T5791] Bluetooth: hci0: command tx timeout [ 171.647971][ T5781] team0: Port device team_slave_0 added [ 171.699502][ T5791] Bluetooth: hci4: command tx timeout [ 171.699543][ T5788] Bluetooth: hci1: command tx timeout [ 171.731025][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.738119][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.764367][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.783444][ T5781] team0: Port device team_slave_1 added [ 171.791584][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.798643][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.825070][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.847300][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.854728][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.881500][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.919122][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.926319][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.952769][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.140647][ T5779] hsr_slave_0: entered promiscuous mode [ 172.150482][ T5779] hsr_slave_1: entered promiscuous mode [ 172.161386][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.168509][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.194693][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.213372][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.220519][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.246986][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.269067][ T5780] hsr_slave_0: entered promiscuous mode [ 172.277413][ T5780] hsr_slave_1: entered promiscuous mode [ 172.285619][ T5780] debugfs: 'hsr0' already exists in 'hsr' [ 172.291661][ T5780] Cannot create hsr debugfs directory [ 172.556002][ T5778] hsr_slave_0: entered promiscuous mode [ 172.564343][ T5778] hsr_slave_1: entered promiscuous mode [ 172.572210][ T5778] debugfs: 'hsr0' already exists in 'hsr' [ 172.578037][ T5778] Cannot create hsr debugfs directory [ 172.595311][ T5777] hsr_slave_0: entered promiscuous mode [ 172.603800][ T5777] hsr_slave_1: entered promiscuous mode [ 172.611957][ T5777] debugfs: 'hsr0' already exists in 'hsr' [ 172.617776][ T5777] Cannot create hsr debugfs directory [ 172.748381][ T5781] hsr_slave_0: entered promiscuous mode [ 172.756866][ T5781] hsr_slave_1: entered promiscuous mode [ 172.764675][ T5781] debugfs: 'hsr0' already exists in 'hsr' [ 172.770547][ T5781] Cannot create hsr debugfs directory [ 173.619499][ T5791] Bluetooth: hci3: command tx timeout [ 173.619576][ T5788] Bluetooth: hci2: command tx timeout [ 173.699421][ T5791] Bluetooth: hci0: command tx timeout [ 173.779682][ T5791] Bluetooth: hci1: command tx timeout [ 173.779725][ T5788] Bluetooth: hci4: command tx timeout [ 173.823671][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 173.850768][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 173.881765][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 173.901397][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 174.007523][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 174.050711][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 174.070825][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 174.109683][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 174.251519][ T5777] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 174.296591][ T5777] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 174.342899][ T5777] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 174.368553][ T5777] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 174.601357][ T5781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 174.651170][ T5781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 174.692740][ T5781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 174.728784][ T5781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 174.977766][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.034370][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 175.100428][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 175.176185][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.200244][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 175.283986][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.291497][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.304449][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 175.374966][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.382465][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.626807][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.700603][ T5791] Bluetooth: hci2: command tx timeout [ 175.701860][ T5788] Bluetooth: hci3: command tx timeout [ 175.729076][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.781091][ T5788] Bluetooth: hci0: command tx timeout [ 175.840689][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.860031][ T5788] Bluetooth: hci1: command tx timeout [ 175.871325][ T5788] Bluetooth: hci4: command tx timeout [ 175.912374][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.976597][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.984118][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.015031][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.022560][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.091078][ T2959] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.098532][ T2959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.129341][ T2959] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.136802][ T2959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.216102][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.536668][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.598543][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.615503][ T2959] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.622953][ T2959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.790435][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.797882][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.895426][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.954371][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.153663][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.161171][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.251951][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.259503][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.598444][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.708938][ T5779] veth0_vlan: entered promiscuous mode [ 177.834836][ T5779] veth1_vlan: entered promiscuous mode [ 177.923508][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.244044][ T5779] veth0_macvtap: entered promiscuous mode [ 178.352059][ T5779] veth1_macvtap: entered promiscuous mode [ 178.587055][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.644140][ T5780] veth0_vlan: entered promiscuous mode [ 178.697868][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.716891][ T5780] veth1_vlan: entered promiscuous mode [ 178.830450][ T2959] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.854264][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.902649][ T2959] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.927508][ T2959] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.987312][ T2959] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.321537][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.362721][ T5780] veth0_macvtap: entered promiscuous mode [ 179.455186][ T5780] veth1_macvtap: entered promiscuous mode [ 179.598717][ T5777] veth0_vlan: entered promiscuous mode [ 179.722853][ T5781] veth0_vlan: entered promiscuous mode [ 179.752529][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.797682][ T5777] veth1_vlan: entered promiscuous mode [ 179.886257][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.982283][ T146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.997901][ T146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.021672][ T5781] veth1_vlan: entered promiscuous mode [ 180.070932][ T146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.081837][ T146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.248260][ T5777] veth0_macvtap: entered promiscuous mode [ 180.331298][ T5777] veth1_macvtap: entered promiscuous mode [ 180.358191][ T5778] veth0_vlan: entered promiscuous mode [ 180.531159][ T5778] veth1_vlan: entered promiscuous mode [ 180.552735][ T5781] veth0_macvtap: entered promiscuous mode [ 180.577989][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.671841][ T5781] veth1_macvtap: entered promiscuous mode [ 180.697581][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.821125][ T2975] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.844049][ T2975] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.906557][ T2975] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.953482][ T2975] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.029015][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.127478][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.272699][ T5778] veth0_macvtap: entered promiscuous mode [ 181.308043][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.375113][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.409614][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.450501][ T5778] veth1_macvtap: entered promiscuous mode [ 181.481492][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.720255][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.815262][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.893021][ T53] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.939938][ T53] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.027763][ T53] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.073769][ T53] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.458815][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.519471][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.761753][ T126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.793438][ T126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.198837][ T5779] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 183.854523][ T5930] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 185.241265][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.270574][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.564524][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.630117][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.271845][ T5967] tmpfs: Bad value for 'mpol' [ 186.541623][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 186.944845][ T5976] loop1: detected capacity change from 0 to 1024 [ 186.972768][ T5976] EXT4-fs: Ignoring removed orlov option [ 186.978678][ T5976] EXT4-fs: Ignoring removed nobh option [ 187.168979][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.192217][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.216457][ T5976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.367839][ T29] audit: type=1800 audit(1771820723.314:2): pid=5976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 187.392072][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.416743][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.711606][ T5989] syzkaller0: entered promiscuous mode [ 187.717493][ T5989] syzkaller0: entered allmulticast mode [ 187.723588][ T29] audit: type=1800 audit(1771820723.644:3): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.10" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 187.903169][ T2959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.907473][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.951492][ T2959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.429760][ T5997] netlink: 'syz.1.12': attribute type 1 has an invalid length. [ 188.689527][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.717633][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.838866][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.893473][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.088536][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.131080][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.350568][ T6004] loop1: detected capacity change from 0 to 512 [ 189.501644][ T6004] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 189.569632][ T6004] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 189.654644][ T6004] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 189.784621][ T6004] EXT4-fs (loop1): 1 truncate cleaned up [ 189.850992][ T6004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.873219][ T6008] loop4: detected capacity change from 0 to 1024 [ 189.932239][ T6008] EXT4-fs: Ignoring removed orlov option [ 189.938152][ T6008] EXT4-fs: Ignoring removed nobh option [ 190.151023][ T6008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.243222][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.344112][ T6015] Illegal XDP return value 4294967294 on prog (id 2) dev syz_tun, expect packet loss! [ 190.916453][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18'. [ 191.727132][ T6026] syzkaller0: entered promiscuous mode [ 191.733489][ T6026] syzkaller0: entered allmulticast mode [ 192.300871][ T6041] loop0: detected capacity change from 0 to 256 [ 192.326530][ T6041] ======================================================= [ 192.326530][ T6041] WARNING: The mand mount option has been deprecated and [ 192.326530][ T6041] and is ignored by this kernel. Remove the mand [ 192.326530][ T6041] option from the mount to silence this warning. [ 192.326530][ T6041] ======================================================= [ 192.582957][ T6041] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 192.595189][ T29] audit: type=1800 audit(1771820728.534:4): pid=6041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.27" name="file1" dev="loop0" ino=1048605 res=0 errno=0 [ 193.114334][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32'. [ 194.142881][ T5777] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.173322][ T6063] syzkaller0: entered promiscuous mode [ 194.178962][ T6063] syzkaller0: entered allmulticast mode [ 194.566258][ T6073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.40'. [ 196.412364][ T6104] netlink: 44 bytes leftover after parsing attributes in process `syz.2.46'. [ 196.490619][ T6104] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.500291][ T6104] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.544723][ T6108] netlink: 44 bytes leftover after parsing attributes in process `syz.2.46'. [ 198.942217][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 200.570557][ T6156] tipc: Started in network mode [ 200.609832][ T6156] tipc: Node identity 82cc64b48a7d, cluster identity 4711 [ 200.631469][ T6156] tipc: Enabled bearer , priority 0 [ 200.670732][ T6159] syzkaller0: entered promiscuous mode [ 200.676551][ T6159] syzkaller0: entered allmulticast mode [ 200.750175][ T6155] tipc: Resetting bearer [ 200.836435][ T6155] tipc: Disabling bearer [ 202.431155][ T6179] loop2: detected capacity change from 0 to 2048 [ 202.539374][ T6179] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c128, mo2=0003] [ 202.548170][ T6179] System zones: 0-7 [ 202.661785][ T6179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.792690][ T6187] Zero length message leads to an empty skb [ 202.961137][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.239516][ T6191] tipc: Enabled bearer , priority 0 [ 203.302410][ T6191] syzkaller0: entered promiscuous mode [ 203.370051][ T6191] syzkaller0: entered allmulticast mode [ 203.477735][ T6190] tipc: Resetting bearer [ 203.580658][ T6190] tipc: Disabling bearer [ 204.044022][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.063534][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.320762][ T6212] futex_wake_op: syz.2.92 tries to shift op by 256; fix this program [ 205.116381][ T6207] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 205.137389][ T6207] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 205.213679][ T6207] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 205.328509][ T6207] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 205.356534][ T6207] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 205.430837][ T6207] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 205.496844][ T6207] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 205.537319][ T6223] loop0: detected capacity change from 0 to 512 [ 205.560155][ T6207] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 205.704176][ T6207] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 205.760342][ T6223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.835141][ T6223] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.894758][ T6207] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 205.936384][ T6207] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 205.941199][ T6223] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 3: comm syz.0.96: path /15/file0: bad entry in directory: directory entry overrun - offset=60, inode=113, rec_len=2048, size=2048 fake=0 [ 206.032146][ T6207] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 206.065957][ T6207] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 206.107151][ T6223] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 12: comm syz.0.96: path /15/file0: bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 206.151404][ T6207] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 206.169963][ T6223] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 13: comm syz.0.96: path /15/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 206.245710][ T6207] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 206.259590][ T5788] Bluetooth: hci1: command 0x0c1a tx timeout [ 206.351434][ T6232] tipc: Enabling of bearer rejected, failed to enable media [ 206.657869][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.385416][ T5788] Bluetooth: hci0: command 0x0c1a tx timeout [ 207.539405][ T5788] Bluetooth: hci2: command 0x0c1a tx timeout [ 207.826489][ T6251] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 207.939693][ T5788] Bluetooth: hci3: command 0x0c1a tx timeout [ 208.099586][ T5788] Bluetooth: hci4: command 0x0c1a tx timeout [ 208.439303][ T5788] Bluetooth: hci1: command 0x0c1a tx timeout [ 209.469447][ T5788] Bluetooth: hci0: command 0x0c1a tx timeout [ 209.629487][ T5788] Bluetooth: hci2: command 0x0c1a tx timeout [ 209.734327][ T6262] netlink: 'syz.4.109': attribute type 1 has an invalid length. [ 209.804589][ T6267] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 209.917476][ T6265] loop3: detected capacity change from 0 to 512 [ 210.019519][ T5788] Bluetooth: hci3: command 0x0c1a tx timeout [ 210.140362][ T6265] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 210.188847][ T5788] Bluetooth: hci4: command 0x0c1a tx timeout [ 210.266601][ T6265] EXT4-fs (loop3): 1 truncate cleaned up [ 210.426755][ T6265] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.500714][ T5788] Bluetooth: hci1: command 0x0c1a tx timeout [ 210.779871][ T29] audit: type=1800 audit(1771820746.664:5): pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.110" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 210.823999][ T6272] loop1: detected capacity change from 0 to 1024 [ 210.914920][ T6272] EXT4-fs: Ignoring removed mblk_io_submit option [ 210.931857][ T6265] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz.3.110: invalid fast symlink length 39 [ 211.217095][ T6272] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.280018][ T6265] EXT4-fs (loop3): Remounting filesystem read-only [ 211.552156][ T5788] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.739759][ T5788] Bluetooth: hci2: command 0x0c1a tx timeout [ 211.944015][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.963304][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.099666][ T5788] Bluetooth: hci3: command 0x0c1a tx timeout [ 212.261299][ T5788] Bluetooth: hci4: command 0x0c1a tx timeout [ 214.860946][ T6298] netlink: 'syz.1.123': attribute type 1 has an invalid length. [ 215.616873][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.125'. [ 216.048744][ T6308] loop1: detected capacity change from 0 to 512 [ 216.083537][ T6309] loop4: detected capacity change from 0 to 1024 [ 216.132613][ T6311] : renamed from vlan1 (while UP) [ 216.141964][ T6309] EXT4-fs: Ignoring removed mblk_io_submit option [ 216.171500][ T6308] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 216.208496][ T6308] EXT4-fs (loop1): 1 truncate cleaned up [ 216.284338][ T6308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.312738][ T6309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.339520][ T29] audit: type=1800 audit(1771820752.284:6): pid=6308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.126" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 216.444996][ T6308] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz.1.126: invalid fast symlink length 39 [ 216.571622][ T6308] EXT4-fs (loop1): Remounting filesystem read-only [ 216.907996][ T5777] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.988090][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.472608][ T6336] netlink: 'syz.3.136': attribute type 1 has an invalid length. [ 218.422393][ T6353] netlink: 'syz.0.141': attribute type 1 has an invalid length. [ 218.463448][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'. [ 218.945893][ T6364] capability: warning: `syz.4.144' uses 32-bit capabilities (legacy support in use) [ 219.029420][ T6365] program syz.4.144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.314127][ T6368] netlink: 44 bytes leftover after parsing attributes in process `syz.0.146'. [ 219.336695][ T6369] loop2: detected capacity change from 0 to 512 [ 219.429406][ T6369] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 219.477942][ T6369] EXT4-fs (loop2): 1 truncate cleaned up [ 219.570953][ T6369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.762806][ T6369] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz.2.145: invalid fast symlink length 39 [ 220.116701][ T6369] EXT4-fs (loop2): Remounting filesystem read-only [ 220.327864][ T6384] netlink: 'syz.1.152': attribute type 1 has an invalid length. [ 220.509440][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.870800][ T6392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'. [ 221.193849][ T6398] tipc: Enabling of bearer rejected, failed to enable media [ 221.536498][ T6404] netlink: 44 bytes leftover after parsing attributes in process `syz.3.160'. [ 222.198564][ T6414] loop2: detected capacity change from 0 to 512 [ 222.238530][ T6414] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 222.310725][ T6414] EXT4-fs (loop2): 1 truncate cleaned up [ 222.390512][ T6414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.581229][ T6414] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz.2.164: invalid fast symlink length 39 [ 222.637293][ T6414] EXT4-fs (loop2): Remounting filesystem read-only [ 223.026270][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.048057][ T6427] netlink: 'syz.4.169': attribute type 1 has an invalid length. [ 223.314118][ T6430] loop3: detected capacity change from 0 to 512 [ 223.419766][ T6431] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 223.519908][ T6430] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.617746][ T6430] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.647048][ T6443] netlink: 44 bytes leftover after parsing attributes in process `syz.1.173'. [ 223.660721][ T6430] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz.3.170: path /40/file0: bad entry in directory: directory entry overrun - offset=60, inode=113, rec_len=2048, size=2048 fake=0 [ 223.722475][ T6430] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 12: comm syz.3.170: path /40/file0: bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 223.782199][ T6430] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 13: comm syz.3.170: path /40/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 224.207257][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.937893][ T6466] loop2: detected capacity change from 0 to 512 [ 224.989613][ T6466] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 225.085610][ T6466] EXT4-fs (loop2): 1 truncate cleaned up [ 225.177471][ T6466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.511790][ T6466] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz.2.181: invalid fast symlink length 39 [ 225.524162][ T6452] syzkaller0: entered promiscuous mode [ 225.553173][ T6452] syzkaller0: entered allmulticast