last executing test programs: 8.212962099s ago: executing program 4 (id=116): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 6.201517805s ago: executing program 4 (id=123): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5.929181511s ago: executing program 3 (id=125): bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 5.518785368s ago: executing program 4 (id=128): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x32) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x44040, 0x0) preadv2(r0, &(0x7f0000000240)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x3400, 0x2, 0x8) 5.397302999s ago: executing program 3 (id=130): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x2007}) 4.838547249s ago: executing program 2 (id=132): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r3, 0xee72) sendfile(r2, r3, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x19) 4.19285958s ago: executing program 2 (id=136): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 4.112876144s ago: executing program 3 (id=137): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x777}, 0x18) unshare(0x22020600) r2 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x200007, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x47f9, 0x4db, 0x0, 0x0, 0x0) 3.936510594s ago: executing program 4 (id=138): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00'}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2, 0xd7, 0x90, 0x1ff, 0x61, @local, @mcast2, 0x40, 0x1, 0xfffffff9, 0x80000003}}) r0 = socket$inet(0x2, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) close(r0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141000, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f00000008c0), &(0x7f0000000880)}, 0x20) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 3.638564826s ago: executing program 0 (id=139): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 3.44064628s ago: executing program 2 (id=140): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018200000000000006c0000006c0000000200000000000000000000070000000000000000070000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d700000000000000000000000000000000a1d8faf5bd23dd800008"], 0x0, 0x86}, 0x28) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}, 0x38) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020f"], 0x50}}, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0xffbf) 3.112825177s ago: executing program 1 (id=141): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f0000000000000000020000000000000008000100010000"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.710139815s ago: executing program 3 (id=142): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000340)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8}}, {@noblock_validity}, {@noload}, {@delalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@discard}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@jqfmt_vfsv1}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa1) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.642895109s ago: executing program 4 (id=143): io_uring_setup(0x71c7, &(0x7f0000000080)={0x0, 0x9b95, 0x2, 0x9, 0x17d}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000019c0)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x7}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x3, 0x10001, 0x10, 0xc, 0x4, 0x2, 0x9, 0xf, 0x3, 0xd, 0x1b, 0x19, 0x8, 0x800, 0x4}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 2.174317061s ago: executing program 0 (id=144): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c250000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x24f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.146343138s ago: executing program 1 (id=145): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$TIOCSRS485(r0, 0x542f, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) socket$nl_netfilter(0x10, 0x3, 0xc) process_mrelease(0xffffffffffffffff, 0x0) 2.142977023s ago: executing program 2 (id=146): r0 = io_uring_setup(0x71c7, &(0x7f0000000080)={0x0, 0x9b95, 0x2, 0x9, 0x17d}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000019c0)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x3, 0x10001, 0x10, 0xc, 0x4, 0x2, 0x9, 0xf, 0x3, 0xd, 0x1b, 0x19, 0x8, 0x800, 0x4}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.709311449s ago: executing program 0 (id=147): rmdir(0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r1}, 0x18) 1.665195615s ago: executing program 4 (id=148): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 1.285084711s ago: executing program 0 (id=149): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00"], 0x38}}, 0x0) 1.033905385s ago: executing program 3 (id=150): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 1.033726044s ago: executing program 1 (id=151): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f00000001c0), 0x10) bind$can_raw(r1, &(0x7f0000000000), 0x10) 1.032364871s ago: executing program 2 (id=152): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f00000001c0), 0x3, 0x445, &(0x7f0000000800)="$eJzs3M9rHFUcAPDv7CZt06YmlvqjadVoFYM/kiattQcvioIHBUEP9RiTtMRuG2ki2BI0itSjFLyLR8G/wJNeRD0JXvUuhSK5tIqHldmdSXY3u2k2blzNfj4wyXszb3nvuzNv9715mQTQs0bTH0nEYET8EhFD1Wx9gdHqr9uryzN/rC7PJFEuv/57Uil3a3V5Ji+av+5AnumLKHycxNEm9S5euXphulSau5zlJ5YuvjOxeOXq0/MXp8/PnZ+7NHXmzKmTk8+ennqmI3Gmcd0aeX/h2JGX37z+6szZ62/98FWSx98QR4eMbnbwsXK5w9V118GadNLXxYbQlmK1m0Z/pf8PRTHWT95QvPRRVxsH7KhyuVy+t/XhlTKwiyXR7RYA3ZF/0afz33zbfMDQ0eFH1918vjoBSuO+nW3VI31RyMr0N8xvO2k0Is6u/Pl5usXO3IcAAKjzTTr+earZ+K8QtfeF7srWUIYj4u6IOBQRpyPicETcE1Epe19E3N9m/Y2LJBvHP4Ub2wpsi9Lx33PZ2lb9+C8f/cVwMcsdrMTfn5ybL82dyN6Tsejfm+YnN6nj2xd//rTVsdrxX7ql9edjwawdN/r21r9mdnpp+p/EXOvmhxEjfc3iT9ZWApKIOBIRI9usY/6JL4+1Onbn+JurvCUdWGcqfxHxePX8r0RD/Llk8/XJiX1RmjsxkV8VG/3407XXWtW/3fg7JT3/+5te/2vxDye167WL7ddx7ddPWs5ptnv970neqNv33vTS0uXJiD3JK9VG1+6faig3tV4+jX/sePP+fyjW34mjEZFexA9ExIMR8VDW9ocj4pGIOL5J/N+/8OjbdTvGBtuIf2el8c+2df7XE3uicU/zRPHCd1/XVTocbcSfnv9TldRYtmcrn39badf2rmYAAAD4/ylExGAkhfG1dKEwPl79G/7Dsb9QWlhcevLcwruXZqvPCAxHfyG/0zVUcz90MpvW5/mphvzJ7L7xZ8WBSn58ZqE02+3goccdaNH/U78Vu906YMd5Xgt6l/4PvUv/h96l/0PvatL/Bzbu+qvhkUFgN2j2/f9BF9oB/Psa+r9lP+gh5v/Qu/R/6F36P/SkxYG480PyEhIbElH4TzRj5xP7tvhvLnZZotufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//FX7vJg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x1fff8, 0x100000002}) 929.837857ms ago: executing program 1 (id=153): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00'}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2, 0xd7, 0x90, 0x1ff, 0x61, @local, @mcast2, 0x40, 0x1, 0xfffffff9, 0x80000003}}) r0 = socket$inet(0x2, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) close(r0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141000, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f00000008c0), &(0x7f0000000880)}, 0x20) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 645.885087ms ago: executing program 1 (id=154): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000022000126"], 0x1c}], 0x1}, 0x0) 496.78043ms ago: executing program 0 (id=155): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 175.367122ms ago: executing program 1 (id=156): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080), 