last executing test programs: 6.943466909s ago: executing program 1 (id=69): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) 5.965192389s ago: executing program 1 (id=82): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) socket$kcm(0x2b, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803fd, 0x1, 0x800}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000380)={@remote, 0x49}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0xfffffffffffffdb9, @multicast}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x4, @broadcast, 'pim6reg\x00'}}, 0x1e) 4.511015815s ago: executing program 1 (id=101): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/207, 0xcf}, 0x8}], 0x1, 0x820b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 4.156411511s ago: executing program 3 (id=107): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/10, 0x21}], 0x1) 4.019176334s ago: executing program 1 (id=110): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000010001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 3.966899629s ago: executing program 3 (id=111): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, r1, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}}, 0x0) 3.875084936s ago: executing program 5 (id=113): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0xfffffffffffffffc, 0x102) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x5, [@enum64={0x3, 0x9, 0x0, 0x13, 0x0, 0xb5e3bb51dcba93a1, [{0xc, 0xffffffff, 0x9905}, {0x6, 0x0, 0x1}, {0x2, 0xfffffffe, 0x5}, {0xb, 0x3, 0x3}, {0xb, 0x8d6}, {0x9, 0x3}, {0xa, 0x5a3, 0x40}, {0x9, 0xffffffff, 0x99}, {0x10, 0x83, 0x6}]}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x2, 0x7}]}, {0x0, [0x30, 0x30, 0x61]}}, &(0x7f0000000580)=""/199, 0xa5, 0xc7, 0x0, 0x4}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@loopback}, &(0x7f0000000280)=0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000880)='/sys/power/pm_trace', 0x200080, 0x100) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="17000000ece0000006000000cfac000020080000", @ANYRES32=r1, @ANYBLOB="fb8662552409000200000000ffffffff00f600000000000000", @ANYRES32=r8, @ANYRES32=r6, @ANYBLOB="0100000002000000faffffff00"/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x18) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 3.682147834s ago: executing program 3 (id=115): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0], 0x1}, 0x58) 3.623300161s ago: executing program 0 (id=116): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffc) 3.416981046s ago: executing program 0 (id=118): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000004000000e27f00000100000041400000caca6408f62ba9375ba7ce7d0232070c4929c34c4cddd0a4dddc61d0b8165d3b6f6faae88eb313039cfdd9dfd412789828293a1b0c9eefd30bfd5008ee95bc302955202999e22c92f69b97b92c0427fb5450923e11119f6c7ada2db43cb2b6ec75372a475c", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x11, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000007000000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000040000008500000083000000bf0900000000000055090100000000009500000000000000959373912acd781103005f9448c951000000000000008500000044000000bf91000062d6ab7d5aee579bec847752d7fac400000000b7020000010000008500000001000000b7000000000000007f00000000000000bc37d70b6aa777e1c651eb484ea09382ebf2c9dcbfb4fd40bc573e9f18b271210f59a1f8ada30fe7f6596c8e"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r5, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) process_mrelease(0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x8, 0x2000200000a95c, 0x2, 0x9, 0x5, 0x48d1, 0x1, 0x800000e2}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100d0000000fbdbdf3a2700000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) memfd_create(&(0x7f0000000080)='GPL\x00', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) r10 = msgget$private(0x0, 0x3ac) msgrcv(r10, 0x0, 0x0, 0xe4b43f0e2aa28c96, 0x2000) msgsnd(r10, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x95, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800000000000200000008000000e00000020c00088008000c00ca0fe49326b791f96bbb5e798e7c5581718c2a2f3daff7591185170e18eb779b030000001536c7aa20ad62b059ad9563b7905a5c907b5d11870ba335d719ac169c76463c0c9a7c25de504a1fa8c8cf01f2846d27f2fd", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) 3.279266944s ago: executing program 2 (id=119): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="cf9900ffffffff7f00000000000000000000005ac1d932df0d3e5d0142fcd74f6d43c8f9d9025512685c5007fd79d19ef09419ef4d3eca4dc2f10c80aef058c515eaa77423ebd991b2f6c90f32fb9868d6", 0x51}], 0x1, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810) 3.279105938s ago: executing program 1 (id=120): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 3.254335949s ago: executing program 3 (id=121): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xd}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x8000, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000440) 3.003244508s ago: executing program 5 (id=123): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r1, 0x40047459, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/10, 0x21}], 0x1) 2.929134648s ago: executing program 1 (id=125): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c25000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r5}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c000004"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[0x1b94]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x18) unshare(0x60000600) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0xfd, 0x2c7, &(0x7f0000000480)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x26) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @a}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) 2.297340155s ago: executing program 0 (id=127): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, r1, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}}, 0x0) 1.586280278s ago: executing program 0 (id=128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xfff3}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf, 0xe, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xffff, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 1.471194366s ago: executing program 2 (id=129): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) 1.384066115s ago: executing program 4 (id=130): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffc) 1.314856004s ago: executing program 2 (id=131): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) 1.19501672s ago: executing program 4 (id=132): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) vmsplice(r0, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) 975.96095ms ago: executing program 2 (id=133): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007"], 0x138}}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) 975.731043ms ago: executing program 4 (id=134): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x1c0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [0x0, 0x0, 0xff], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x2, 0x9, 0x8001, 'pptp\x00', 'syz0\x00', {0x6f7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 818.692766ms ago: executing program 4 (id=135): r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x1, 0x97}, 0xc) 726.98974ms ago: executing program 3 (id=136): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xffffffff00000003}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 