mode [ 225.555427][ T6466] EXT4-fs (loop2): Remounting filesystem read-only [ 225.732190][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.224558][ T6481] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 226.280336][ T6481] overlayfs: failed to set xattr on upper [ 226.296361][ T6485] netlink: 44 bytes leftover after parsing attributes in process `syz.0.187'. [ 226.300901][ T6481] overlayfs: ...falling back to redirect_dir=nofollow. [ 226.322654][ T29] audit: type=1804 audit(1771820762.274:7): pid=6486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.184" name="/newroot/30/file0/bus/file1" dev="ramfs" ino=9880 res=1 errno=0 [ 226.370881][ T6481] overlayfs: ...falling back to index=off. [ 226.398234][ T6481] overlayfs: ...falling back to uuid=null. [ 227.097540][ T6499] program syz.4.193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.436159][ T6501] loop1: detected capacity change from 0 to 512 [ 227.511981][ T6501] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 227.596428][ T6501] EXT4-fs (loop1): 1 truncate cleaned up [ 227.612203][ T6501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.724194][ T29] audit: type=1800 audit(1771820763.674:8): pid=6501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.194" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 228.186695][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'. [ 228.279935][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.231451][ T6555] netlink: 'syz.3.212': attribute type 1 has an invalid length. [ 230.285573][ T6552] loop4: detected capacity change from 0 to 512 [ 230.374276][ T6552] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 230.504105][ T6552] EXT4-fs (loop4): 1 truncate cleaned up [ 230.557477][ T6552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.747527][ T29] audit: type=1800 audit(1771820766.684:9): pid=6552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.210" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 231.272759][ T5777] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.396954][ T6571] program syz.3.217 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.188798][ T6578] syzkaller0: entered promiscuous mode [ 232.212780][ T6578] syzkaller0: entered allmulticast mode [ 233.661949][ T6606] loop3: detected capacity change from 0 to 512 [ 233.683362][ T6608] loop2: detected capacity change from 0 to 512 [ 233.737696][ T6608] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 233.794598][ T6608] EXT4-fs (loop2): 1 truncate cleaned up [ 233.813003][ T6608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.840700][ T6606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.864430][ T6606] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.967087][ T29] audit: type=1800 audit(1771820769.904:10): pid=6608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.229" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 233.992379][ T6606] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz.3.228: path /53/file0: bad entry in directory: directory entry overrun - offset=60, inode=113, rec_len=2048, size=2048 fake=0 [ 234.018565][ T6610] team0: Port device vlan2 added [ 234.169515][ T6606] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 12: comm syz.3.228: path /53/file0: bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 234.259756][ T6606] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 13: comm syz.3.228: path /53/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 234.610979][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.623033][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.748134][ T6626] loop1: detected capacity change from 0 to 128 [ 234.917214][ T6625] syzkaller0: entered promiscuous mode [ 234.936431][ T6625] syzkaller0: entered allmulticast mode [ 235.540614][ T6639] bridge0: port 3(syz_tun) entered blocking state [ 235.548127][ T6639] bridge0: port 3(syz_tun) entered disabled state [ 235.612711][ T6639] syz_tun: entered allmulticast mode [ 235.706114][ T6639] syz_tun: entered promiscuous mode [ 236.221411][ T6653] loop2: detected capacity change from 0 to 7 [ 236.297123][ T6653] Dev loop2: unable to read RDB block 7 [ 236.335064][ T6653] loop2: unable to read partition table [ 236.377311][ T6653] loop2: partition table beyond EOD, truncated [ 236.434208][ T6653] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 236.975594][ T6661] loop3: detected capacity change from 0 to 512 [ 237.014110][ T6661] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 237.198817][ T6661] EXT4-fs (loop3): 1 truncate cleaned up [ 237.285457][ T6661] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.405583][ T29] audit: type=1800 audit(1771820773.354:11): pid=6661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.247" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 237.844354][ T6679] syzkaller0: entered promiscuous mode [ 237.879526][ T6679] syzkaller0: entered