0x4) sendmsg$802154_dgram(r0, &(0x7f0000002480)={&(0x7f0000002380)={0x24, @long={0x3, 0x2}}, 0x14, &(0x7f0000002440)={0x0}}, 0x4040044) 109.944893ms ago: executing program 3 (id=157): r0 = open(0x0, 0x149040, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000000000000000180100", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) 48.182443ms ago: executing program 2 (id=158): io_uring_setup(0x71c7, &(0x7f0000000080)={0x0, 0x9b95, 0x2, 0x9, 0x17d}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000019c0)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x7}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x3, 0x10001, 0x10, 0xc, 0x4, 0x2, 0x9, 0xf, 0x3, 0xd, 0x1b, 0x19, 0x8, 0x800, 0x4}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 0s ago: executing program 0 (id=159): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$can_raw(0x1d, 0x3, 0x1) ioperm(0x3c, 0x1, 0x8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ftruncate(r2, 0x2000009) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.5' (ED25519) to the list of known hosts. [ 185.992646][ T5790] cgroup: Unknown subsys name 'net' [ 186.125823][ T5790] cgroup: Unknown subsys name 'cpuset' [ 186.145860][ T5790] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 192.411447][ T5790] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 196.548827][ T5809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 196.557828][ T5809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 196.565983][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 196.574239][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 196.584554][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 196.592387][ T5809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 196.600540][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 196.608852][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 196.617597][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 196.626252][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 196.634374][ T5809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 196.642263][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 196.651385][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 196.661822][ T5809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 196.666749][ T5821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 196.677160][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 196.682799][ T5821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 196.692159][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 196.693154][ T5809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 196.702993][ T5821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 196.709688][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 196.715778][ T5821] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 196.727877][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 196.737869][ T5821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 196.753147][ T5821] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 197.834942][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 198.598851][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 198.721367][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 198.794982][ T5821] Bluetooth: hci2: command tx timeout [ 198.800364][ T5809] Bluetooth: hci4: command tx timeout [ 198.800668][ T5821] Bluetooth: hci1: command tx timeout [ 198.806362][ T5816] Bluetooth: hci0: command tx timeout [ 198.919819][ T5821] Bluetooth: hci3: command tx timeout [ 199.102924][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.112839][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.120799][ T5815] bridge_slave_0: entered allmulticast mode [ 199.130572][ T5815] bridge_slave_0: entered promiscuous mode [ 199.145115][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 199.201264][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.209027][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.217027][ T5815] bridge_slave_1: entered allmulticast mode [ 199.226879][ T5815] bridge_slave_1: entered promiscuous mode [ 199.448686][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.458473][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 199.510331][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.870943][ T5815] team0: Port device team_slave_0 added [ 199.973059][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.983912][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.992176][ T5808] bridge_slave_0: entered allmulticast mode [ 200.001638][ T5808] bridge_slave_0: entered promiscuous mode [ 200.020317][ T5815] team0: Port device team_slave_1 added [ 200.116968][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.124984][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.132581][ T5808] bridge_slave_1: entered allmulticast mode [ 200.142461][ T5808] bridge_slave_1: entered promiscuous mode [ 200.395843][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.403351][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.414680][ T5807] bridge_slave_0: entered allmulticast mode [ 200.424277][ T5807] bridge_slave_0: entered promiscuous mode [ 200.491947][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.499234][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.525816][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.544974][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.552084][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.578595][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.631563][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.639360][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.647167][ T5807] bridge_slave_1: entered allmulticast mode [ 200.656989][ T5807] bridge_slave_1: entered promiscuous mode [ 200.666150][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.673763][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.681495][ T5806] bridge_slave_0: entered allmulticast mode [ 200.690929][ T5806] bridge_slave_0: entered promiscuous mode [ 200.803905][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.817342][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.825878][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.833477][ T5806] bridge_slave_1: entered allmulticast mode [ 200.843021][ T5806] bridge_slave_1: entered promiscuous mode [ 200.861359][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.876749][ T5821] Bluetooth: hci1: command tx timeout [ 200.885131][ T5821] Bluetooth: hci4: command tx timeout [ 200.890795][ T5809] Bluetooth: hci0: command tx timeout [ 200.897290][ T5821] Bluetooth: hci2: command tx timeout [ 200.960487][ T5816] Bluetooth: hci3: command tx timeout [ 200.979288][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.089604][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.098088][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.105850][ T5810] bridge_slave_0: entered allmulticast mode [ 201.115241][ T5810] bridge_slave_0: entered promiscuous mode [ 201.138372][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.249747][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.257572][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.265275][ T5810] bridge_slave_1: entered allmulticast mode [ 201.274649][ T5810] bridge_slave_1: entered promiscuous mode [ 201.326144][ T5808] team0: Port device team_slave_0 added [ 201.343680][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.360415][ T5808] team0: Port device team_slave_1 added [ 201.382863][ T5815] hsr_slave_0: entered promiscuous mode [ 201.393189][ T5815] hsr_slave_1: entered promiscuous mode [ 201.551236][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.639187][ T5807] team0: Port device team_slave_0 added [ 201.657139][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.672933][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.680273][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.707958][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.725379][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.732611][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.759369][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.812056][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.829315][ T5806] team0: Port device team_slave_0 added [ 201.844791][ T5807] team0: Port device team_slave_1 added [ 201.859734][ T5806] team0: Port device team_slave_1 added [ 202.096539][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.103688][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.130077][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.309421][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.316801][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.344217][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.371087][ T5810] team0: Port device team_slave_0 added [ 202.388111][ T5810] team0: Port device team_slave_1 added [ 202.399913][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.407404][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.434180][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.574533][ T5808] hsr_slave_0: entered promiscuous mode [ 202.586830][ T5808] hsr_slave_1: entered promiscuous mode [ 202.595546][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 202.601525][ T5808] Cannot create hsr debugfs directory [ 202.648617][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.655954][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.682229][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.880327][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.888518][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.915503][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.935204][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.942410][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.968757][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.974798][ T5816] Bluetooth: hci0: command tx timeout [ 202.985029][ T5816] Bluetooth: hci2: command tx timeout [ 202.990592][ T5816] Bluetooth: hci4: command tx timeout [ 202.997149][ T5816] Bluetooth: hci1: command tx timeout [ 203.035642][ T5809] Bluetooth: hci3: command tx timeout [ 203.077011][ T5806] hsr_slave_0: entered promiscuous mode [ 203.089289][ T5806] hsr_slave_1: entered promiscuous mode [ 203.098067][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 203.103965][ T5806] Cannot create hsr debugfs directory [ 203.448643][ T5807] hsr_slave_0: entered promiscuous mode [ 203.458965][ T5807] hsr_slave_1: entered promiscuous mode [ 203.467831][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 203.473721][ T5807] Cannot create hsr debugfs directory [ 203.782226][ T5810] hsr_slave_0: entered promiscuous mode [ 203.792420][ T5810] hsr_slave_1: entered promiscuous mode [ 203.801217][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 203.807232][ T5810] Cannot create hsr debugfs directory [ 204.625198][ T5815] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 204.711804][ T5815] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 204.783350][ T5815] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 204.821906][ T5815] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 204.922561][ T5808] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 204.959799][ T5808] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 205.007524][ T5808] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 205.036170][ T5809] Bluetooth: hci4: command tx timeout [ 205.037039][ T5816] Bluetooth: hci2: command tx timeout [ 205.041738][ T5809] Bluetooth: hci0: command tx timeout [ 205.047995][ T5821] Bluetooth: hci1: command tx timeout [ 205.059137][ T5808] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 205.124240][ T5821] Bluetooth: hci3: command tx timeout [ 205.323593][ T5806] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 205.383833][ T5806] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 205.410851][ T5806] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 205.486616][ T5806] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 205.620672][ T5807] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 205.644559][ T5807] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 205.733477][ T5810] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 205.759030][ T5807] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 205.823949][ T5807] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 205.849137][ T5810] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 205.931209][ T5810] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 205.976209][ T5810] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 206.401209][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.487076][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.643919][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.703603][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.750645][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.814275][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.821756][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.899785][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.907432][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.923901][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.931521][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.947328][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.954928][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.110485][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.245170][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.252697][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.441895][ T5815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 207.453616][ T5815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.489926][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.556129][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.563626][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.894920][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.923415][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.995952][ T1860] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.003494][ T1860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.105323][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.155286][ T1860] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.162807][ T1860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.345805][ T1860] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.353312][ T1860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.385156][ T1860] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.392662][ T1860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.576203][ T5807] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 208.586984][ T5807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.653694][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.827471][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.034256][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.481469][ T5808] veth0_vlan: entered promiscuous mode [ 210.661955][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.681534][ T5806] veth0_vlan: entered promiscuous mode [ 210.725429][ T5808] veth1_vlan: entered promiscuous mode [ 210.831077][ T5806] veth1_vlan: entered promiscuous mode [ 210.881619][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.166691][ T5808] veth0_macvtap: entered promiscuous mode [ 211.300711][ T5806] veth0_macvtap: entered promiscuous mode [ 211.320025][ T5808] veth1_macvtap: entered promiscuous mode [ 211.346129][ T5807] veth0_vlan: entered promiscuous mode [ 211.405661][ T5806] veth1_macvtap: entered promiscuous mode [ 211.452156][ T5807] veth1_vlan: entered promiscuous mode [ 211.543873][ T5810] veth0_vlan: entered promiscuous mode [ 211.663203][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.692941][ T5810] veth1_vlan: entered promiscuous mode [ 211.712084][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.775901][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.807221][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.976152][ T5807] veth0_macvtap: entered promiscuous mode [ 211.997602][ T4349] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.036322][ T4295] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.055589][ T5807] veth1_macvtap: entered promiscuous mode [ 212.105548][ T4349] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.157445][ T4349] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.232245][ T1119] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.254005][ T5810] veth0_macvtap: entered promiscuous mode [ 212.356094][ T1119] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.392467][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.426724][ T1119] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.447146][ T5810] veth1_macvtap: entered promiscuous mode [ 212.462574][ T1119] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.499910][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.679166][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.724428][ T4349] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.779677][ T1119] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.797662][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.846184][ T1119] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.903561][ T3921] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.952819][ T3921] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.966601][ T5815] veth0_vlan: entered promiscuous mode [ 212.973662][ T3921] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.051115][ T3921] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.083505][ T3921] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.131462][ T5815] veth1_vlan: entered promiscuous mode [ 213.479830][ T5815] veth0_macvtap: entered promiscuous mode [ 213.582560][ T5815] veth1_macvtap: entered promiscuous mode [ 213.803841][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.910433][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.026188][ T4699] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.095630][ T4699] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.185186][ T4699] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.239868][ T4699] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.477598][ T4699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.486763][ T4699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.573715][ T4031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.581847][ T4031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.766275][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.773369][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.774650][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.782605][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.829998][ T4349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.838835][ T4349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.027529][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.035671][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.195412][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.203444][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.307707][ T5808] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 220.321017][ T4699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.332744][ T4699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.928431][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.936618][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.435161][ T4699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.443206][ T4699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.471391][ T6004] mmap: syz.3.4 (6004) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 222.029944][ T6008] loop2: detected capacity change from 0 to 2048 [ 222.323040][ T6014] netlink: 'syz.2.6': attribute type 3 has an invalid length. [ 222.353751][ T6006] Alternate GPT is invalid, using primary GPT. [ 222.361671][ T6006] loop2: p2 p3 p7 [ 222.388802][ T6019] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8'. [ 222.595512][ T6020] loop4: detected capacity change from 0 to 1024 [ 222.691397][ T6020] EXT4-fs: Ignoring removed orlov option [ 222.699168][ T6020] EXT4-fs: Ignoring removed nomblk_io_submit option [ 222.848930][ T6020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.082778][ T6029] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10'. [ 223.131412][ T6030] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10'. [ 223.276624][ T6030] Zero length message leads to an empty skb [ 223.721369][ T6033] loop2: detected capacity change from 0 to 512 [ 223.759488][ T6006] udevd[6006]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 223.770546][ T5994] udevd[5994]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 223.795944][ T6033] ======================================================= [ 223.795944][ T6033] WARNING: The mand mount option has been deprecated and [ 223.795944][ T6033] and is ignored by this kernel. Remove the mand [ 223.795944][ T6033] option from the mount to silence this warning. [ 223.795944][ T6033] ======================================================= [ 223.831142][ T5992] udevd[5992]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 223.949345][ T5815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.025178][ T6033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.038438][ T6033] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 