667.89839ms ago: executing program 5 (id=137): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 539.20885ms ago: executing program 0 (id=138): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "db748d6b120426ad", "4fe429faa1e90c473725b5e429ac42fa", "917e060b", "92816af8b4efb2ad"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) 534.284941ms ago: executing program 4 (id=139): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x4, 0x0, @void}, 0x10) 522.547856ms ago: executing program 2 (id=140): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90224fc602f0000000a0c0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 375.197098ms ago: executing program 5 (id=141): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x160, 0x160, 0x62020048, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback=0x7f008e04, @local, 0x0, 0x0, 'vlan0\x00', 'geneve1\x00'}, 0xb003, 0x130, 0x160, 0x8, {0xf400000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "4bc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a05050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0xed030000}}, {0x28, '\x00', 0x4}}}}, 0xff28) 374.826924ms ago: executing program 0 (id=142): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=@newtfilter={0xc8, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x9c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x2, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}, {0x9, 0x7, 0x40, 0x80}, {0x6, 0x0, 0x2, 0x1}]}}, @TCA_U32_MARK={0x10, 0xa, {0x10, 0x11}}]}}]}, 0xc8}}, 0x24040084) 274.075457ms ago: executing program 2 (id=143): r0 = syz_io_uring_setup(0x2ea9, &(0x7f0000000140)={0x0, 0x1d2d, 0x13500}, &(0x7f0000000240), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, 0x0, 0x1) 246.038727ms ago: executing program 4 (id=144): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0xe042, 0x68) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1a08700, &(0x7f0000000700)={[{@nodioread_nolock}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@usrquota}, {@journal_dev={'journal_dev', 0x3d, 0x1}}]}, 0x0, 0x470, &(0x7f0000001040)="$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") fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) open(&(0x7f00000003c0)='.\x00', 0x101080, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 143.086486ms ago: executing program 3 (id=145): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$eJzs3U9LW1kYx/GfJmNiHE0Ww8AMDHOY2cxsgpN5ATNhUBgmMMUaabsoXOtNG3KbyL3BEik1m9JtX4d02V2h7RtwU7rpvjspFLpxUXqL9yaaaJLGkD9avx+Q8yTPeXKO5ihPLiTuX3t8t1Tw0gWrqum40bRU14GUOowaphrjdBDPqFVdv899ePPT1es3/svmcksrxixnV//MGGMWfn5+7/6TX15W59aeLjyLaS91c/995u3ezN4P+59W7xQ9U/RMuVI1llmvVKrWumObjaJXShtzxbEtzzbFsme7bfmCU9ncrBmrvDGf2HRtzzNWuWZKds1UK6bq1ox12yqWTTqdNvMJXW7RPubkd1dWrGzXtB8Z6o4wcrOd7nTdbL1zMr87hj0BAIBzpnf/H/b63fv/3Fo4nqX///7L/b9E/z8i9bZbXfr/b8e4IYyc62atROP3tx39PwAAAAAAAAAAAAAAAAAAAAAAF8GB7yd9308ejo27gtsxSXFJfiN/VNDP28pxYbQ+/37LV9fnP/TXhLaLIWt5415cch5t5bfy4RjmswUV5cjWopL6GJyHhjBe/je3tGgCKb1wdhr1O1v5iGLN+qZUp/qpqBQ+QHv9N0q0rp9RUt91Xj9jOtXP6LdfW+rTSurVLVXkaCM418f1D/4w5p//cyfqZ4N5AAAAAAB8DdLmyKnX70E+mBDX6XxY33J9wPf9nV7XB068vo7qR64lAgAAAAAwFl5tu2Q5ju0OEMQkDVYuDbxor8D3paE+4EBBRJNcvVvwt6RzsI1xBXE1z5gZpPydznRE/T7mRCVN/MdyhmDSf5kAAAAADJtX2z7+Bz/9ev1wRLsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBy6vfzwJrzT6WaiZ6f9nckMvZvEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhHPgcAAP//ps0YVA==") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r3 = memfd_create(&(0x7f0000000a00)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\t\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSA72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\x17\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1\x85\x8b4u\x06eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xbcX\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41g\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\x14\xe0\xa2/U\xb1A2\x83\x8aI\xf1\x85j\xdf\x88\xb3\xcbB\x85\xd5x1\x00\x00', 0x2) write$binfmt_misc(r3, &(0x7f0000000180)="e502", 0x2) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 55.303291ms ago: executing program 5 (id=146): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x80, r2, 0x1, 0x0, 0x0, {}, [{@pci={{0x8, 0x8e}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x80}}, 0x0) 0s ago: executing program 5 (id=147): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, 0x0, 0x2000c800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.142' (ED25519) to the list of known hosts. [ 77.613691][ T5816] cgroup: Unknown subsys name 'net' [ 77.795615][ T5816] cgroup: Unknown subsys name 'cpuset' [ 77.805911][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.272140][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.212375][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.226377][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.234524][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.242441][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.243898][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.250716][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.257266][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.264654][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.272313][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.285084][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.302532][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.310577][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.318116][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.329576][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.337331][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.346435][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.355910][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 82.364142][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.364421][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.371960][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 82.385979][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.386509][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.400063][ T5147] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 82.408759][ T5147] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 82.416917][ T5147] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 82.424696][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.433108][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.450297][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.470630][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.488806][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.184377][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 83.222518][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 83.507607][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 83.575714][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 83.611012][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.618162][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.626290][ T5836] bridge_slave_0: entered allmulticast mode [ 83.633930][ T5836] bridge_slave_0: entered promiscuous mode [ 83.658657][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.665861][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.673472][ T5838] bridge_slave_0: entered allmulticast mode [ 83.680975][ T5838] bridge_slave_0: entered promiscuous mode [ 83.689601][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.697248][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.704599][ T5838] bridge_slave_1: entered allmulticast mode [ 83.712124][ T5838] bridge_slave_1: entered promiscuous mode [ 83.725529][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 83.763623][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.771016][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.778365][ T5836] bridge_slave_1: entered allmulticast mode [ 83.786165][ T5836] bridge_slave_1: entered promiscuous mode [ 83.905042][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 83.933482][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.977760][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.989883][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.038265][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.156570][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.163835][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.171105][ T5828] bridge_slave_0: entered allmulticast mode [ 84.178692][ T5828] bridge_slave_0: entered promiscuous mode [ 84.209054][ T5838] team0: Port device team_slave_0 added [ 84.228447][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.236005][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.243511][ T5827] bridge_slave_0: entered allmulticast mode [ 84.251268][ T5827] bridge_slave_0: entered promiscuous mode [ 84.258924][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.266145][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.273781][ T5828] bridge_slave_1: entered allmulticast mode [ 84.281363][ T5828] bridge_slave_1: entered promiscuous mode [ 84.296663][ T5836] team0: Port device team_slave_0 added [ 84.305417][ T5838] team0: Port device team_slave_1 added [ 84.324987][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.332502][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.339650][ T5827] bridge_slave_1: entered allmulticast mode [ 84.341195][ T5831] Bluetooth: hci0: command tx timeout [ 84.345736][ T52] Bluetooth: hci1: command tx timeout [ 84.358451][ T5827] bridge_slave_1: entered promiscuous mode [ 84.387080][ T5836] team0: Port device team_slave_1 added [ 84.406943][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.414189][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.427238][ T5841] bridge_slave_0: entered allmulticast mode [ 84.434989][ T5841] bridge_slave_0: entered promiscuous mode [ 84.500759][ T52] Bluetooth: hci2: command tx timeout [ 84.500772][ T5831] Bluetooth: hci5: command tx timeout [ 84.501013][ T5831] Bluetooth: hci3: command tx timeout [ 84.524120][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.531415][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.538779][ T5841] bridge_slave_1: entered allmulticast mode [ 84.546729][ T5841] bridge_slave_1: entered promiscuous mode [ 84.580464][ T5831] Bluetooth: hci4: command tx timeout [ 84.590292][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.628249][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.635477][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.661785][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.691399][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.703429][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.713150][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.720259][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.728131][ T5837] bridge_slave_0: entered allmulticast mode [ 84.735832][ T5837] bridge_slave_0: entered promiscuous mode [ 84.744065][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.751285][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.777372][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.789227][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.796295][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.822231][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.836262][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.848010][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.885409][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.892676][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.899824][ T5837] bridge_slave_1: entered allmulticast mode [ 84.907466][ T5837] bridge_slave_1: entered promiscuous mode [ 84.914676][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.921776][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.947729][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.969536][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.010512][ T5828] team0: Port device team_slave_0 added [ 85.084316][ T5827] team0: Port device team_slave_0 added [ 85.092340][ T5828] team0: Port device team_slave_1 added [ 85.099953][ T5827] team0: Port device team_slave_1 added [ 85.122805][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.136101][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.161065][ T5841] team0: Port device team_slave_0 added [ 85.174642][ T5838] hsr_slave_0: entered promiscuous mode [ 85.181770][ T5838] hsr_slave_1: entered promiscuous mode [ 85.253867][ T5841] team0: Port device team_slave_1 added [ 85.278143][ T5837] team0: Port device team_slave_0 added [ 85.358417][ T5837] team0: Port device team_slave_1 added [ 85.365914][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.372986][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.399294][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.411320][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.418254][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.444465][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.465922][ T5836] hsr_slave_0: entered promiscuous mode [ 85.472345][ T5836] hsr_slave_1: entered promiscuous mode [ 85.478501][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 85.484311][ T5836] Cannot create hsr debugfs directory [ 85.490632][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.497555][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.523500][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.562661][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.569598][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.595649][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.607849][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.614865][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.641679][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.661789][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.668737][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.694788][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.828108][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.835245][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.861474][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.874091][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.881106][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.907063][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.017871][ T5827] hsr_slave_0: entered promiscuous mode [ 86.024818][ T5827] hsr_slave_1: entered promiscuous mode [ 86.034127][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 86.039851][ T5827] Cannot create hsr debugfs directory [ 86.147788][ T5828] hsr_slave_0: entered promiscuous mode [ 86.156191][ T5828] hsr_slave_1: entered promiscuous mode [ 86.164123][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 86.169849][ T5828] Cannot create hsr debugfs directory [ 86.216991][ T5837] hsr_slave_0: entered promiscuous mode [ 86.224971][ T5837] hsr_slave_1: entered