last executing test programs: 1m11.137474616s ago: executing program 1 (id=486): syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000440)='kfree\x00', r0}, 0x18) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80800) socket$tipc(0x1e, 0x5, 0x0) epoll_create1(0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x1000080002, 0x100000000000088) socket$inet6(0xa, 0x802, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000c50900001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 1m10.745888782s ago: executing program 1 (id=503): syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000440)='kfree\x00', r0}, 0x18) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80800) socket$tipc(0x1e, 0x5, 0x0) epoll_create1(0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x1000080002, 0x100000000000088) socket$inet6(0xa, 0x802, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000c50900001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 1m10.638352723s ago: executing program 1 (id=494): r0 = creat(0x0, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r2, r1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x5) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40, 0x1b9}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) close(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000009000000050000000700000000000000", @ANYRES32, @ANYBLOB="00000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x68}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r7, &(0x7f00000002c0), &(0x7f0000000200)=""/35}, 0x20) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000003}, 0x80) 1m9.415339132s ago: executing program 1 (id=497): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7480000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb787ae2ae0542df983d703000008000000b7040000010000fc320085000000820000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000020000018110000", @ANYRES32=r3, @ANYRES16=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3e, 0x2f0, &(0x7f0000000280)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f00000006c0)={&(0x7f0000000440)=""/155, 0x9b, 0x0, &(0x7f00000005c0)=""/242, 0xf2}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0x24, &(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES64, @ANYRESHEX=r4, @ANYRESDEC=r5], &(0x7f0000000200)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x18, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, r4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xf, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800eb11060000000000008b00e600001b00a005", @ANYRES32=0x0, @ANYRESOCT], 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYRES16=r1, @ANYRES8, @ANYRES16=r0, @ANYBLOB="8c32e05185193965d1a77ad127812d152ac2625329f90b22877619ca6113cd8dce760395e19276f68ac56b032d3c72519b5e8c12682f261564e76ca3ca30e162c2b69caa01b85b7cc5ab09973263896109a95ae9655a0e9b22a51ecc3063086227af1bba646848c292b6453ea56101480d1c29c6db0c872ff6301fc7440811ddb34ed6f47cf464bc43a186930d536cee1c621813c460f2915c29f4963a3a608b0cdefdcc82f87c3109bb3d4ae39a4185af1b39f2f4f6f6048aece38f025408d6e5c0"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) fallocate(r6, 0x0, 0x0, 0x2c2) 1m8.21452937s ago: executing program 1 (id=498): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f14"], 0x208}, 0x0) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 1m7.5890638s ago: executing program 1 (id=500): r0 = getpgrp(0xffffffffffffffff) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000780)={0x11, 0x0, 0xfffffffa}) 1m7.58881214s ago: executing program 32 (id=500): r0 = getpgrp(0xffffffffffffffff) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000780)={0x11, 0x0, 0xfffffffa}) 11.306484566s ago: executing program 2 (id=701): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x101, [{0x0, 0x2, 0x3}]}, @enum]}}, &(0x7f0000000080)=""/236, 0x3e, 0xec, 0x1}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socketpair(0x21, 0x4, 0x2, &(0x7f00000000c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@delchain={0x2c, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0xffff, 0x3}, {0xffff, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x4dc, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x4b0, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x5, 0x7de, 0x74, 0xe, 0xdc, [{0x80000001, 0x2, 0x9, 0x1ff}, {0x3ee, 0x1, 0x4}, {0x9, 0xf12, 0x7f, 0xa}, {0x7ff, 0x2, 0x1, 0x8000}, {0x3, 0x1, 0x3, 0x3e}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_U32_POLICE={0x410, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x3ac}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffe78, 0x200, 0x9, 0x2, 0x3, 0x1, 0x4, 0xffffffff, 0x2, 0x6, 0x40, 0x101, 0x7a015ae3, 0x9, 0x6, 0x4, 0x1, 0x10000, 0x2, 0x4f, 0x37, 0x80, 0x400, 0x4, 0x2, 0x3b, 0x6, 0x3, 0xa, 0x9, 0x7, 0xf, 0x9bc2, 0xc, 0x16, 0x1, 0x0, 0x7, 0x7ff, 0x8, 0x10, 0x0, 0x6, 0x8d5, 0x3, 0x4, 0xda, 0x0, 0x8, 0x0, 0x8558, 0x6, 0x1, 0x800, 0x40, 0xfffffff8, 0x7, 0x7, 0xffff, 0x1, 0x401, 0x8, 0x80, 0x9, 0x9, 0x1, 0x0, 0x4, 0xffffffff, 0x1, 0x1, 0x101, 0x2, 0x1000, 0x8, 0x7f, 0xfac7, 0x4, 0x3, 0x7fff, 0x3, 0x7, 0x7, 0x8, 0x26d8, 0x7, 0x7, 0x10001, 0x9, 0x1ff, 0x8, 0xff, 0x7ccb, 0x4, 0x8, 0x3, 0xa3, 0x6, 0x1ff, 0x4, 0x221, 0x4, 0x3, 0xd78, 0x9, 0x5, 0xd, 0x7f, 0x1, 0x7f, 0x1ff, 0x3, 0x60000, 0xfffffffa, 0x2, 0x0, 0x8, 0x1086a314, 0xe7, 0x800, 0x6, 0x9, 0xcf, 0x82, 0x1, 0x1, 0x2, 0x9, 0x4, 0x3f975c00, 0x7, 0x86, 0x2, 0x0, 0x8, 0x6, 0x4, 0xa, 0x7, 0x26, 0x6, 0x6, 0x9, 0xc0, 0x7f, 0xff, 0x7, 0x6, 0x0, 0x43ca, 0x8, 0x7, 0x4, 0x4, 0x3, 0xb5, 0x5, 0x89, 0x1, 0x1, 0x10000, 0xe6, 0x2, 0x1000, 0x3, 0x4, 0xff, 0x8001, 0x6, 0x1, 0xffffffff, 0x7, 0x3, 0x6, 0x7f, 0x123b, 0x1f2, 0x31a8, 0x2, 0x2, 0x1a37, 0xfffffffa, 0xf, 0x7, 0x7ff, 0x2, 0x3, 0xe, 0xf2, 0x3, 0x3f5c3ab0, 0xa46, 0x5, 0x7, 0x80000000, 0x5, 0xc31, 0x1, 0x6, 0x29, 0x1, 0xb4, 0x1, 0x662b, 0x0, 0x8, 0x3, 0x0, 0x3, 0x4, 0x3, 0x4157, 0xd, 0x5, 0xf4, 0x6, 0xfffeffff, 0x24, 0x2, 0x400, 0x5, 0x0, 0x7fff, 0x9, 0x2, 0xb120, 0x5, 0x78, 0xffffff01, 0x1, 0x2c2b, 0x8, 0x6, 0x3ff, 0x7, 0x8, 0x8543, 0xa, 0x1, 0x6, 0x6, 0x3, 0xff, 0x80, 0x8, 0x818, 0xaf, 0x4, 0x7, 0x2, 0x2, 0x9, 0xaed6, 0x6, 0xadad, 0x800]}]}, @TCA_U32_INDEV={0x14, 0x8, 'ip6_vti0\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'xfrm0\x00'}, @TCA_U32_HASH={0x8, 0x2, 0xff}]}}]}, 0x4dc}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) 10.100061585s ago: executing program 2 (id=711): sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x44084) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.670584763s ago: executing program 4 (id=730): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) 4.082034397s ago: executing program 4 (id=735): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 3.679947274s ago: executing program 4 (id=737): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x405d, 0x18, 0x0, 0x80000000}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001800)=ANY=[@ANYBLOB="5000000002010300000800000000000002000000300001802c0001"], 0x50}, 0x1, 0x0, 0x0, 0x10040000}, 0x800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x78bd25, 0x8004, {0x0, 0x0, 0x0, r4, {0xf, 0x7}, {}, {0x2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xffffffffffffffd1, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x55}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 3.505744136s ago: executing program 0 (id=738): syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x4002, &(0x7f0000000140)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c004238994fceef7f633ea81416b1324d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c3704aed82da89741aad5205bb43ded29cfd65509ff9c85cbdb7337ef48b9412ff439da96bb3f5ac11273d94d3d75d"], 0x1, 0xa2f, &(0x7f0000001580)="$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") 3.320124769s ago: executing program 4 (id=740): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f00000003c0)=0x10000, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x60000480) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a3000000000080003400000000114000000"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) 3.165298201s ago: executing program 0 (id=741): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x4008000) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r4, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000000), 0x4) r5 = dup3(r3, r4, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) 2.729595608s ago: executing program 0 (id=743): pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0xa, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) write$tun(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd000411001400000000006eec00be00442f0100000000000000000000ffff7f000001ff020000000000000000000000000001"], 0x7a) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00) 2.662008959s ago: executing program 2 (id=744): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a010300000000000000000700"], 0x118}}, 0x0) 2.430197793s ago: executing program 3 (id=745): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f6", 0xae}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe752", 0x53}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb3", 0xb7}], 0x4}}], 0x1, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.360064984s ago: executing program 5 (id=746): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) dup3(r3, r2, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) 2.246098096s ago: executing program 2 (id=747): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0xfffffffe, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}, 0x1, 0x0, 0x0, 0xc010}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="01000000180800"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="000000000100000000000000be"], 0x80}}, 0x0) 2.171873357s ago: executing program 5 (id=748): unshare(0x20000400) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x5437, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) 2.034141239s ago: executing program 2 (id=749): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pause() 1.921832581s ago: executing program 5 (id=750): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x405d, 0x18, 0x0, 0x80000000}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001800)=ANY=[@ANYBLOB="5000000002010300000800000000000002000000300001802c0001"], 0x50}, 0x1, 0x0, 0x0, 0x10040000}, 0x800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x78bd25, 0x8004, {0x0, 0x0, 