224.280489][ T6046] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 224.685922][ T5808] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.927724][ T6047] loop4: detected capacity change from 0 to 4096 [ 224.994586][ T6047] EXT4-fs: Ignoring removed nomblk_io_submit option [ 225.125633][ T6047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.187829][ T6053] loop3: detected capacity change from 0 to 256 [ 225.796880][ T6061] loop0: detected capacity change from 0 to 512 [ 225.814494][ T30] audit: type=1326 audit(1758402162.997:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213098ec29 code=0x7ffc0000 [ 225.840169][ T30] audit: type=1326 audit(1758402163.017:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f213098ec29 code=0x7ffc0000 [ 225.867597][ T30] audit: type=1326 audit(1758402163.017:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213098ec29 code=0x7ffc0000 [ 226.063248][ T5815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.168851][ T6061] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.20: bad orphan inode 11862016 [ 226.260666][ T6061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 226.274462][ T6061] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.837769][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25'. [ 227.428763][ T5810] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 227.861123][ T6083] loop4: detected capacity change from 0 to 1024 [ 228.063452][ T6083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.076765][ T6083] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.089728][ T6086] loop1: detected capacity change from 0 to 512 [ 228.101038][ T6086] EXT4-fs: Ignoring removed i_version option [ 228.107660][ T6086] EXT4-fs: Ignoring removed bh option [ 228.273437][ T6086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.355128][ T6087] loop0: detected capacity change from 0 to 128 [ 228.392504][ T6087] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 228.413396][ T30] audit: type=1326 audit(1758402165.617:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9798ec29 code=0x7ffc0000 [ 228.463445][ T6086] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 228.505149][ T6087] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 228.523883][ T5815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.550301][ T30] audit: type=1326 audit(1758402165.657:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e9798ec29 code=0x7ffc0000 [ 228.573340][ T30] audit: type=1326 audit(1758402165.687:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9798ec29 code=0x7ffc0000 [ 228.595888][ T30] audit: type=1326 audit(1758402165.687:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9798ec29 code=0x7ffc0000 [ 228.618355][ T30] audit: type=1326 audit(1758402165.687:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f4e9798ec29 code=0x7ffc0000 [ 228.641039][ T30] audit: type=1326 audit(1758402165.687:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9798ec29 code=0x7ffc0000 [ 229.093965][ T5807] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.181443][ T6097] loop2: detected capacity change from 0 to 4096 [ 229.228774][ T6097] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.380514][ T6102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.34'. [ 229.411267][ T6102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.34'. [ 229.446744][ T6097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.631749][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.638956][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 230.318956][ T5808] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.605195][ T30] audit: type=1326 audit(1758402167.787:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6115 comm="syz.1.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213098ec29 code=0x7ffc0000 [ 230.833472][ T6122] loop3: detected capacity change from 0 to 128 [ 231.123915][ T6122] syz.3.43: attempt to access beyond end of device [ 231.123915][ T6122] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 231.274861][ T6122] syz.3.43: attempt to access beyond end of device [ 231.274861][ T6122] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 232.927658][ T6149] loop3: detected capacity change from 0 to 512 [ 232.978727][ T6149] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 232.992796][ T6149] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 233.090469][ T6149] EXT4-fs (loop3): 1 truncate cleaned up [ 233.099609][ T6149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.112414][ T5806] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.384463][ T6171] capability: warning: `syz.1.63' uses deprecated v2 capabilities in a way that may be insecure [ 236.181755][ T6182] loop1: detected capacity change from 0 to 512 [ 236.320091][ T6182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.335338][ T6182] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 236.504603][ T5807] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.741657][ T6190] loop3: detected capacity change from 0 to 512 [ 236.817478][ T6190] EXT4-fs: Ignoring removed nobh option [ 237.162511][ T6190] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.70: corrupted inode contents [ 237.223385][ T6190] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.70: mark_inode_dirty error [ 237.314773][ T6190] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.70: corrupted inode contents [ 237.378770][ T6190] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.70: mark_inode_dirty error [ 237.402869][ T6190] __quota_error: 2 callbacks suppressed [ 237.402946][ T6190] Quota error (device loop3): write_blk: dquota write failed [ 237.417476][ T6190] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 237.427929][ T6190] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.70: Failed to acquire dquot type 0 [ 237.468412][ T6190] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.70: corrupted inode contents [ 237.487151][ T6190] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.70: mark_inode_dirty error [ 237.500519][ T6190] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.70: corrupted inode contents [ 237.529618][ T6190] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.70: mark_inode_dirty error [ 237.547982][ T6190] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.70: corrupted inode contents [ 237.598154][ T6190] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 237.645362][ T30] audit: type=1326 audit(1758402174.837:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.0.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73c58ec29 code=0x7ffc0000 [ 237.674447][ T6194] loop1: detected capacity change from 0 to 8192 [ 237.695779][ T6190] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.70: corrupted inode contents [ 237.727471][ T6194] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 237.754375][ T30] audit: type=1326 audit(1758402174.877:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.0.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fe73c58ec29 code=0x7ffc0000 [ 237.778626][ T30] audit: type=1326 audit(1758402174.877:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.0.