allmulticast mode [ 238.054237][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.510862][ T6686] netlink: 16 bytes leftover after parsing attributes in process `syz.3.256'. [ 239.117734][ T6702] loop2: detected capacity change from 0 to 7 [ 239.182108][ T6702] Dev loop2: unable to read RDB block 7 [ 239.212253][ T6702] loop2: unable to read partition table [ 239.250399][ T6702] loop2: partition table beyond EOD, truncated [ 239.313497][ T6702] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 240.460635][ T6716] syzkaller0: entered promiscuous mode [ 240.480074][ T6716] syzkaller0: entered allmulticast mode [ 241.324700][ C0] ===================================================== [ 241.332081][ C0] BUG: KMSAN: uninit-value in eth_type_trans+0x7d5/0x9b0 [ 241.339481][ C0] eth_type_trans+0x7d5/0x9b0 [ 241.344327][ C0] ip_tunnel_rcv+0x215f/0x29c0 [ 241.349428][ C0] gre_rcv+0x1ca4/0x20f0 [ 241.353809][ C0] gre_rcv+0x285/0x380 [ 241.358040][ C0] ip_protocol_deliver_rcu+0xb3d/0x13d0 [ 241.363929][ C0] ip_local_deliver_finish+0x409/0x720 [ 241.369635][ C0] ip_local_deliver+0x228/0x4a0 [ 241.374634][ C0] ip_rcv_finish+0x4f7/0x5b0 [ 241.379538][ C0] ip_rcv+0xcb/0x370 [ 241.383567][ C0] process_backlog+0x8d7/0x1500 [ 241.388544][ C0] __napi_poll+0xdc/0x950 [ 241.393167][ C0] net_rx_action+0xa5b/0x1c70 [ 241.398053][ C0] handle_softirqs+0x171/0x7e0 [ 241.403081][ C0] __do_softirq+0x14/0x1b [ 241.407575][ C0] do_softirq+0x58/0x90 [ 241.411962][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 241.417129][ C0] __dev_queue_xmit+0x38d2/0x5a50 [ 241.422394][ C0] neigh_resolve_output+0x9c3/0xaf0 [ 241.427710][ C0] ip_finish_output2+0x1afd/0x1e00 [ 241.433060][ C0] ip_finish_output+0x292/0x8d0 [ 241.438049][ C0] ip_mc_output+0x58a/0x8c0 [ 241.442878][ C0] NF_HOOK+0x1a1/0x390 [ 241.447108][ C0] raw_send_hdrinc+0x18c5/0x1f40 [ 241.452320][ C0] raw_sendmsg+0x2280/0x27f0 [ 241.457075][ C0] inet_sendmsg+0x265/0x290 [ 241.461894][ C0] sock_write_iter+0x695/0x880 [ 241.466791][ C0] vfs_write+0xbe1/0x15c0 [ 241.471430][ C0] ksys_write+0x1d9/0x470 [ 241.475902][ C0] __x64_sys_write+0x97/0xf0 [ 241.480744][ C0] x64_sys_call+0x2ff0/0x3ea0 [ 241.485591][ C0] do_syscall_64+0x134/0xf80 [ 241.490530][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.496655][ C0] [ 241.499035][ C0] Uninit was created at: [ 241.503653][ C0] kmem_cache_alloc_node_noprof+0x3cd/0x12d0 [ 241.509916][ C0] __alloc_skb+0x855/0x1190 [ 241.514572][ C0] alloc_skb_with_frags+0xc5/0xa60 [ 241.520012][ C0] sock_alloc_send_pskb+0xacb/0xc60 [ 241.525384][ C0] raw_send_hdrinc+0x34d/0x1f40 [ 241.530544][ C0] raw_sendmsg+0x2280/0x27f0 [ 241.535286][ C0] inet_sendmsg+0x265/0x290 [ 241.540055][ C0] sock_write_iter+0x695/0x880 [ 241.544949][ C0] vfs_write+0xbe1/0x15c0 [ 241.549566][ C0] ksys_write+0x1d9/0x470 [ 241.554040][ C0] __x64_sys_write+0x97/0xf0 [ 241.558779][ C0] x64_sys_call+0x2ff0/0x3ea0 [ 241.563781][ C0] do_syscall_64+0x134/0xf80 [ 241.568564][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.574775][ C0] [ 241.577203][ C0] CPU: 0 UID: 0 PID: 6728 Comm: syz.1.273 Not tainted syzkaller #0 PREEMPT(full) [ 241.586650][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 241.596992][ C0] ===================================================== [ 241.604110][ C0] Disabling lock debugging due to kernel taint [ 241.610507][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 241.617039][ C0] CPU: 0 UID: 0 PID: 6728 Comm: syz.1.273 Tainted: G B syzkaller #0 PREEMPT(full) [ 241.627965][ C0] Tainted: [B]=BAD_PAGE [ 241.632234][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 241.642406][ C0] Call Trace: [ 241.645767][ C0] [ 241.648685][ C0] __dump_stack+0x26/0x30 [ 241.653173][ C0] dump_stack_lvl+0x50/0x1c0 [ 241.657919][ C0] ? dump_stack+0x12/0x25 [ 241.662398][ C0] dump_stack+0x1e/0x25 [ 241.666695][ C0] vpanic+0x7b4/0x1430 [ 241.670941][ C0] panic+0x15d/0x160 [ 241.675049][ C0] kmsan_report+0x31a/0x320 [ 241.679722][ C0] ? __msan_warning+0x1b/0x30 [ 241.684549][ C0] ? eth_type_trans+0x7d5/0x9b0 [ 241.689562][ C0] ? ip_tunnel_rcv+0x215f/0x29c0 [ 241.694635][ C0] ? gre_rcv+0x1ca4/0x20f0 [ 241.699444][ C0] ? gre_rcv+0x285/0x380 [ 241.703865][ C0] ? ip_protocol_deliver_rcu+0xb3d/0x13d0 [ 241.709856][ C0] ? ip_local_deliver_finish+0x409/0x720 [ 241.715668][ C0] ? ip_local_deliver+0x228/0x4a0 [ 241.720856][ C0] ? ip_rcv_finish+0x4f7/0x5b0 [ 241.725793][ C0] ? ip_rcv+0xcb/0x370 [ 241.730019][ C0] ? process_backlog+0x8d7/0x1500 [ 241.735183][ C0] ? __napi_poll+0xdc/0x950 [ 241.739813][ C0] ? net_rx_action+0xa5b/0x1c70 [ 241.744805][ C0] ? handle_softirqs+0x171/0x7e0 [ 241.749918][ C0] ? __do_softirq+0x14/0x1b [ 241.754586][ C0] ? do_softirq+0x58/0x90 [ 241.759061][ C0] ? __local_bh_enable_ip+0xa1/0xb0 [ 241.764429][ C0] ? __dev_queue_xmit+0x38d2/0x5a50 [ 241.769795][ C0] ? neigh_resolve_output+0x9c3/0xaf0 [ 241.775302][ C0] ? ip_finish_output2+0x1afd/0x1e00 [ 241.780726][ C0] ? ip_finish_output+0x292/0x8d0 [ 241.785890][ C0] ? ip_mc_output+0x58a/0x8c0 [ 241.790689][ C0] ? NF_HOOK+0x1a1/0x390 [ 241.795104][ C0] ? raw_send_hdrinc+0x18c5/0x1f40 [ 241.800385][ C0] ? raw_sendmsg+0x2280/0x27f0 [ 241.805313][ C0] ? inet_sendmsg+0x265/0x290 [ 241.810160][ C0] ? sock_write_iter+0x695/0x880 [ 241.815318][ C0] ? vfs_write+0xbe1/0x15c0 [ 241.819997][ C0] ? ksys_write+0x1d9/0x470 [ 241.824649][ C0] ? __x64_sys_write+0x97/0xf0 [ 241.829579][ C0] ? x64_sys_call+0x2ff0/0x3ea0 [ 241.834887][ C0] ? do_syscall_64+0x134/0xf80 [ 241.839844][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.846072][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 241.852077][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 241.857364][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 241.863352][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 241.868639][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 241.875133][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 241.880423][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 241.885720][ C0] __msan_warning+0x1b/0x30 [ 241.890383][ C0] eth_type_trans+0x7d5/0x9b0 [ 241.895270][ C0] ip_tunnel_rcv+0x215f/0x29c0 [ 241.900226][ C0] gre_rcv+0x1ca4/0x20f0 [ 241.904603][ C0] ? __rcu_read_unlock+0x46/0xd0 [ 241.909716][ C0] ? raw_local_deliver+0x368/0x15b0 [ 241.915141][ C0] ? __pfx_gre_rcv+0x10/0x10 [ 241.919874][ C0] gre_rcv+0x285/0x380 [ 241.924117][ C0] ? __pfx_gre_rcv+0x10/0x10 [ 241.928873][ C0] ip_protocol_deliver_rcu+0xb3d/0x13d0 [ 241.934623][ C0] ip_local_deliver_finish+0x409/0x720 [ 241.940281][ C0] ip_local_deliver+0x228/0x4a0 [ 241.945307][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 241.951468][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 241.957013][ C0] ip_rcv_finish+0x4f7/0x5b0 [ 241.961781][ C0] ip_rcv+0xcb/0x370 [ 241.965926][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 241.971214][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 241.975873][ C0] process_backlog+0x8d7/0x1500 [ 241.980868][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 241.986877][ C0] ? filter_irq_stacks+0x49/0x190 [ 241.992097][ C0] ? __pfx_process_backlog+0x10/0x10 [ 241.997615][ C0] __napi_poll+0xdc/0x950 [ 242.002090][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 242.008101][ C0] net_rx_action+0xa5b/0x1c70 [ 242.013013][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 242.019039][ C0] ? sched_clock_cpu+0x59/0xa70 [ 242.024100][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 242.029353][ C0] handle_softirqs+0x171/0x7e0 [ 242.034307][ C0] __do_softirq+0x14/0x1b [ 242.038790][ C0] do_softirq+0x58/0x90 [ 242.043108][ C0] [ 242.046110][ C0] [ 242.049117][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 242.054310][ C0] __dev_queue_xmit+0x38d2/0x5a50 [ 242.059513][ C0] ? __local_bh_enable_ip+0x75/0xb0 [ 242.064992][ C0] ? _raw_spin_unlock_bh+0x2d/0x40 [ 242.070354][ C0] ? ___neigh_create+0x3511/0x3bf0 [ 242.075649][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 242.080961][ C0] ? __dev_queue_xmit+0x280/0x5a50 [ 242.086285][ C0] neigh_resolve_output+0x9c3/0xaf0 [ 242.091656][ C0] ? __pfx_neigh_resolve_output+0x10/0x10 [ 242.097529][ C0] ip_finish_output2+0x1afd/0x1e00 [ 242.102832][ C0] ip_finish_output+0x292/0x8d0 [ 242.107817][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 242.113838][ C0] ip_mc_output+0x58a/0x8c0 [ 242.118499][ C0] ? __pfx_ip_finish_output+0x10/0x10 [ 242.124057][ C0] ? __pfx_ip_mc_output+0x10/0x10 [ 242.129229][ C0] NF_HOOK+0x1a1/0x390 [ 242.133472][ C0] ? __pfx_dst_output+0x10/0x10 [ 242.138520][ C0] raw_send_hdrinc+0x18c5/0x1f40 [ 242.143790][ C0] raw_sendmsg+0x2280/0x27f0 [ 242.148651][ C0] ? __pfx_raw_sendmsg+0x10/0x10 [ 242.153860][ C0] inet_sendmsg+0x265/0x290 [ 242.158552][ C0] sock_write_iter+0x695/0x880 [ 242.163530][ C0] vfs_write+0xbe1/0x15c0 [ 242.168052][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 242.173498][ C0] ksys_write+0x1d9/0x470 [ 242.178005][ C0] __x64_sys_write+0x97/0xf0 [ 242.182758][ C0] x64_sys_call+0x2ff0/0x3ea0 [ 242.187604][ C0] do_syscall_64+0x134/0xf80 [ 242.192376][ C0] ? clear_bhb_loop+0x50/0xa0 [ 242.197202][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.203253][ C0] RIP: 0033:0x7f978979c629 [ 242.207785][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.227535][ C0] RSP: 002b:00007f978a643028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 242.236107][ C0] RAX: ffffffffffffffda RBX: 00007f9789a15fa0 RCX: 00007f978979c629 [ 242.244202][ C0] RDX: 0000000000000040 RSI: 0000200000000040 RDI: 0000000000000003 [ 242.252285][ C0] RBP: 00007f9789832b39 R08: 0000000000000000 R09: 0000000000000000 [ 242.260369][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.268449][ C0] R13: 00007f9789a16038 R14: 00007f9789a15fa0 R15: 00007ffdd97efbe8 [ 242.276572][ C0] [ 242.280086][ C0] Kernel Offset: disabled [ 242.284454][ C0] Rebooting in 86400 seconds..