0x0, r4, {0xf, 0x7}, {}, {0x2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xffffffffffffffd1, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x55}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 1.669929964s ago: executing program 0 (id=751): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000004a0001002abd7000fddbdf250a0080004e"], 0x1c}}, 0x800) 1.593567596s ago: executing program 5 (id=752): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = gettid() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(0xffffffffffffffff) write$P9_RLERRORu(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000007000046009d40", @ANYBLOB="fe4cecb210bc091b10"], 0x53) r4 = syz_open_procfs(0x0, &(0x7f0000000640)='uid_map\x00') readv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) r4 = dup2(r3, r2) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000240), 0x4) sendmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x200000d1) sendmmsg$inet(r3, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)="f9d481b183c8f25196c4d85859a0e1b3a4da0c756cff8fe87ba4d4b9ddaa4d44b5fccb66806e407a5b849557f866a4571a9d4d2ef9a463c3e4859ab10dc3e6fbaaa3067217", 0x45}, {&(0x7f0000000980)="f64e2ede071efdd1c72786b2fe2d9cb6272c9eab7a815f2058971845d68915170f45b44661511f0b295f01deda46d10cf1647364e8a29d0963ebcea4b89176089519cd5c8d9ecf705b5218d1ff814233c7206d80afa2f652b29461f700a6071a1d8e98b380333e2c6073a25faeb332504459c4c4395d2d7ff35144c0d5df228e9b43524c0f61adb83b12a5220f8dc2e317256222c22319a0c7c131b806a7c901bd7b9d9db4ac8faabf431ce48755f6818bd241d02f2c45ce10a41780be9c3632e51cf3df5cdf4e92f953fa9760e239b256aa7542db53adb58bc1a29d099883ef3aa639b8cc260dd0fc770a3a9f465b1381e3", 0xf2}, {&(0x7f0000002600)="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", 0x4a6}], 0x3}}], 0x2, 0x1) 1.32567619s ago: executing program 0 (id=754): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2}, 0x1c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) 1.245594151s ago: executing program 3 (id=755): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe2e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0xc, 0x5, 0x0, 0x0, 0x0, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) 1.027973525s ago: executing program 2 (id=756): r0 = creat(0x0, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r2, r1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x5) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40, 0x1b9}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x2}, 0x18) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000009000000050000000700000000000000", @ANYRES32, @ANYBLOB="00000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x68}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r8, &(0x7f00000002c0), &(0x7f0000000200)=""/35}, 0x20) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000003}, 0x80) 1.027746614s ago: executing program 3 (id=757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002"], 0x118}}, 0x0) 749.928939ms ago: executing program 3 (id=758): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0xb, 0x0) 580.045951ms ago: executing program 4 (id=759): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x6, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x3ff) dup3(0xffffffffffffffff, r2, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) 471.914203ms ago: executing program 3 (id=760): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kvm_dirty_ring_push\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) munlockall() bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000003e000701fcffffff7edbdf25017c00000c000380"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="139776ff030370", 0x7}], 0x2) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x40800) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) r10 = bpf$PROG_LOAD(0x5, 0x0, 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x11, 0x148, 0x340, 0x0, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}, {0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x530) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0xc, 0xff, 0x9, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x40, 0x8, 0x3, 0x4}}) 350.723065ms ago: executing program 4 (id=761): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 333.163605ms ago: executing program 5 (id=762): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 118.424288ms ago: executing program 5 (id=763): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x714f, 0x0) 0s ago: executing program 3 (id=764): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x19ff, 0x0, &(0x7f0000000240), &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007f721185d1bd3a0ddc9b4f4fb93aedd0a03ab11a8cb57ca3b63a1566d7b8c329386274571eb19ffef06b6d1fff919327c75193a37bfd8eccb5961ba7d48b24796f3025"], 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000040000000400000007000000000100000fc8b8f2ad30c9a33714f1dab5638dce6acae51e9cdb997d2aabcf633641fadd63d8c9cbaff6417ecbf434755966b6d15af362ff00000000000000e54f398b5a5519c6774bc6e685f2a5aff4f5371dafe690a113b0bf6e2d6ade8d93d0574c6e2d20f20678a3b7edcbc80387edd863cf239d56d7f9e9cb4b99564e5e4dceaec98e2ce8352788ba1ff154e740986aa96395f59ec830c7e807ca7a27bd008156e2846050cdcd79abc23762cf", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="02000010011000"/27], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0xa7, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x9, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x3, 0x12) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) kernel console output (not intermixed with test programs): to HW filter on device bond0 [ 79.704717][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.718326][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.741583][ T4256] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.752114][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.780419][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.789558][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.826505][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.839835][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.856674][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.866412][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.873608][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.881811][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.896228][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.905123][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.912224][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.919960][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.929832][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.937557][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.945559][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.959911][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.982074][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.026222][ T4260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.041045][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.052154][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.061627][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.070346][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.078591][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.089490][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.099240][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.121467][ T4262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.140434][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.152001][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.160993][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.168193][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.176264][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.187541][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.196241][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.203400][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.211140][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.221122][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.278246][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.287610][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.297164][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.312036][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.323046][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.332201][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.341419][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.350796][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.366319][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.378446][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.390198][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.426524][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.450803][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.459342][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.469164][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.480082][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.490245][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.498918][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.507815][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.529770][ T4260] device veth0_vlan entered promiscuous mode [ 80.551944][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.568829][ T4251] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.585146][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.599042][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.610998][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.627358][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.638301][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.651436][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.665428][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.674664][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.682234][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.690977][ T4262] device veth0_vlan entered promiscuous mode [ 80.724811][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.736320][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.744743][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.754268][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.767027][ T4262] device veth1_vlan entered promiscuous mode [ 