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73c58ec29 code=0x7ffc0000 [ 237.782630][ T6190] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.70: mark_inode_dirty error [ 237.885055][ T6190] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 238.000617][ T6190] EXT4-fs (loop3): 1 truncate cleaned up [ 238.009153][ T6190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.022253][ T6190] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.107651][ T6190] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.124676][ T6194] netlink: 224 bytes leftover after parsing attributes in process `syz.1.71'. [ 238.133882][ T6194] ksmbd: Unknown IPC event: 4, ignore. [ 238.238629][ T6203] loop4: detected capacity change from 0 to 512 [ 238.331644][ T6203] EXT4-fs (loop4): orphan cleanup on readonly fs [ 238.405011][ T6203] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.75: bad orphan inode 13 [ 238.546184][ T6203] ext4_test_bit(bit=12, block=18) = 1 [ 238.551781][ T6203] is_bad_inode(inode)=0 [ 238.558568][ T6203] NEXT_ORPHAN(inode)=2130706432 [ 238.563605][ T6203] max_ino=32 [ 238.567668][ T6203] i_nlink=1 [ 238.573299][ T6203] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 238.844887][ T6210] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 238.979621][ T6210] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.75: bg 0: block 248: padding at end of block bitmap is not set [ 239.047260][ T6210] Quota error (device loop4): write_blk: dquota write failed [ 239.055848][ T6210] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 239.066894][ T6210] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.75: Failed to acquire dquot type 1 [ 239.122034][ T6210] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 239.160556][ T30] audit: type=1326 audit(1758402176.367:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6214 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213098ec29 code=0x7ffc0000 [ 239.222578][ T30] audit: type=1326 audit(1758402176.397:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6214 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f213098ec29 code=0x7ffc0000 [ 239.245371][ T30] audit: type=1326 audit(1758402176.397:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6214 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213098ec29 code=0x7ffc0000 [ 239.277698][ T6213] netlink: 'syz.3.78': attribute type 7 has an invalid length. [ 239.285779][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.78'. [ 239.413857][ T6213] loop3: detected capacity change from 0 to 2048 [ 239.575988][ T5992] Alternate GPT is invalid, using primary GPT. [ 239.583722][ T5992] loop3: p2 p3 p7 [ 239.597300][ T5815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.090515][ T5992] udevd[5992]: failed to send result of seq 11142 to main daemon: Connection refused [ 240.622271][ T6230] netlink: 'syz.3.86': attribute type 4 has an invalid length. [ 240.663291][ T6224] loop4: detected capacity change from 0 to 4096 [ 240.693352][ T6226] loop2: detected capacity change from 0 to 2048 [ 240.716698][ T6224] EXT4-fs: Ignoring removed nomblk_io_submit option [ 240.787580][ T6226] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 240.817857][ T6224] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.822724][ T6226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.208429][ T5815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.740283][ T6244] loop4: detected capacity change from 0 to 128 [ 241.802425][ T6245] netlink: 'syz.3.91': attribute type 1 has an invalid length. [ 241.810462][ T6245] netlink: 'syz.3.91': attribute type 4 has an invalid length. [ 241.821116][ T6245] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.91'. [ 242.185132][ T5808] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.859850][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 242.859937][ T30] audit: type=1800 audit(1758402181.062:26): pid=6253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.92" name="/" dev="9p" ino=2 res=0 errno=0 [ 244.348232][ T6269] loop4: detected capacity change from 0 to 512 [ 244.444549][ T6266] loop2: detected capacity change from 0 to 4096 [ 244.487079][ T6266] EXT4-fs: Ignoring removed nomblk_io_submit option [ 244.533607][ T6266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.541168][ T6269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.560361][ T6269] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 244.651872][ T30] audit: type=1804 audit(1758402182.852:27): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.99" name="/newroot/15/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 244.673789][ T30] audit: type=1800 audit(1758402182.852:28): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.99" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 244.721994][ T6269] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.100: iget: bad i_size value: 2533274857506816 [ 244.937452][ T5808] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.068044][ T5815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.322577][ T6291] loop4: detected capacity change from 0 to 512 [ 246.493338][ T6295] netlink: 'syz.2.111': attribute type 1 has an invalid length. [ 246.501557][ T6295] netlink: 'syz.2.111': attribute type 4 has an invalid length. [ 246.509753][ T6295] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.111'. [ 246.532280][ T6295] netlink: 'syz.2.111': attribute type 1 has an invalid length. [ 246.538547][ T6291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.540722][ T6295] netlink: 'syz.2.111': attribute type 4 has an invalid length. [ 246.553648][ T6291] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 246.560882][ T6295] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.111'. [ 247.594406][ T30] audit: type=1326 audit(1758402185.772:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaced8ec29 code=0x7ffc0000 [ 247.710575][ T30] audit: type=1326 audit(1758402185.832:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaced8ec29 code=0x7ffc0000 [ 247.733520][ T30] audit: type=1326 audit(1758402185.832:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdaced8ec29 code=0x7ffc0000 [ 247.759362][ T30] audit: type=1326 audit(1758402185.832:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdaced8ec63 code=0x7ffc0000 [ 247.768150][ T6308] loop2: detected capacity change from 0 to 512 [ 247.781975][ T30] audit: type=1326 audit(1758402185.862:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdaced8d6df code=0x7ffc0000 [ 247.816615][ T30] audit: type=1326 audit(1758402185.962:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fdaced8ecb7 code=0x7ffc0000 [ 247.841268][ T30] audit: type=1326 audit(1758402185.972:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdaced8d590 code=0x7ffc0000 [ 247.864158][ T30] audit: type=1326 audit(1758402185.972:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdaced8e82b code=0x7ffc0000 [ 247.919817][ T5815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.942653][ T6308] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 248.051235][ T30] audit: type=1326 audit(1758402186.122:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdaced8d88a