promiscuous mode [ 86.231753][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 86.237474][ T5837] Cannot create hsr debugfs directory [ 86.251580][ T5841] hsr_slave_0: entered promiscuous mode [ 86.258267][ T5841] hsr_slave_1: entered promiscuous mode [ 86.265236][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 86.271274][ T5841] Cannot create hsr debugfs directory [ 86.420482][ T5831] Bluetooth: hci0: command tx timeout [ 86.420957][ T5848] Bluetooth: hci1: command tx timeout [ 86.580602][ T5848] Bluetooth: hci2: command tx timeout [ 86.580615][ T5831] Bluetooth: hci5: command tx timeout [ 86.591383][ T5831] Bluetooth: hci3: command tx timeout [ 86.670552][ T5848] Bluetooth: hci4: command tx timeout [ 86.941090][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.954746][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.980765][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.006650][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.084218][ T5838] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 87.096257][ T5838] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 87.107053][ T5838] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 87.119032][ T5838] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 87.208141][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.221526][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.234907][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.245954][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.363811][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.375537][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.389954][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.402453][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.442714][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.560020][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.582019][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.606183][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.613549][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.627320][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.675522][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.686830][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.698845][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.705992][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.726263][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.748499][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.793857][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.801072][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.835089][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.842230][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.862857][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.872894][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.885201][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.895425][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.926983][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.958848][ T5836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.971194][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.028355][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.112575][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.124017][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.131172][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.195147][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.202324][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.292597][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.375131][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.382305][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.406501][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.413665][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.447248][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.480302][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.503558][ T5848] Bluetooth: hci0: command tx timeout [ 88.503569][ T5831] Bluetooth: hci1: command tx timeout [ 88.599607][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.644641][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.661676][ T5848] Bluetooth: hci3: command tx timeout [ 88.661703][ T5831] Bluetooth: hci5: command tx timeout [ 88.667083][ T5848] Bluetooth: hci2: command tx timeout [ 88.693345][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.700542][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.728931][ T3449] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.736080][ T3449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.744941][ T5848] Bluetooth: hci4: command tx timeout [ 88.815207][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.856032][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.973886][ T5836] veth0_vlan: entered promiscuous mode [ 89.006711][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.034299][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.041477][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.075427][ T5836] veth1_vlan: entered promiscuous mode [ 89.115926][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.123108][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.183617][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.245876][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.358507][ T5836] veth0_macvtap: entered promiscuous mode [ 89.396013][ T5836] veth1_macvtap: entered promiscuous mode [ 89.427968][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.558095][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.586330][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.638223][ T5827] veth0_vlan: entered promiscuous mode [ 89.684010][ T5838] veth0_vlan: entered promiscuous mode [ 89.698789][ T5827] veth1_vlan: entered promiscuous mode [ 89.719218][ T5828] veth0_vlan: entered promiscuous mode [ 89.738391][ T3449] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.748926][ T3449] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.777447][ T5838] veth1_vlan: entered promiscuous mode [ 89.788855][ T3449] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.801613][ T3449] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.823207][ T5828] veth1_vlan: entered promiscuous mode [ 89.878795][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.930974][ T1336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.945411][ T1336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.996003][ T1336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.996601][ T5827] veth0_macvtap: entered promiscuous mode [ 90.004585][ T1336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.041728][ T5827] veth1_macvtap: entered promiscuous mode [ 90.062800][ T5838] veth0_macvtap: entered promiscuous mode [ 90.086328][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.104756][ T5838] veth1_macvtap: entered promiscuous mode [ 90.118755][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.155109][ T5828] veth0_macvtap: entered promiscuous mode [ 90.189362][ T5828] veth1_macvtap: entered promiscuous mode [ 90.203135][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.257814][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.272431][ T5841] veth0_vlan: entered promiscuous mode [ 90.289146][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.307035][ T1085] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.333561][ T5837] veth0_vlan: entered promiscuous mode [ 90.343288][ T1085] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.361664][ T1085] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.384714][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.397426][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.409938][ T1085] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.428945][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.447416][ T5837] veth1_vlan: entered promiscuous mode [ 90.457124][ T3514] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.466858][ T3514] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.482580][ T5977] ip6t_rpfilter: unknown options [ 90.500137][ T5976] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.517991][ T5841] veth1_vlan: entered promiscuous mode [ 90.533738][ T3514] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.542550][ T3514] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.570528][ T5976] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.580682][ T5848] Bluetooth: hci0: command tx timeout [ 90.586205][ T52] Bluetooth: hci1: command tx timeout [ 90.597756][ T3514] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.623346][ T3514] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.633349][ T3514] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.675677][ T5976] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.691576][ T3449] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.741266][ T52] Bluetooth: hci5: command tx timeout [ 90.741281][ T5831] Bluetooth: hci3: command tx timeout [ 90.752138][ T5848] Bluetooth: hci2: command tx timeout [ 90.778719][ T5976] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.816475][ T5837] veth0_macvtap: entered promiscuous mode [ 90.822603][ T52] Bluetooth: hci4: command tx timeout [ 90.850623][ T3422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.858441][ T3422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.859184][ T5841] veth0_macvtap: entered promiscuous mode [ 90.873197][ T3449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.888158][ T3449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.889560][ T5837] veth1_macvtap: entered promiscuous mode [ 90.915261][ T5841] veth1_macvtap: entered promiscuous mode [ 90.984651][ T3514] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.005786][ T3514] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.037435][ T3514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.043470][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.054978][ T3514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.078140][ T3422] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.117715][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.129152][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.134424][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.149260][ T9] cfg80211: failed to load regulatory.db [ 91.176046][ T3422] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.186242][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.233225][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.258463][ T5979] netlink: 'syz.0.8': attribute type 13 has an invalid length. [ 91.302559][ T3422] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.319335][ T3422] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.462266][ T30] audit: type=1326 audit(1761888926.173:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.5.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12ef8efc9 code=0x7ffc0000 [ 91.498570][ T30] audit: type=1326 audit(1761888926.173:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.5.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12ef8efc9 code=0x7ffc0000 [ 91.508721][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.526164][ T30] audit: type=1326 audit(1761888926.223:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.5.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fb12ef8efc9 code=0x7ffc0000 [ 91.528410][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.557040][ T30] audit: type=1326 audit(1761888926.223:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.5.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12ef8efc9 code=0x7ffc0000 [ 91.584117][ T30] audit: type=1326 audit(1761888926.223:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.5.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12ef8efc9 code=0x7ffc0000 [ 91.653187][ T30] audit: type=1326 audit(1761888926.223:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.5.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fb12ef8efc9 code=0x7ffc0000 [ 91.967081][ T30] audit: type=1326 audit(1761888926.223:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.5.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12ef8efc9 code=0x7ffc0000 [ 92.703179][ T30] audit: type=1326 audit(1761888926.223:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.5.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12ef8efc9 code=0x7ffc0000 [ 92.725827][ T30] audit: type=1326 audit(1761888926.283:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.5.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb12ef8efc9 code=0x7ffc0000 [ 93.035433][ T30] audit: type=1326 audit(1761888926.283:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.5.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12ef8efc9 code=0x7ffc0000 [ 93.673215][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.687165][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.806707][ T3422] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.806772][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.824235][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.832751][ T3422] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.846327][ T5992] bridge0: port 3(gretap0) entered blocking state [ 93.853379][ T5992] bridge0: port 3(gretap0) entered disabled state [ 93.860014][ T5992] gretap0: entered allmulticast mode [ 93.869019][ T5992] gretap0: entered promiscuous mode [ 93.875017][ T5992] bridge0: port 3(gretap0) entered blocking state [ 93.881614][ T5992] bridge0: port 3(gretap0) entered forwarding state [ 94.119446][ T3422] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.139570][ T3422] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.153492][ T3422] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.163389][ T5998] netlink: 96 bytes leftover after parsing attributes in process `syz.3.13'. [ 94.205163][ T3422] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.212483][ T5996] netlink: 256 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 94.248738][ T3422] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.270176][ T3422] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.304905][ T3422] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.315774][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.367418][ T3514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.384553][ T3514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.648694][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.715283][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.238138][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.247939][ T6022] ip6t_rpfilter: unknown options [ 95.271960][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.366329][ T3514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.406386][ T3514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.468702][ T1336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.508810][ T1336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.024606][ T6034] netlink: 'syz.2.22': attribute type 13 has an invalid length. [ 96.195543][ T6040] netlink: 256 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 96.396902][ T6034] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.404682][ T6034] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.512984][ T6046] mmap: syz.1.27 (6046) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 96.528960][ T6044] loop5: detected capacity change from 0 to 2048 [ 96.626543][ T6044] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.633415][ T6034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.650558][ T6044] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.760012][ T6044] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.26: bg 0: block 345: padding at end of block bitmap is not set [ 96.825497][ T6034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.840014][ T6044] EXT4-fs (loop5): Remounting filesystem read-only [ 96.986357][ T6055] netlink: 'syz.3.30': attribute type 1 has an invalid length. [ 97.016338][ T5838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.484675][ T3449] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.508847][ T3449] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.643882][ T3449] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.821387][ T3449] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.227827][ T6088] loop0: detected capacity change from 0 to 1024 [ 98.251412][ T6094] tipc: Enabling of bearer rejected, failed to enable media [ 98.269008][ T6088] ======================================================= [ 98.269008][ T6088] WARNING: The mand mount option has been deprecated and [ 98.269008][ T6088] and is ignored by this kernel. Remove the mand [ 98.269008][ T6088] option from the mount to silence this warning. [ 98.269008][ T6088] ======================================================= [ 98.447020][ T6088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.778750][ T6108] netlink: 16 bytes leftover after parsing attributes in process `syz.5.47'. [ 99.141451][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.244534][ T6116] netlink: 256 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 100.041825][ T6140] Zero length message leads to an empty skb [ 100.252168][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 100.252190][ T30] audit: type=1326 audit(1761888934.803:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6143 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014758efc9 code=0x7ffc0000 [ 100.281113][ T30] audit: type=1326 audit(1761888934.803:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6143 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014758efc9 code=0x7ffc0000 [ 100.379977][ T30] audit: type=1326 audit(1761888934.833:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6143 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f014758efc9 code=0x7ffc0000 [ 100.477502][ T6148] netlink: 20 bytes leftover after parsing attributes in process `syz.3.60'. [ 100.809610][ T6149] loop3: detected capacity change from 0 to 128 [ 101.050455][ T30] audit: type=1326 audit(1761888934.833:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6143 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014758efc9 code=0x7ffc0000 [ 101.073702][ T30] audit: type=1326 audit(1761888934.833:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6143 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f014758efc9 code=0x7ffc0000 [ 101.097819][ T30] audit: type=1326 audit(1761888934.833:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6143 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014758efc9 code=0x7ffc0000 [ 101.122432][ T30] audit: type=1326 audit(1761888934.843:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6143 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f014758efc9 code=0x7ffc0000 [ 101.145395][ T6149] FAT-fs (loop3): Directory bread(block 414) failed [ 101.152198][ T6149] FAT-fs (loop3): Directory bread(block 415) failed [ 101.158800][ T6149] FAT-fs (loop3): Directory bread(block 416) failed [ 101.165459][ T6149] FAT-fs (loop3): Directory bread(block 417) failed [ 101.172109][ T6149] FAT-fs (loop3): Directory bread(block 418) failed [ 101.178712][ T6149] FAT-fs (loop3): Directory bread(block 419) failed [ 101.185355][ T6149] FAT-fs (loop3): Directory bread(block 420) failed [ 101.191984][ T6149] FAT-fs (loop3): Directory bread(block 421) failed [ 101.201788][ T30] audit: type=1326 audit(1761888934.863:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6143 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014758efc9 code=0x7ffc0000 [ 101.227447][ T30] audit: type=1326 audit(1761888934.893:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6143 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f014758efc9 code=0x7ffc0000 [ 101.263346][ T6145] FAT-fs (loop3): FAT read failed (blocknr 128) [ 101.315069][ T30] audit: type=1326 audit(1761888934.893:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6143 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014758efc9 code=0x7ffc0000 [ 101.999232][ T6171] loop4: detected capacity change from 0 to 128 [ 102.072271][ T6171] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 102.160640][ T6171] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 102.610477][ T6188] netlink: 76 bytes leftover after parsing attributes in process `syz.0.84'. [ 102.687491][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.82'. [ 102.990417][ T6195] hsr_slave_0: left promiscuous mode [ 103.023124][ T6195] hsr_slave_1: left promiscuous mode [ 103.133771][ T6206] loop5: detected capacity change from 0 to 512 [ 103.171805][ T6206] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.992148][ T6229] netlink: 'syz.2.103': attribute type 13 has an invalid length. [ 104.235120][ T6240] netlink: 'syz.4.108': attribute type 3 has an invalid length. [ 104.579345][ T6255] loop5: detected capacity change from 0 to 512 [ 104.632576][ T6255] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 104.661184][ T6255] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 104.723709][ T6255] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 104.796421][ T6255] EXT4-fs (loop5): 1 truncate cleaned up [ 104.842320][ T6255] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.000744][ T6255] loop5: detected capacity change from 512 to 0 [ 105.133457][ T6277] netlink: 'syz.3.121': attribute type 13 has an invalid length. [ 105.201898][ T5838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.237696][ T6277] bridge0: port 3(gretap0) entered disabled state [ 105.246551][ T5838] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 105.279071][ T5838] EXT4-fs (loop5): I/O error while writing superblock [ 105.429949][ T6283] netlink: 'syz.4.124': attribute type 3 has an invalid length. [ 105.468820][ T6277] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.476684][ T6277] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.886629][ T6291] netlink: 20 bytes leftover after parsing attributes in process `syz.1.125'. [ 106.021871][ T6292] loop1: detected capacity change from 0 to 128 [ 106.559522][ T6292] FAT-fs (loop1): Directory bread(block 414) failed [ 106.566229][ T6292] FAT-fs (loop1): Directory bread(block 415) failed [ 106.572951][ T6292] FAT-fs (loop1): Directory bread(block 416) failed [ 106.579548][ T6292] FAT-fs (loop1): Directory bread(block 417) failed [ 106.586230][ T6292] FAT-fs (loop1): Directory bread(block 418) failed [ 106.592888][ T6292] FAT-fs (loop1): Directory bread(block 419) failed [ 106.599491][ T6292] FAT-fs (loop1): Directory bread(block 420) failed [ 106.606246][ T6292] FAT-fs (loop1): Directory bread(block 421) failed [ 106.635859][ T6290] FAT-fs (loop1): FAT read failed (blocknr 128) [ 106.663444][ T6277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.720621][ T6277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.038548][ T6310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.131'. [ 107.159322][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 107.159342][ T30] audit: type=1326 audit(1761888941.873:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6313 comm="syz.4.