80.790644][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.810014][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.834218][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.874416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.896377][ T4260] device veth1_vlan entered promiscuous mode [ 80.988538][ T4262] device veth0_macvtap entered promiscuous mode [ 81.005592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.014779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.032661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.041320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.050381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.059315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.068888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.077367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.085612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.104152][ T4250] device veth0_vlan entered promiscuous mode [ 81.128913][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.139879][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.154737][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.166095][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.181518][ T4256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.210933][ T4262] device veth1_macvtap entered promiscuous mode [ 81.223771][ T4260] device veth0_macvtap entered promiscuous mode [ 81.247236][ T4250] device veth1_vlan entered promiscuous mode [ 81.280834][ T4260] device veth1_macvtap entered promiscuous mode [ 81.297004][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.325388][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.335999][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.346138][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.359910][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.370106][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.379442][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.403942][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.411312][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.420829][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.441326][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.452744][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.467265][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.478878][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.489542][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.501065][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.513988][ T4262] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.523134][ T4262] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.531899][ T4262] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.541006][ T4262] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.566301][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.575834][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.586146][ T4266] Bluetooth: hci0: command 0x040f tx timeout [ 81.588813][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.600769][ T4266] Bluetooth: hci3: command 0x040f tx timeout [ 81.608918][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.619532][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.628826][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.663314][ T4266] Bluetooth: hci4: command 0x040f tx timeout [ 81.669417][ T4266] Bluetooth: hci1: command 0x040f tx timeout [ 81.675651][ T4260] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.682515][ T4252] Bluetooth: hci2: command 0x040f tx timeout [ 81.699356][ T4260] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.708257][ T4260] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.717480][ T4260] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.739014][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.756866][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.770976][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.806141][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.823244][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.843048][ T4256] device veth0_vlan entered promiscuous mode [ 81.870690][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.895355][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.920801][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.943158][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.956712][ T4256] device veth1_vlan entered promiscuous mode [ 81.984091][ T4250] device veth0_macvtap entered promiscuous mode [ 82.105861][ T4250] device veth1_macvtap entered promiscuous mode [ 82.209854][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.227054][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.245720][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.263637][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.298562][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.321133][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.339837][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.345337][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.359423][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.371351][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.390091][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.401812][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.419059][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.440770][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.450102][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.459800][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.478428][ T4256] device veth0_macvtap entered promiscuous mode [ 82.492862][ T4335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.503565][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.509372][ T4335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.521526][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.537580][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.550962][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.568233][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.584792][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.600577][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.610565][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.631344][ T4256] device veth1_macvtap entered promiscuous mode [ 82.684701][ T4250] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.694788][ T4250] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.707336][ T4250] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.718011][ T4250] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.755072][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.771216][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.773288][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.798167][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.814006][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.823968][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.834944][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.845961][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.856572][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.867139][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.877807][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.889268][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.907009][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.915773][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.925189][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.935529][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.946818][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.978709][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.999321][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.010038][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.020768][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.033792][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.044380][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.055825][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.084310][ T4251] device veth0_vlan entered promiscuous mode [ 83.092005][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.153268][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.163616][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.172214][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.183554][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.204927][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.338263][ T4256] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.347527][ T4256] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.356627][ T4256] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.365711][ T4256] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.752590][ T4252] Bluetooth: hci3: command 0x0419 tx timeout [ 83.759074][ T4267] Bluetooth: hci2: command 0x0419 tx timeout [ 83.759496][ T4266] Bluetooth: hci0: command 0x0419 tx timeout [ 83.772494][ T4252] Bluetooth: hci1: command 0x0419 tx timeout [ 84.733298][ T4264] Bluetooth: hci4: command 0x0419 tx timeout [ 85.384074][ T4251] device veth1_vlan entered promiscuous mode [ 85.423267][ T4293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.431562][ T4293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.535368][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.564653][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.584596][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.635910][ T4251] device veth0_macvtap entered promiscuous mode [ 85.642168][ T27] audit: type=1326 audit(1751345010.243:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4383 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 85.673992][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.682056][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.689150][ T4251] device veth1_macvtap entered promiscuous mode [ 85.728999][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.729733][ T27] audit: type=1326 audit(1751345010.303:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4383 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 85.741094][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.770415][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.789253][ T27] audit: type=1326 audit(1751345010.313:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4383 