code=0x7ffc0000 [ 248.056619][ T6308] loop2: detected capacity change from 0 to 1024 [ 248.073715][ T30] audit: type=1326 audit(1758402186.122:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdaced8d88a code=0x7ffc0000 [ 248.110107][ T30] audit: type=1326 audit(1758402186.122:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fdaced8d497 code=0x7ffc0000 [ 248.135759][ T30] audit: type=1326 audit(1758402186.122:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdaced903ca code=0x7ffc0000 [ 248.159538][ T30] audit: type=1326 audit(1758402186.162:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdaced8d590 code=0x7ffc0000 [ 248.185334][ T30] audit: type=1326 audit(1758402186.162:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdaced8e82b code=0x7ffc0000 [ 248.207939][ T30] audit: type=1326 audit(1758402186.162:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdaced8d88a code=0x7ffc0000 [ 248.236340][ T30] audit: type=1326 audit(1758402186.172:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaced8ec29 code=0x7ffc0000 [ 248.240277][ T6308] EXT4-fs: Ignoring removed bh option [ 248.261300][ T30] audit: type=1326 audit(1758402186.172:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaced8ec29 code=0x7ffc0000 [ 248.497624][ T6308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.200591][ T5865] IPVS: starting estimator thread 0... [ 249.215797][ T5808] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.304474][ T6324] IPVS: using max 192 ests per chain, 9600 per kthread [ 249.816690][ T6330] netlink: 'syz.0.122': attribute type 1 has an invalid length. [ 249.825479][ T6330] netlink: 'syz.0.122': attribute type 4 has an invalid length. [ 249.833288][ T6330] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.122'. [ 249.915533][ T6335] netlink: 'syz.0.122': attribute type 1 has an invalid length. [ 249.923572][ T6335] netlink: 'syz.0.122': attribute type 4 has an invalid length. [ 249.932236][ T6335] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.122'. [ 250.097910][ T6334] syzkaller0: refused to change device tx_queue_len [ 251.554778][ T6345] loop4: detected capacity change from 0 to 8192 [ 251.962366][ T6364] netlink: 'syz.2.136': attribute type 1 has an invalid length. [ 251.971030][ T6364] netlink: 'syz.2.136': attribute type 4 has an invalid length. [ 251.979079][ T6364] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.136'. [ 252.136975][ T6367] netlink: 'syz.2.136': attribute type 1 has an invalid length. [ 252.145142][ T6367] netlink: 'syz.2.136': attribute type 4 has an invalid length. [ 252.152972][ T6367] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.136'. [ 252.193064][ T5815] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 252.203334][ T5815] FAT-fs (loop4): Filesystem has been set read-only [ 252.840784][ T6373] netlink: 'syz.4.138': attribute type 4 has an invalid length. [ 253.348912][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.141'. [ 253.430543][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.141'. [ 253.679225][ T6379] loop3: detected capacity change from 0 to 512 [ 253.758796][ T6379] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.142: corrupted in-inode xattr: e_value size too large [ 253.879233][ T6379] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.142: couldn't read orphan inode 15 (err -117) [ 253.966123][ T6379] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.110120][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 254.110217][ T30] audit: type=1326 audit(1758402192.312:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6387 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213098ec29 code=0x7ffc0000 [ 254.139528][ T30] audit: type=1326 audit(1758402192.312:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6387 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f213098ec29 code=0x7ffc0000 [ 254.164284][ T30] audit: type=1326 audit(1758402192.312:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6387 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213098ec29 code=0x7ffc0000 [ 254.187749][ T30] audit: type=1326 audit(1758402192.322:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6387 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213098ec29 code=0x7ffc0000 [ 254.210582][ T30] audit: type=1326 audit(1758402192.322:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6387 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f213098ec29 code=0x7ffc0000 [ 254.233126][ T30] audit: type=1326 audit(1758402192.322:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6387 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213098ec29 code=0x7ffc0000 [ 254.257878][ T30] audit: type=1326 audit(1758402192.322:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6387 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213098ec29 code=0x7ffc0000 [ 254.280940][ T30] audit: type=1326 audit(1758402192.322:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6387 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f213098ec29 code=0x7ffc0000 [ 254.303721][ T30] audit: type=1326 audit(1758402192.392:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6387 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213098ec29 code=0x7ffc0000 [ 254.326452][ T30] audit: type=1326 audit(1758402192.392:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6387 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213098ec29 code=0x7ffc0000 [ 254.651511][ T6395] loop4: detected capacity change from 0 to 512 [ 254.706791][ T6395] EXT4-fs: Ignoring removed nobh option [ 254.758464][ T5806] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.813464][ T6395] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.148: corrupted inode contents [ 254.842673][ T6395] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.148: mark_inode_dirty error [ 254.936848][ T6395] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.148: corrupted inode contents [ 254.994589][ T6395] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.148: mark_inode_dirty error [ 255.027662][ T6395] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.148: Failed to acquire dquot type 0 [ 255.059895][ T6395] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.148: corrupted inode contents [ 255.136341][ T6395] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.148: mark_inode_dirty error [ 255.171753][ T6403] loop2: detected capacity change from 0 to 512 [ 255.212362][ T6405] netlink: 'syz.1.153': attribute type 4 has an invalid length. [ 255.214985][ T6395] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.148: corrupted inode contents [ 255.265935][ T6395] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.148: mark_inode_dirty error [ 255.299765][ T6403] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 255.328510][ T6395] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.148: corrupted inode contents [ 255.342568][ T6395] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 255.359650][ T6395] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.148: corrupted inode contents [ 255.384294][ T6403] EXT4-fs (loop2): 1 truncate cleaned up [ 255.392174][ T6403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.417082][ T6395] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.148: mark_inode_dirty error [ 255.439805][ T6407] netlink: 'syz.3.150': attribute type 1 has an invalid length. [ 255.448037][ T6407] netlink: 'syz.3.150': attribute type 4 has an invalid length. [ 255.458051][ T6407] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.150'. [ 255.484699][ T6407] netlink: 'syz.3.150': attribute type 1 has an invalid length. [ 255.492569][ T6407] netlink: 'syz.3.150': attribute type 4 has an invalid length. [ 255.500597][ T6407] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.150'. [ 255.513251][ T6395] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 255.589470][ T6395] EXT4-fs (loop4): 1 truncate cleaned up [ 255.597426][ T6395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.610535][ T6395] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.938250][ T5808] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.001368][ T6414] ===================================================== [ 256.009092][ T6414] BUG: KMSAN: uninit-value in ieee802154_hdr_push+0x9ac/0xa30 [ 256.017024][ T6414] ieee802154_hdr_push+0x9ac/0xa30 [ 256.022343][ T6414] ieee802154_header_create+0x854/0xb90 [ 256.028392][ T6414] dgram_sendmsg+0xb3d/0x16d0 [ 256.033257][ T6414] ieee802154_sock_sendmsg+0x92/0xd0 [ 256.038928][ T6414] __sock_sendmsg+0x333/0x3d0 [ 256.043865][ T6414] ____sys_sendmsg+0x7e0/0xd80 [ 256.049070][ T6414] ___sys_sendmsg+0x271/0x3b0 [ 256.055529][ T6414] __x64_sys_sendmsg+0x211/0x3e0 [ 256.060687][ T6414] x64_sys_call+0x1dfd/0x3e20 [ 256.065766][ T6414] do_syscall_64+0xd9/0x210 [ 256.070430][ T6414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.076698][ T6414] [ 256.079100][ T6414] Uninit was stored to memory at: [ 256.084958][ T6414] ieee802154_hdr_push+0x9a5/0xa30 [ 256.092325][ T6414] ieee802154_header_create+0x854/0xb90 [ 256.098851][ T6414] dgram_sendmsg+0xb3d/0x16d0 [ 256.103685][ T6414] ieee802154_sock_sendmsg+0x92/0xd0 [ 256.109335][ T6414] __sock_sendmsg+0x333/0x3d0 [ 256.114421][ T6414] ____sys_sendmsg+0x7e0/0xd80 [ 256.119395][ T6414] ___sys_sendmsg+0x271/0x3b0 [ 256.124498][ T6414] __x64_sys_sendmsg+0x211/0x3e0 [ 256.129654][ T6414] x64_sys_call+0x1dfd/0x3e20 [ 256.134791][ T6414] do_syscall_64+0xd9/0x210 [ 256.139466][ T6414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.145682][ T6414] [ 256.148092][ T6414] Local variable hdr created at: [ 256.153120][ T6414] ieee802154_header_create+0x4e/0xb90 [ 256.158974][ T6414] dgram_sendmsg+0xb3d/0x16d0 [ 256.163830][ T6414] [ 256.166428][ T6414] CPU: 1 UID: 0 PID: 6414 Comm: syz.1.156 Not tainted syzkaller #0 PREEMPT(none) [ 256.176308][ T6414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 256.186647][ T6414] ===================================================== [ 256.195586][ T6414] Disabling lock debugging due to kernel taint [ 256.201861][ T6414] Kernel panic - not syncing: kmsan.panic set ... [ 256.208422][ T6414] CPU: 1 UID: 0 PID: 6414 Comm: syz.1.156 Tainted: G B syzkaller #0 PREEMPT(none) [ 256.219392][ T6414] Tainted: [B]=BAD_PAGE [ 256.223627][ T6414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 256.233796][ T6414] Call Trace: [ 256.237198][ T6414] [ 256.240223][ T6414] __dump_stack+0x26/0x30 [ 256.244746][ T6414] dump_stack_lvl+0x53/0x270 [ 256.249541][ T6414] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 256.255553][ T6414] dump_stack+0x1e/0x25 [ 256.259878][ T6414] vpanic+0x361/0xc50 [ 256.264029][ T6414] panic+0x15d/0x160 [ 256.268149][ T6414] kmsan_report+0x31c/0x320 [ 256.272851][ T6414] ? stack_depot_save+0x12/0x20 [ 256.277851][ T6414] ? __msan_warning+0x1b/0x30 [ 256.282717][ T6414] ? ieee802154_hdr_push+0x9ac/0xa30 [ 256.288168][ T6414] ? ieee802154_header_create+0x854/0xb90 [ 256.294071][ T6414] ? dgram_sendmsg+0xb3d/0x16d0 [ 256.299099][ T6414] ? ieee802154_sock_sendmsg+0x92/0xd0 [ 256.304751][ T6414] ? __sock_sendmsg+0x333/0x3d0 [ 256.309770][ T6414] ? ____sys_sendmsg+0x7e0/0xd80 [ 256.314906][ T6414] ? ___sys_sendmsg+0x271/0x3b0 [ 256.319936][ T6414] ? __x64_sys_sendmsg+0x211/0x3e0 [ 256.325240][ T6414] ? x64_sys_call+0x1dfd/0x3e20 [ 256.330325][ T6414] ? do_syscall_64+0xd9/0x210 [ 256.335183][ T6414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.341423][ T6414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.347730][ T6414] ? ____sys_sendmsg+0x7e0/0xd80 [ 256.352865][ T6414] ? ___sys_sendmsg+0x271/0x3b0 [ 256.357893][ T6414] ? __x64_sys_sendmsg+0x211/0x3e0 [ 256.363198][ T6414] ? kmsan_get_metadata+0xfb/0x160 [ 256.368504][ T6414] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 256.375005][ T6414] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 256.381230][ T6414] ? kmsan_get_metadata+0xfb/0x160 [ 256.386510][ T6414] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 256.392924][ T6414] ? kmsan_get_metadata+0xfb/0x160 [ 256.398201][ T6414] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 256.404739][ T6414] ? kmsan_get_metadata+0xfb/0x160 [ 256.410043][ T6414] __msan_warning+0x1b/0x30 [ 256.414688][ T6414] ieee802154_hdr_push+0x9ac/0xa30 [ 256.420110][ T6414] ? __msan_memcpy+0x108/0x1c0 [ 256.425062][ T6414] ieee802154_header_create+0x854/0xb90 [ 256.430830][ T6414] ? kmsan_get_metadata+0xfb/0x160 [ 256.436139][ T6414] ? __pfx_ieee802154_header_create+0x10/0x10 [ 256.442464][ T6414] dgram_sendmsg+0xb3d/0x16d0 [ 256.447339][ T6414] ? __pfx_dgram_sendmsg+0x10/0x10 [ 256.452619][ T6414] ieee802154_sock_sendmsg+0x92/0xd0 [ 256.458091][ T6414] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 256.464259][ T6414] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 256.470449][ T6414] __sock_sendmsg+0x333/0x3d0 [ 256.475289][ T6414] ____sys_sendmsg+0x7e0/0xd80 [ 256.480283][ T6414] ___sys_sendmsg+0x271/0x3b0 [ 256.485170][ T6414] ? __rcu_read_unlock+0x6d/0xd0 [ 256.490306][ T6414] ? __fget_files+0x3b4/0x4a0 [ 256.495161][ T6414] ? __fget_files+0x3b9/0x4a0 [ 256.500102][ T6414] ? kmsan_get_metadata+0xfb/0x160 [ 256.505392][ T6414] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 256.511410][ T6414] __x64_sys_sendmsg+0x211/0x3e0 [ 256.516680][ T6414] ? kmsan_get_metadata+0xfb/0x160 [ 256.521993][ T6414] x64_sys_call+0x1dfd/0x3e20 [ 256.526872][ T6414] do_syscall_64+0xd9/0x210 [ 256.531520][ T6414] ? irqentry_exit+0x16/0x60 [ 256.536281][ T6414] ? clear_bhb_loop+0x40/0x90 [ 256.541119][ T6414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.547168][ T6414] RIP: 0033:0x7f213098ec29 [ 256.551802][ T6414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.571561][ T6414] RSP: 002b:00007f21318e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.580133][ T6414] RAX: ffffffffffffffda RBX: 00007f2130bd5fa0 RCX: 00007f213098ec29 [ 256.588240][ T6414] RDX: 0000000004040044 RSI: 0000200000002480 RDI: 0000000000000004 [ 256.596340][ T6414] RBP: 00007f2130a11e41 R08: 0000000000000000 R09: 0000000000000000 [ 256.604436][ T6414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.612955][ T6414] R13: 00007f2130bd6038 R14: 00007f2130bd5fa0 R15: 00007ffc62890338 [ 256.621189][ T6414] [ 256.624678][ T6414] Kernel Offset: disabled [ 256.629067][ T6414] Rebooting in 86400 seconds..