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732af8efc9 code=0x7ffc0000 [ 107.229153][ T30] audit: type=1326 audit(1761888941.873:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6313 comm="syz.4.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732af8efc9 code=0x7ffc0000 [ 107.313479][ T30] audit: type=1326 audit(1761888941.873:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6313 comm="syz.4.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f732af8efc9 code=0x7ffc0000 [ 107.346639][ T30] audit: type=1326 audit(1761888941.913:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6313 comm="syz.4.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732af8efc9 code=0x7ffc0000 [ 107.452319][ T6317] netlink: 204 bytes leftover after parsing attributes in process `syz.2.133'. [ 107.454920][ T3514] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.490600][ T3514] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.574813][ T3514] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.651746][ T6323] netlink: 'syz.3.136': attribute type 10 has an invalid length. [ 107.746638][ T6328] netlink: 'syz.3.136': attribute type 10 has an invalid length. [ 107.800671][ T6328] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 107.821701][ T6331] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.140'. [ 107.841039][ T1085] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.865506][ T6323] bond0: (slave dummy0): Releasing backup interface [ 107.900964][ T6323] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 107.945771][ T6323] team0: Failed to send options change via netlink (err -105) [ 107.961867][ T6334] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.992103][ T6323] team0: Port device dummy0 added [ 108.117044][ T6338] loop4: detected capacity change from 0 to 512 [ 108.185942][ T6338] ------------[ cut here ]------------ [ 108.192089][ T6338] EA inode 11 i_nlink=2 [ 108.210868][ T6338] WARNING: CPU: 0 PID: 6338 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 108.225198][ T6338] Modules linked in: [ 108.229165][ T6338] CPU: 0 UID: 0 PID: 6338 Comm: syz.4.144 Not tainted syzkaller #0 PREEMPT(full) [ 108.238471][ T6338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 108.248575][ T6338] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 108.255222][ T6338] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 00 0e 80 8b 4c 89 e6 e8 c7 b5 f9 fe 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 13 a6 bc 08 44 89 f9 [ 108.275478][ T6338] RSP: 0018:ffffc9000badf100 EFLAGS: 00010246 [ 108.281974][ T6338] RAX: 273f5b3264521900 RBX: 0000000000000001 RCX: 0000000000080000 [ 108.289953][ T6338] RDX: ffffc9000d48e000 RSI: 0000000000008077 RDI: 0000000000008078 [ 108.298121][ T6338] RBP: ffffc9000badf1f8 R08: ffff8880b8924293 R09: 1ffff11017124852 [ 108.306144][ T6338] R10: dffffc0000000000 R11: ffffed1017124853 R12: 000000000000000b [ 108.314193][ T6338] R13: ffff888066a9eca0 R14: 1ffff1100cd53d82 R15: ffff888066a9ec10 [ 108.322222][ T6338] FS: 00007f73291f66c0(0000) GS:ffff88812613e000(0000) knlGS:0000000000000000 [ 108.331241][ T6338] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.337830][ T6338] CR2: 00005555841ad588 CR3: 0000000053fa5000 CR4: 0000000000350ef0 [ 108.345926][ T6338] Call Trace: [ 108.349213][ T6338] [ 108.352210][ T6338] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 108.358048][ T6338] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 108.364451][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 108.370096][ T6338] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 108.376108][ T6338] ext4_xattr_set_entry+0xabb/0x1e20 [ 108.382633][ T6338] ext4_xattr_ibody_set+0x254/0x6a0 [ 108.387856][ T6338] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 108.394769][ T6338] __ext4_expand_extra_isize+0x30d/0x400 [ 108.400803][ T6338] __ext4_mark_inode_dirty+0x46c/0x700 [ 108.406301][ T6338] ext4_evict_inode+0x80d/0xee0 [ 108.411578][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 108.417241][ T6338] ? __pfx_ext4_evict_inode+0x10/0x10 [ 108.423112][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 108.428773][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 108.434749][ T6338] ? do_raw_spin_unlock+0x122/0x240 [ 108.439975][ T6338] ? __pfx_ext4_evict_inode+0x10/0x10 [ 108.445696][ T6338] evict+0x504/0x9c0 [ 108.449618][ T6338] ? __pfx_evict+0x10/0x10 [ 108.454394][ T6338] ? do_raw_spin_unlock+0x122/0x240 [ 108.459614][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 108.465593][ T6338] ? _raw_spin_unlock+0x28/0x50 [ 108.470934][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 108.476578][ T6338] ? iput+0x946/0xc50 [ 108.481361][ T6338] ext4_orphan_cleanup+0xc20/0x1460 [ 108.486605][ T6338] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 108.493014][ T6338] ? ext4_register_li_request+0x640/0x720 [ 108.498754][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 108.504755][ T6338] ? errseq_check_and_advance+0x66/0x120 [ 108.510797][ T6338] ext4_fill_super+0x5920/0x61e0 [ 108.515779][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 108.521792][ T6338] ? __pfx_ext4_fill_super+0x10/0x10 [ 108.527407][ T6338] ? snprintf+0xda/0x120 [ 108.532001][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 108.537647][ T6338] ? set_blocksize+0x21e/0x500 [ 108.543202][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 108.548856][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 108.554928][ T6338] ? sb_set_blocksize+0x104/0x180 [ 108.559979][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 108.565996][ T6338] ? setup_bdev_super+0x4c1/0x5b0 [ 108.571418][ T6338] get_tree_bdev_flags+0x40e/0x4d0 [ 108.576557][ T6338] ? __pfx_ext4_fill_super+0x10/0x10 [ 108.582665][ T6338] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 108.588323][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 108.594705][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 108.600697][ T6338] vfs_get_tree+0x92/0x2b0 [ 108.605230][ T6338] do_new_mount+0x302/0xa10 [ 108.609751][ T6338] ? apparmor_capable+0x137/0x1b0 [ 108.615129][ T6338] ? __pfx_do_new_mount+0x10/0x10 [ 108.620199][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 108.626247][ T6338] ? ns_capable+0x8a/0xf0 [ 108.631004][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 108.636651][ T6338] ? kmem_cache_free+0x19b/0x690 [ 108.641990][ T6338] __se_sys_mount+0x313/0x410 [ 108.647033][ T6338] ? __pfx___se_sys_mount+0x10/0x10 [ 108.652603][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 108.658248][ T6338] ? __x64_sys_mount+0x20/0xc0 [ 108.663377][ T6338] do_syscall_64+0xfa/0xfa0 [ 108.667897][ T6338] ? lockdep_hardirqs_on+0x9c/0x150 [ 108.673454][ T6338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.679529][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 108.686448][ T6338] ? exc_page_fault+0xab/0x100 [ 108.691976][ T6338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.697865][ T6338] RIP: 0033:0x7f732af9076a [ 108.702693][ T6338] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.722752][ T6338] RSP: 002b:00007f73291f5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 108.731427][ T6338] RAX: ffffffffffffffda RBX: 00007f73291f5ef0 RCX: 00007f732af9076a [ 108.739389][ T6338] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f73291f5eb0 [ 108.747967][ T6338] RBP: 0000200000000180 R08: 00007f73291f5ef0 R09: 0000000001a08700 [ 108.756282][ T6338] R10: 0000000001a08700 R11: 0000000000000246 R12: 00002000000001c0 [ 108.764610][ T6338] R13: 00007f73291f5eb0 R14: 0000000000000470 R15: 0000200000000700 [ 108.773090][ T6338] [ 108.776102][ T6338] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 108.783362][ T6338] CPU: 0 UID: 0 PID: 6338 Comm: syz.4.144 Not tainted syzkaller #0 PREEMPT(full) [ 108.792539][ T6338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 108.802576][ T6338] Call Trace: [ 108.805838][ T6338] [ 108.808752][ T6338] dump_stack_lvl+0x99/0x250 [ 108.813342][ T6338] ? __asan_memcpy+0x40/0x70 [ 108.817948][ T6338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.823145][ T6338] ? __pfx__printk+0x10/0x10 [ 108.827745][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 108.833370][ T6338] vpanic+0x237/0x6d0 [ 108.837371][ T6338] ? __pfx_vpanic+0x10/0x10 [ 108.841872][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 108.847505][ T6338] panic+0xb9/0xc0 [ 108.851234][ T6338] ? __pfx_panic+0x10/0x10 [ 108.855669][ T6338] __warn+0x31b/0x4b0 [ 108.859652][ T6338] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 108.865629][ T6338] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 108.871607][ T6338] report_bug+0x2be/0x4f0 [ 108.875938][ T6338] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 108.881918][ T6338] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 108.887895][ T6338] ? ext4_xattr_inode_update_ref+0x51c/0x5b0 [ 108.893872][ T6338] handle_bug+0x84/0x160 [ 108.898125][ T6338] exc_invalid_op+0x1a/0x50 [ 108.902640][ T6338] asm_exc_invalid_op+0x1a/0x20 [ 108.907479][ T6338] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 108.914060][ T6338] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 00 0e 80 8b 4c 89 e6 e8 c7 b5 f9 fe 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 13 a6 bc 08 44 89 f9 [ 108.933654][ T6338] RSP: 0018:ffffc9000badf100 EFLAGS: 00010246 [ 108.939714][ T6338] RAX: 273f5b3264521900 RBX: 0000000000000001 RCX: 0000000000080000 [ 108.947672][ T6338] RDX: ffffc9000d48e000 RSI: 0000000000008077 RDI: 0000000000008078 [ 108.955630][ T6338] RBP: ffffc9000badf1f8 R08: ffff8880b8924293 R09: 1ffff11017124852 [ 108.963590][ T6338] R10: dffffc0000000000 R11: ffffed1017124853 R12: 000000000000000b [ 108.971550][ T6338] R13: ffff888066a9eca0 R14: 1ffff1100cd53d82 R15: ffff888066a9ec10 [ 108.979531][ T6338] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 108.985342][ T6338] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 108.991673][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 108.997303][ T6338] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 109.002765][ T6338] ext4_xattr_set_entry+0xabb/0x1e20 [ 109.008071][ T6338] ext4_xattr_ibody_set+0x254/0x6a0 [ 109.013360][ T6338] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 109.019285][ T6338] __ext4_expand_extra_isize+0x30d/0x400 [ 109.024923][ T6338] __ext4_mark_inode_dirty+0x46c/0x700 [ 109.030399][ T6338] ext4_evict_inode+0x80d/0xee0 [ 109.035251][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.040891][ T6338] ? __pfx_ext4_evict_inode+0x10/0x10 [ 109.046264][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.051900][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.057524][ T6338] ? do_raw_spin_unlock+0x122/0x240 [ 109.062730][ T6338] ? __pfx_ext4_evict_inode+0x10/0x10 [ 109.068109][ T6338] evict+0x504/0x9c0 [ 109.072016][ T6338] ? __pfx_evict+0x10/0x10 [ 109.076431][ T6338] ? do_raw_spin_unlock+0x122/0x240 [ 109.081634][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.087260][ T6338] ? _raw_spin_unlock+0x28/0x50 [ 109.092108][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.097737][ T6338] ? iput+0x946/0xc50 [ 109.101723][ T6338] ext4_orphan_cleanup+0xc20/0x1460 [ 109.106942][ T6338] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 109.112582][ T6338] ? ext4_register_li_request+0x640/0x720 [ 109.118298][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.123929][ T6338] ? errseq_check_and_advance+0x66/0x120 [ 109.129571][ T6338] ext4_fill_super+0x5920/0x61e0 [ 109.134520][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.140159][ T6338] ? __pfx_ext4_fill_super+0x10/0x10 [ 109.145438][ T6338] ? snprintf+0xda/0x120 [ 109.149676][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.155299][ T6338] ? set_blocksize+0x21e/0x500 [ 109.160065][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.165700][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.171326][ T6338] ? sb_set_blocksize+0x104/0x180 [ 109.176354][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.181979][ T6338] ? setup_bdev_super+0x4c1/0x5b0 [ 109.187009][ T6338] get_tree_bdev_flags+0x40e/0x4d0 [ 109.192121][ T6338] ? __pfx_ext4_fill_super+0x10/0x10 [ 109.197403][ T6338] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 109.203040][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.208671][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.214300][ T6338] vfs_get_tree+0x92/0x2b0 [ 109.218721][ T6338] do_new_mount+0x302/0xa10 [ 109.223227][ T6338] ? apparmor_capable+0x137/0x1b0 [ 109.228250][ T6338] ? __pfx_do_new_mount+0x10/0x10 [ 109.233280][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.238906][ T6338] ? ns_capable+0x8a/0xf0 [ 109.243228][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.248853][ T6338] ? kmem_cache_free+0x19b/0x690 [ 109.253803][ T6338] __se_sys_mount+0x313/0x410 [ 109.258475][ T6338] ? __pfx___se_sys_mount+0x10/0x10 [ 109.263667][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.269292][ T6338] ? __x64_sys_mount+0x20/0xc0 [ 109.274046][ T6338] do_syscall_64+0xfa/0xfa0 [ 109.278545][ T6338] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.283738][ T6338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.289790][ T6338] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.295421][ T6338] ? exc_page_fault+0xab/0x100 [ 109.300189][ T6338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.306073][ T6338] RIP: 0033:0x7f732af9076a [ 109.310479][ T6338] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.330074][ T6338] RSP: 002b:00007f73291f5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 109.338482][ T6338] RAX: ffffffffffffffda RBX: 00007f73291f5ef0 RCX: 00007f732af9076a [ 109.346451][ T6338] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f73291f5eb0 [ 109.354430][ T6338] RBP: 0000200000000180 R08: 00007f73291f5ef0 R09: 0000000001a08700 [ 109.362393][ T6338] R10: 0000000001a08700 R11: 0000000000000246 R12: 00002000000001c0 [ 109.370356][ T6338] R13: 00007f73291f5eb0 R14: 0000000000000470 R15: 0000200000000700 [ 109.378340][ T6338] [ 109.382415][ T6338] Kernel Offset: disabled [ 109.386760][ T6338] Rebooting in 86400 seconds..