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 85.813395][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.819321][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.830786][ T27] audit: type=1326 audit(1751345010.313:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4383 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 85.861709][ T27] audit: type=1326 audit(1751345010.313:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4383 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 85.892916][ T27] audit: type=1326 audit(1751345010.333:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4383 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 85.908176][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.927956][ T27] audit: type=1326 audit(1751345010.333:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4383 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 85.930303][ T4387] loop3: detected capacity change from 0 to 1024 [ 85.956732][ T27] audit: type=1326 audit(1751345010.333:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4383 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 85.979501][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.979516][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.002887][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.013174][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.028040][ T27] audit: type=1326 audit(1751345010.333:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4383 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 86.043305][ T4387] ======================================================= [ 86.043305][ T4387] WARNING: The mand mount option has been deprecated and [ 86.043305][ T4387] and is ignored by this kernel. Remove the mand [ 86.043305][ T4387] option from the mount to silence this warning. [ 86.043305][ T4387] ======================================================= [ 86.058400][ T27] audit: type=1326 audit(1751345010.333:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4383 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 86.087317][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.129747][ T4387] EXT4-fs: Ignoring removed oldalloc option [ 86.139059][ T4387] EXT4-fs: Ignoring removed orlov option [ 86.147534][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.158847][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.188628][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.197814][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.207522][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.221722][ T4387] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 86.252905][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.297474][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.367668][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.377696][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.402315][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.424976][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.435923][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.446177][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.457768][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.472227][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.494575][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 86.502601][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.526346][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.562565][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.570674][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.582516][ T4251] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.612550][ T4251] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.659857][ T4251] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.671367][ T4251] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.705104][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.784380][ T14] cfg80211: failed to load regulatory.db [ 86.851194][ T4400] loop3: detected capacity change from 0 to 512 [ 86.896342][ T4400] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 86.927575][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.943305][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.968975][ T4400] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 86.979618][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.060658][ T4335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.066648][ T4400] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 87.088826][ T4400] EXT4-fs (loop3): 1 truncate cleaned up [ 87.102428][ T4400] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 87.112681][ T4335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.122418][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.364253][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 87.752036][ T4420] loop3: detected capacity change from 0 to 8192 [ 88.210213][ T4413] loop2: detected capacity change from 0 to 256 [ 88.272231][ T4413] FAT-fs (loop2): bogus number of FAT sectors [ 88.291311][ T4413] FAT-fs (loop2): Can't find a valid FAT filesystem [ 89.280350][ T4456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'. [ 89.610380][ T4467] loop3: detected capacity change from 0 to 512 [ 89.720580][ T4467] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 89.838688][ T4467] EXT4-fs (loop3): mount failed [ 90.978884][ T4484] netlink: 'syz.2.38': attribute type 8 has an invalid length. [ 92.559840][ T4504] loop2: detected capacity change from 0 to 256 [ 93.005835][ T4516] loop1: detected capacity change from 0 to 512 [ 93.006744][ T4516] EXT4-fs: Ignoring removed nobh option [ 93.216657][ T4516] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.53: iget: bad i_size value: 38620345925642 [ 93.217999][ T4516] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.53: couldn't read orphan inode 15 (err -117) [ 93.218354][ T4516] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 93.223365][ T4521] netlink: 24 bytes leftover after parsing attributes in process `syz.3.51'. [ 93.397620][ T4527] Zero length message leads to an empty skb [ 93.575762][ T27] kauditd_printk_skb: 68 callbacks suppressed [ 93.575782][ T27] audit: type=1326 audit(1751345018.183:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4525 comm="syz.4.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe335f8e929 code=0x7ffc0000 [ 93.763698][ T4532] netlink: 256 bytes leftover after parsing attributes in process `syz.1.53'. [ 93.841094][ T27] audit: type=1326 audit(1751345018.223:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4525 comm="syz.4.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fe335f8e929 code=0x7ffc0000 [ 93.957471][ T4537] IPv6: Can't replace route, no match found [ 93.982487][ T27] audit: type=1326 audit(1751345018.233:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4525 comm="syz.4.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe335f8e929 code=0x7ffc0000 [ 94.079990][ T27] audit: type=1326 audit(1751345018.423:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4533 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 94.163523][ T27] audit: type=1326 audit(1751345018.483:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4533 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 94.238479][ T27] audit: type=1326 audit(1751345018.493:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4533 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 94.364435][ T27] audit: type=1326 audit(1751345018.493:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4533 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 94.501435][ T27] audit: type=1326 audit(1751345018.493:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4533 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 94.525406][ T4548] loop2: detected capacity change from 0 to 256 [ 94.606715][ T27] audit: type=1326 audit(1751345018.493:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4533 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 94.610936][ T4553] process 'syz.4.64' launched './file0' with NULL argv: empty string added [ 94.640412][ T4552] loop0: detected capacity change from 0 to 1024 [ 94.737476][ T27] audit: type=1326 audit(1751345018.493:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4533 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 94.784713][ T4552] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 95.169054][ T33] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm kworker/u4:2: bg 0: block 5: invalid block bitmap [ 95.257663][ T33] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1792 with error 28 [ 95.321606][ T33] EXT4-fs (loop1): This should not happen!! Data will be lost [ 95.321606][ T33] [ 95.331463][ T33] EXT4-fs (loop1): Total free blocks count 0 [ 95.337943][ T33] EXT4-fs (loop1): Free/Dirty block details [ 95.352216][ T33] EXT4-fs (loop1): free_blocks=0 [ 95.357349][ T33] EXT4-fs (loop1): dirty_blocks=1792 [ 95.363673][ T33] EXT4-fs (loop1): Block reservation details [ 95.369720][ T33] EXT4-fs (loop1): i_reserved_data_blocks=1792 [ 95.449302][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 95.473322][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 95.723036][ T4572] 9pnet_fd: Insufficient options for proto=fd [ 95.761731][ T4576] IPv6: Can't replace route, no match found [ 96.472041][ T4576] infiniband syz2: set active [ 96.483589][ T4576] infiniband syz2: added veth0_to_bond [ 96.510930][ T4588] loop1: detected capacity change from 0 to 256 [ 96.717891][ T4576] RDS/IB: syz2: added [ 96.727246][ T4576] smc: adding ib device syz2 with port count 1 [ 96.815960][ T4576] smc: ib device syz2 port 1 has pnetid [ 97.006736][ T4597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.77'. [ 97.162955][ T4599] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 97.377939][ T4597] syz.4.77 (4597) used greatest stack depth: 18176 bytes left [ 97.964458][ T4623] loop1: detected capacity change from 0 to 128 [ 98.611812][ T4635] loop3: detected capacity change from 0 to 1024 [ 98.725764][ T4635] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 98.869366][ T4642] device syzkaller1 entered promiscuous mode [ 98.962070][ T27] kauditd_printk_skb: 67 callbacks suppressed [ 98.962085][ T27] audit: type=1326 audit(1751345023.563:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4645 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ecf8e929 code=0x7ffc0000 [ 99.032941][ T27] audit: type=1326 audit(1751345023.593:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4645 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ecf8e929 code=0x7ffc0000 [ 99.045859][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 99.092215][ T27] audit: type=1326 audit(1751345023.603:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4645 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f24ecf8e929 code=0x7ffc0000 [ 99.142832][ T27] audit: type=1326 audit(1751345023.603:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4645 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ecf8e929 code=0x7ffc0000 [ 99.630596][ T4657] loop3: detected capacity change from 0 to 2048 [ 99.898088][ T4665] loop4: detected capacity change from 0 to 512 [ 101.074982][ T4665] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 101.126993][ T4665] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.350276][ T4685] loop1: detected capacity change from 0 to 512 [ 101.385576][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 101.413757][ T4685] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 101.492804][ T4685] EXT4-fs (loop1): 1 truncate cleaned up [ 101.498682][ T4685] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 101.553445][ T4695] netlink: 24 bytes leftover after parsing attributes in process `syz.4.115'. [ 101.773022][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 102.425356][ T4706] 9pnet_fd: Insufficient options for proto=fd [ 102.527899][ T4717] loop2: detected capacity change from 0 to 2048 [ 102.551768][ T4717] EXT4-fs: Ignoring removed bh option [ 102.633608][ T4717] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 102.703622][ T27] audit: type=1800 audit(1751345027.313:160): pid=4717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.124" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 102.777017][ T4716] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 102.841696][ T4724] loop4: detected capacity change from 0 to 128 [ 102.879674][ T4724] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 102.889676][ T4724] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 102.926477][ T4724] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.126: No space for directory leaf checksum. Please run e2fsck -D. [ 102.942402][ T4724] EXT4-fs error (device loop4): htree_dirblock_to_tree:1083: inode #2: comm syz.4.126: Directory block failed checksum [ 102.983021][ T4731] loop0: detected capacity change from 0 to 512 [ 102.999896][ T4731] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 103.123384][ T4731] EXT4-fs (loop0): 1 truncate cleaned up [ 103.129268][ T4731] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 103.158852][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 103.187291][ T27] audit: type=1800 audit(1751345027.793:161): pid=4731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.129" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 103.206595][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 103.486811][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 103.557157][ T4747] capability: warning: `syz.0.134' uses deprecated v2 capabilities in a way that may be insecure [ 104.470948][ T4778] loop0: detected capacity change from 0 to 2048 [ 104.529160][ T4778] EXT4-fs: Ignoring removed bh option [ 104.609771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 104.651301][ T4778] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 104.770119][ T27] audit: type=1800 audit(1751345029.363:162): pid=4778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.143" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 104.806583][ T4775] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 105.058841][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 105.304111][ T27] audit: type=1326 audit(1751345029.913:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4801 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e878e929 code=0x7ffc0000 [ 105.381559][ T27] audit: type=1326 audit(1751345029.933:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4801 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e878e929 code=0x7ffc0000 [ 105.484193][ T27] audit: type=1326 audit(1751345029.933:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4801 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f27e878e929 code=0x7ffc0000 [ 105.575377][ T27] audit: type=1326 audit(1751345029.933:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4801 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e878e929 code=0x7ffc0000 [ 105.668879][ T27] audit: type=1326 audit(1751345029.933:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4801 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e878e929 code=0x7ffc0000 [ 107.045837][ T4834] loop4: detected capacity change from 0 to 2048 [ 107.095032][ T4834] EXT4-fs: Ignoring removed bh option [ 107.191298][ T4839] syz.0.162[4839] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.191517][ T4839] syz.0.162[4839] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.228358][ T4834] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 107.248953][ T27] audit: type=1326 audit(1751345031.853:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.0.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 107.323755][ T4841] tipc: Started in network mode [ 107.349072][ T27] audit: type=1326 audit(1751345031.893:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.0.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 107.349568][ T4841] tipc: Node identity ea0c7efe18d3, cluster identity 4711 [ 107.413897][ T27] audit: type=1326 audit(1751345031.893:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.0.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 107.454629][ T4832] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 107.474124][ T27] audit: type=1326 audit(1751345031.893:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.0.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 107.494579][ T4841] tipc: Enabled bearer , priority 0 [ 107.521991][ T4848] tipc: Disabling bearer [ 107.749428][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 107.882016][ T4856] syz.0.168 uses obsolete (PF_INET,SOCK_PACKET) [ 109.313916][ T4877] netlink: 'syz.4.175': attribute type 10 has an invalid length. [ 109.416196][ T4877] team0: Port device dummy0 added [ 109.781760][ T4881] netlink: 'syz.4.175': attribute type 10 has an invalid length. [ 110.324172][ T4881] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 110.428143][ T4889] loop0: detected capacity change from 0 to 2048 [ 110.480182][ T4881] team0: Failed to send options change via netlink (err -105) [ 110.513301][ T4889] EXT4-fs: Ignoring removed bh option [ 110.546000][ T4881] team0: Port device dummy0 removed [ 110.564373][ T4881] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 110.578914][ T4889] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 110.620223][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 110.620242][ T27] audit: type=1800 audit(1751345035.213:174): pid=4889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.179" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 110.624846][ T4887] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 110.904492][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 110.947202][ T4900] netlink: 460 bytes leftover after parsing attributes in process `syz.3.183'. [ 111.472920][ T4914] loop2: detected capacity change from 0 to 128 [ 112.683487][ T4929] loop0: detected capacity change from 0 to 1024 [ 112.733506][ T4929] EXT4-fs: Ignoring removed orlov option [ 113.578287][ T4929] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 113.859288][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 114.010488][ T4955] 9pnet_fd: Insufficient options for proto=fd [ 114.444181][ T4966] netlink: 24 bytes leftover after parsing attributes in process `syz.0.204'. [ 116.073573][ T4996] loop2: detected capacity change from 0 to 128 [ 116.564901][ T5008] netlink: 24 bytes leftover after parsing attributes in process `syz.4.218'. [ 118.362066][ T5039] loop2: detected capacity change from 0 to 512 [ 118.468770][ T5039] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 118.592105][ T5039] EXT4-fs (loop2): orphan cleanup on readonly fs [ 118.657847][ T5048] loop0: detected capacity change from 0 to 1024 [ 118.689564][ T5039] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 118.722632][ T5039] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 119.448577][ T5039] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 119.461667][ T5039] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.229: bg 0: block 40: padding at end of block bitmap is not set [ 119.492799][ T5048] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 119.504996][ T5039] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 119.522455][ T5048] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.647914][ T5039] EXT4-fs (loop2): 1 truncate cleaned up [ 119.691302][ T5039] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 119.807614][ T5039] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 119.869973][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 120.031960][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 120.433242][ T5080] No such timeout policy "syz1" [ 121.730210][ T5090] netlink: 'syz.3.247': attribute type 4 has an invalid length. [ 121.918970][ T5098] netlink: 'syz.3.247': attribute type 4 has an invalid length. [ 122.414428][ T5120] netlink: 'syz.2.254': attribute type 1 has an invalid length. [ 122.542916][ T5120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.673317][ T5123] device gretap1 entered promiscuous mode [ 122.712972][ T5123] bond1: (slave gretap1): making interface the new active one [ 122.765172][ T5123] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 122.829813][ T5127] device macvlan2 entered promiscuous mode [ 122.840206][ T5131] mmap: syz.0.257 (5131) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 122.878860][ T5127] device bond1 entered promiscuous mode [ 122.909412][ T5127] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 122.956261][ T5127] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 122.998786][ T5127] device bond1 left promiscuous mode [ 123.062615][ T5137] loop1: detected capacity change from 0 to 1024 [ 123.090474][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 123.103300][ T5137] EXT4-fs: Ignoring removed bh option [ 123.195053][ T5137] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 123.279465][ T5137] EXT4-fs error (device loop1): ext4_check_all_de:666: inode #12: block 7: comm syz.1.259: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 123.369029][ T5137] EXT4-fs (loop1): Remounting filesystem read-only [ 123.451806][ T5143] syz.2.261[5143] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.451915][ T5143] syz.2.261[5143] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.485436][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 123.544230][ T5146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.262'. [ 123.677054][ T5151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.263'. [ 123.741443][ T5147] loop0: detected capacity change from 0 to 8192 [ 123.946856][ T5159] loop2: detected capacity change from 0 to 1024 [ 124.031846][ T5161] loop3: detected capacity change from 0 to 128 [ 124.051651][ T5161] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 124.090509][ T5159] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 124.225021][ T5161] tipc: Enabled bearer , priority 0 [ 124.275745][ T5161] tipc: Disabling bearer [ 124.474833][ T27] audit: type=1326 audit(1751345049.083:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5172 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe335f8e929 code=0x7ffc0000 [ 124.548359][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 124.582585][ T27] audit: type=1326 audit(1751345049.093:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5172 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe335f8e929 code=0x7ffc0000 [ 124.728020][ T27] audit: type=1326 audit(1751345049.093:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5172 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe335f8e929 code=0x7ffc0000 [ 124.817487][ T27] audit: type=1326 audit(1751345049.093:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5172 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe335f8e929 code=0x7ffc0000 [ 125.221606][ T27] audit: type=1326 audit(1751345049.093:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5172 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe335f8e929 code=0x7ffc0000 [ 125.858877][ T27] audit: type=1326 audit(1751345049.093:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5172 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe335f8e929 code=0x7ffc0000 [ 125.893777][ T27] audit: type=1326 audit(1751345049.093:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5172 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe335f8e929 code=0x7ffc0000 [ 125.943063][ T27] audit: type=1326 audit(1751345049.093:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5172 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe335f8e929 code=0x7ffc0000 [ 126.038971][ T27] audit: type=1326 audit(1751345049.113:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5172 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe335f8e929 code=0x7ffc0000 [ 126.088730][ T27] audit: type=1326 audit(1751345049.113:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5172 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe335f8e929 code=0x7ffc0000 [ 126.388544][ T5198] loop0: detected capacity change from 0 to 512 [ 126.498608][ T5198] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.281: Parent and EA inode have the same ino 15 [ 126.790344][ T5198] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.281: Parent and EA inode have the same ino 15 [ 126.825152][ T5198] EXT4-fs (loop0): 1 orphan inode deleted [ 126.844413][ T5198] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 126.890511][ T5204] loop2: detected capacity change from 0 to 8192 [ 127.113945][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 128.792985][ T5224] netlink: 36 bytes leftover after parsing attributes in process `syz.1.291'. [ 129.953623][ T5237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.294'. [ 129.964352][ T5237] netlink: 40 bytes leftover after parsing attributes in process `syz.4.294'. [ 130.138137][ T5237] netlink: 40 bytes leftover after parsing attributes in process `syz.4.294'. [ 130.153455][ T5241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'. [ 130.242650][ T5242] netlink: 16 bytes leftover after parsing attributes in process `syz.4.294'. [ 130.277225][ T5243] loop1: detected capacity change from 0 to 128 [ 130.442451][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 130.442470][ T27] audit: type=1107 audit(1751345055.043:188): pid=5240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='FÕ' [ 130.491474][ T27] audit: type=1800 audit(1751345055.083:189): pid=5243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.297" name="file1" dev="loop1" ino=1048603 res=0 errno=0 [ 130.711070][ T5248] syz.1.297: attempt to access beyond end of device [ 130.711070][ T5248] loop1: rw=0, sector=97, nr_sectors = 120 limit=128 [ 131.251119][ T4771] kworker/u4:16: attempt to access beyond end of device [ 131.251119][ T4771] loop1: rw=1, sector=217, nr_sectors = 824 limit=128 [ 131.608759][ T5264] netlink: 36 bytes leftover after parsing attributes in process `syz.3.303'. [ 131.864490][ T5270] No such timeout policy "syz0" [ 132.038996][ T5267] loop0: detected capacity change from 0 to 8192 [ 132.866247][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.884046][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.268883][ T5282] loop2: detected capacity change from 0 to 4096 [ 133.359901][ T5282] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 133.468705][ T5292] netlink: 872 bytes leftover after parsing attributes in process `syz.0.312'. [ 133.478171][ T27] audit: type=1800 audit(1751345058.083:190): pid=5282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.308" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 133.532991][ T27] audit: type=1800 audit(1751345058.093:191): pid=5282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.308" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 133.818613][ T27] audit: type=1326 audit(1751345058.423:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5295 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 133.928152][ T27] audit: type=1326 audit(1751345058.423:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5295 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 134.019345][ T5300] netlink: 36 bytes leftover after parsing attributes in process `syz.0.316'. [ 134.021187][ T27] audit: type=1326 audit(1751345058.423:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5295 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 134.112562][ T27] audit: type=1326 audit(1751345058.423:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5295 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 134.222793][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 134.296957][ T27] audit: type=1326 audit(1751345058.423:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5295 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 134.955746][ T5323] netlink: 36 bytes leftover after parsing attributes in process `syz.4.329'. [ 135.065906][ T5326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 135.097737][ T27] audit: type=1107 audit(1751345059.703:197): pid=5327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 135.201819][ T5332] loop0: detected capacity change from 0 to 128 [ 135.337300][ T5331] loop1: detected capacity change from 0 to 2048 [ 135.430420][ T5331] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 135.479028][ T5338] loop2: detected capacity change from 0 to 512 [ 135.506408][ T5338] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.533916][ T5338] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.332: corrupted in-inode xattr [ 135.566548][ T5338] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.332: couldn't read orphan inode 15 (err -117) [ 135.592853][ T5338] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 135.679094][ T4250] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 135.783064][ T4250] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 135.799282][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 135.887844][ T5343] loop3: detected capacity change from 0 to 1024 [ 135.897514][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 135.951594][ T5343] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 135.999134][ T5339] syz.0.327: attempt to access beyond end of device [ 135.999134][ T5339] loop0: rw=2049, sector=161, nr_sectors = 56 limit=128 [ 136.117257][ T4293] kworker/u4:5: attempt to access beyond end of device [ 136.117257][ T4293] loop0: rw=1, sector=217, nr_sectors = 608 limit=128 [ 136.167544][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 137.001866][ T5362] netlink: 36 bytes leftover after parsing attributes in process `syz.4.341'. [ 137.540324][ T5370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.343'. [ 137.584284][ T5370] IPVS: Error joining to the multicast group [ 138.743993][ T5387] ALSA: seq fatal error: cannot create timer (-19) [ 138.754644][ T5391] loop4: detected capacity change from 0 to 128 [ 139.256408][ T5402] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.305300][ T5407] netlink: 36 bytes leftover after parsing attributes in process `syz.3.355'. [ 139.451947][ T5402] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.590742][ T5411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.357'. [ 139.711541][ T5402] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.896955][ T5402] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.827269][ T5416] loop3: detected capacity change from 0 to 4096 [ 141.055812][ T5416] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 141.087066][ T5428] loop2: detected capacity change from 0 to 764 [ 141.260740][ T5402] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.277825][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 141.277841][ T27] audit: type=1800 audit(1751345065.883:200): pid=5416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.359" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 141.516646][ T27] audit: type=1800 audit(1751345065.923:201): pid=5416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.359" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 141.580480][ T5402] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.610937][ T5402] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.690666][ T5402] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.786367][ T5432] loop4: detected capacity change from 0 to 512 [ 142.033532][ T5432] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 142.044793][ T5432] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.099285][ T5440] loop1: detected capacity change from 0 to 512 [ 142.129518][ T5440] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.136608][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 142.154005][ T5440] ext4: Unknown parameter 'fsmagic' [ 142.165241][ T5432] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #2: comm syz.4.364: corrupted inode contents [ 142.249155][ T5440] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 142.349798][ T5432] EXT4-fs error (device loop4): ext4_dirty_inode:6119: inode #2: comm syz.4.364: mark_inode_dirty error [ 142.388540][ T5447] loop0: detected capacity change from 0 to 128 [ 142.428943][ T5432] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #2: comm syz.4.364: corrupted inode contents [ 142.561460][ T5444] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #2: comm syz.4.364: corrupted inode contents [ 142.638656][ T5444] EXT4-fs error (device loop4): ext4_dirty_inode:6119: inode #2: comm syz.4.364: mark_inode_dirty error [ 142.693788][ T5444] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #2: comm syz.4.364: corrupted inode contents [ 142.756701][ T5444] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.364: mark_inode_dirty error [ 142.810531][ T5444] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #2: comm syz.4.364: corrupted inode contents [ 142.844237][ T27] audit: type=1326 audit(1751345067.453:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5458 comm="syz.2.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ecf8e929 code=0x7ffc0000 [ 142.901735][ T5444] EXT4-fs error (device loop4): ext4_dirty_inode:6119: inode #2: comm syz.4.364: mark_inode_dirty error [ 142.968513][ T27] audit: type=1326 audit(1751345067.453:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5458 comm="syz.2.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ecf8e929 code=0x7ffc0000 [ 143.019541][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 143.076714][ T27] audit: type=1326 audit(1751345067.453:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5458 comm="syz.2.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f24ecf8e929 code=0x7ffc0000 [ 143.212377][ T27] audit: type=1326 audit(1751345067.453:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5458 comm="syz.2.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ecf8e929 code=0x7ffc0000 [ 143.309718][ T27] audit: type=1326 audit(1751345067.453:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5458 comm="syz.2.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ecf8e929 code=0x7ffc0000 [ 143.366968][ T27] audit: type=1326 audit(1751345067.453:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5458 comm="syz.2.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24ecf8e929 code=0x7ffc0000 [ 143.530118][ T27] audit: type=1326 audit(1751345067.483:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5458 comm="syz.2.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ecf8e929 code=0x7ffc0000 [ 143.632795][ T27] audit: type=1326 audit(1751345067.483:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5458 comm="syz.2.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ecf8e929 code=0x7ffc0000 [ 144.764541][ T5502] netlink: 9 bytes leftover after parsing attributes in process `syz.0.391'. [ 144.824548][ T5490] 9pnet_fd: Insufficient options for proto=fd [ 144.855205][ T5490] netlink: 52 bytes leftover after parsing attributes in process `syz.4.386'. [ 145.044831][ T5506] loop2: detected capacity change from 0 to 128 [ 145.551076][ T5519] netlink: 'syz.3.398': attribute type 10 has an invalid length. [ 145.617907][ T5519] netlink: 40 bytes leftover after parsing attributes in process `syz.3.398'. [ 145.676601][ T5519] device team0 entered promiscuous mode [ 145.682623][ T5519] device team_slave_0 entered promiscuous mode [ 145.693433][ T5519] device team_slave_1 entered promiscuous mode [ 145.708830][ T5519] bridge0: port 3(team0) entered blocking state [ 145.735430][ T5519] bridge0: port 3(team0) entered disabled state [ 145.805567][ T5519] bridge0: port 3(team0) entered blocking state [ 145.812455][ T5519] bridge0: port 3(team0) entered forwarding state [ 146.705800][ T5551] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.790111][ T5559] loop0: detected capacity change from 0 to 128 [ 146.831063][ T5564] netlink: 24 bytes leftover after parsing attributes in process `syz.1.415'. [ 147.012927][ T5551] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.059237][ T5566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.415'. [ 147.160336][ T5563] 9pnet_fd: Insufficient options for proto=fd [ 147.173251][ T5566] Cannot find add_set index 0 as target [ 147.174906][ T5551] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.203032][ T5563] netlink: 52 bytes leftover after parsing attributes in process `syz.2.413'. [ 147.276936][ T5566] device veth1_macvtap left promiscuous mode [ 147.299471][ T5574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'. [ 147.346470][ T5564] device veth1_macvtap entered promiscuous mode [ 147.470592][ T5551] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.643630][ T5551] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.675805][ T5551] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.700533][ T5551] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.743833][ T5551] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.871102][ T5585] loop4: detected capacity change from 0 to 128 [ 147.990657][ T5585] 9pnet_fd: Insufficient options for proto=fd [ 148.031600][ T27] kauditd_printk_skb: 31 callbacks suppressed [ 148.031615][ T27] audit: type=1800 audit(1751345072.633:241): pid=5585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.421" name="file2" dev="loop4" ino=1048612 res=0 errno=0 [ 148.045613][ T5585] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.136195][ T5585] FAT-fs (loop4): Filesystem has been set read-only [ 148.172396][ T5585] syz.4.421: attempt to access beyond end of device [ 148.172396][ T5585] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 148.204880][ T5589] loop2: detected capacity change from 0 to 2048 [ 148.236370][ T5585] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.265412][ T5585] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.303802][ T5584] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.313866][ T5584] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.321853][ T5584] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.332340][ T5585] syz.4.421: attempt to access beyond end of device [ 148.332340][ T5585] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 148.332381][ T5584] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.347216][ T5585] syz.4.421: attempt to access beyond end of device [ 148.347216][ T5585] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 148.368991][ T5585] syz.4.421: attempt to access beyond end of device [ 148.368991][ T5585] loop4: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 148.387222][ T5589] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 148.416199][ T5584] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.424296][ T5584] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.432190][ T5584] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.441652][ T5584] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.459851][ T5584] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.471432][ T5584] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.497676][ T5584] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.507274][ T5584] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.548773][ T5584] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.577486][ T5584] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.588301][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 148.600247][ T5584] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.651337][ T5584] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.695253][ T5584] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.732430][ T5584] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.757249][ T5584] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.794506][ T5584] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.822618][ T5584] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.848995][ T5584] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.890104][ T5584] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.902152][ T5584] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 149.146286][ T5611] loop2: detected capacity change from 0 to 128 [ 149.190395][ T5613] loop9: detected capacity change from 0 to 7 [ 149.226297][ T5613] Dev loop9: unable to read RDB block 7 [ 149.261915][ T5606] loop3: detected capacity change from 0 to 8192 [ 149.264571][ T5613] loop9: unable to read partition table [ 149.322085][ T5613] loop9: partition table beyond EOD, truncated [ 149.380839][ T5613] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 149.380839][ T5613] ) failed (rc=-5) [ 150.137937][ T27] audit: type=1326 audit(1751345074.743:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e878e929 code=0x7ffc0000 [ 150.210784][ T5623] 9pnet_fd: Insufficient options for proto=fd [ 150.234500][ T27] audit: type=1326 audit(1751345074.743:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27e878e929 code=0x7ffc0000 [ 150.289562][ T5623] netlink: 52 bytes leftover after parsing attributes in process `syz.4.432'. [ 150.321394][ T27] audit: type=1326 audit(1751345074.743:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e878e929 code=0x7ffc0000 [ 150.392205][ T27] audit: type=1326 audit(1751345074.743:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f27e878e929 code=0x7ffc0000 [ 150.452017][ T27] audit: type=1326 audit(1751345074.743:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e878e929 code=0x7ffc0000 [ 150.525783][ T27] audit: type=1326 audit(1751345074.763:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f27e878e929 code=0x7ffc0000 [ 150.610046][ T27] audit: type=1326 audit(1751345074.763:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e878e929 code=0x7ffc0000 [ 150.802951][ T5650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.828802][ T5650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.855632][ T5650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.860814][ T5653] netlink: 76 bytes leftover after parsing attributes in process `syz.0.444'. [ 150.887495][ T27] audit: type=1326 audit(1751345075.493:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 150.887526][ T5650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.946133][ T27] audit: type=1326 audit(1751345075.523:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 152.924396][ T5659] sched: RT throttling activated [ 153.388295][ T5666] loop4: detected capacity change from 0 to 512 [ 153.428722][ T5666] EXT4-fs: Ignoring removed i_version option [ 153.467177][ T5666] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 153.522987][ T5666] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002] [ 153.531119][ T5666] System zones: 1-12 [ 153.536316][ T5666] EXT4-fs (loop4): orphan cleanup on readonly fs [ 153.553279][ T5666] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.447: invalid indirect mapped block 12 (level 1) [ 153.642459][ T5666] EXT4-fs (loop4): Remounting filesystem read-only [ 153.649131][ T5666] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.447: invalid indirect mapped block 2 (level 2) [ 153.687541][ T5666] EXT4-fs (loop4): Remounting filesystem read-only [ 153.695888][ T5666] EXT4-fs (loop4): 1 truncate cleaned up [ 153.701618][ T5666] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 154.589403][ T5680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.452'. [ 154.638399][ T5678] loop0: detected capacity change from 0 to 128 [ 154.688797][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 155.309546][ T5699] netlink: 24 bytes leftover after parsing attributes in process `syz.4.458'. [ 155.389455][ T5699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.458'. [ 155.461180][ T5704] Cannot find add_set index 0 as target [ 155.476931][ T5705] loop2: detected capacity change from 0 to 2048 [ 155.493459][ T5704] device veth1_macvtap left promiscuous mode [ 155.554515][ T5699] device veth1_macvtap entered promiscuous mode [ 155.583929][ T5699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.458'. [ 155.629379][ T5705] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 155.885051][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 157.190882][ T5730] loop1: detected capacity change from 0 to 128 [ 157.223437][ T5730] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 157.260024][ T5730] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 157.408306][ T5740] loop3: detected capacity change from 0 to 512 [ 157.469147][ T5742] netlink: 24 bytes leftover after parsing attributes in process `syz.0.473'. [ 157.473212][ T4335] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 157.533328][ T5740] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 157.565144][ T5744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.473'. [ 157.592593][ T5740] EXT4-fs (loop3): 1 truncate cleaned up [ 157.611075][ T5740] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 157.648221][ T5746] loop1: detected capacity change from 0 to 128 [ 157.703648][ T5740] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.472: Logical block already allocated [ 157.769802][ T5740] EXT4-fs (loop3): Remounting filesystem read-only [ 157.921305][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 159.991489][ T5798] loop2: detected capacity change from 0 to 512 [ 160.013278][ T5798] EXT4-fs: Ignoring removed nobh option [ 160.026236][ T5798] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.493: iget: bad i_size value: 38620345925642 [ 160.039777][ T5798] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.493: couldn't read orphan inode 15 (err -117) [ 160.052756][ T5798] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 160.187798][ T5798] netlink: 256 bytes leftover after parsing attributes in process `syz.2.493'. [ 160.200699][ T5798] IPv6: Can't replace route, no match found [ 160.286413][ T4335] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm kworker/u4:6: bg 0: block 5: invalid block bitmap [ 160.301858][ T4335] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 856 with error 28 [ 160.327887][ T4335] EXT4-fs (loop2): This should not happen!! Data will be lost [ 160.327887][ T4335] [ 160.345490][ T4335] EXT4-fs (loop2): Total free blocks count 0 [ 160.351739][ T4335] EXT4-fs (loop2): Free/Dirty block details [ 160.360757][ T4335] EXT4-fs (loop2): free_blocks=0 [ 160.366300][ T4335] EXT4-fs (loop2): dirty_blocks=856 [ 160.371569][ T4335] EXT4-fs (loop2): Block reservation details [ 160.378241][ T4335] EXT4-fs (loop2): i_reserved_data_blocks=856 [ 160.404250][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 161.418457][ T5812] loop1: detected capacity change from 0 to 128 [ 161.671587][ T4250] FAT-fs (loop1): error, invalid access to FAT (entry 0x05000006) [ 161.683363][ T4250] FAT-fs (loop1): Filesystem has been set read-only [ 162.641472][ T4784] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.018445][ T5819] loop4: detected capacity change from 0 to 512 [ 163.195312][ T4784] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.232492][ T5819] __quota_error: 5 callbacks suppressed [ 163.232510][ T5819] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 163.314320][ T4252] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 163.324197][ T4252] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 163.332841][ T4252] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 163.342499][ T4252] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 163.350299][ T4252] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 163.352496][ T5819] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 163.378303][ T4252] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 163.394059][ T4784] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.443130][ T5828] loop2: detected capacity change from 0 to 1024 [ 163.508087][ T5819] EXT4-fs (loop4): mount failed [ 163.546914][ T4784] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.550580][ T5828] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 163.780076][ T5828] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.507: Allocating blocks 497-513 which overlap fs metadata [ 163.881820][ T5828] EXT4-fs (loop2): pa ffff888074fd82a0: logic 131104, phys. 177, len 21 [ 163.890834][ T5828] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 163.909852][ T27] audit: type=1800 audit(1751345088.513:256): pid=5838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.507" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 164.925362][ T5834] 9pnet_fd: Insufficient options for proto=fd [ 164.937597][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 164.958749][ T5834] netlink: 52 bytes leftover after parsing attributes in process `syz.3.506'. [ 165.422507][ T4252] Bluetooth: hci0: command 0x0409 tx timeout [ 165.617662][ T5858] loop4: detected capacity change from 0 to 128 [ 166.115001][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 166.555977][ T5887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.519'. [ 166.569174][ T5887] netlink: 40 bytes leftover after parsing attributes in process `syz.0.519'. [ 166.581129][ T5887] netlink: 40 bytes leftover after parsing attributes in process `syz.0.519'. [ 166.794624][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.802934][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.832857][ T5825] device bridge_slave_0 entered promiscuous mode [ 166.927551][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.956730][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.981142][ T5825] device bridge_slave_1 entered promiscuous mode [ 167.077829][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.126045][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.398370][ T5825] team0: Port device team_slave_0 added [ 167.435755][ T5825] team0: Port device team_slave_1 added [ 167.502396][ T4252] Bluetooth: hci0: command 0x041b tx timeout [ 167.644173][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.702159][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.779940][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.812377][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.824057][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.871924][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.983310][ T4784] device hsr_slave_0 left promiscuous mode [ 168.006805][ T5912] 9pnet_fd: Insufficient options for proto=fd [ 168.013679][ T4784] device hsr_slave_1 left promiscuous mode [ 168.021210][ T4784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.040902][ T4784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.050346][ T5912] netlink: 52 bytes leftover after parsing attributes in process `syz.0.524'. [ 168.061051][ T4784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.076943][ T4784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.097544][ T4784] device bridge_slave_1 left promiscuous mode [ 168.108790][ T4784] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.149868][ T4784] device bridge_slave_0 left promiscuous mode [ 168.164587][ T4784] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.271618][ T4784] device veth1_macvtap left promiscuous mode [ 168.289807][ T4784] device veth0_macvtap left promiscuous mode [ 168.319827][ T4784] device veth1_vlan left promiscuous mode [ 168.337323][ T4784] device veth0_vlan left promiscuous mode [ 169.187122][ T5934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.530'. [ 169.233770][ T5934] netlink: 40 bytes leftover after parsing attributes in process `syz.4.530'. [ 169.252765][ T5934] netlink: 40 bytes leftover after parsing attributes in process `syz.4.530'. [ 169.584402][ T4252] Bluetooth: hci0: command 0x040f tx timeout [ 169.636555][ T4784] team0 (unregistering): Port device team_slave_1 removed [ 169.684033][ T4784] team0 (unregistering): Port device team_slave_0 removed [ 169.729501][ T4784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.777362][ T4784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.274380][ T4784] bond0 (unregistering): Released all slaves [ 170.426304][ T5825] device hsr_slave_0 entered promiscuous mode [ 170.435195][ T5825] device hsr_slave_1 entered promiscuous mode [ 170.442044][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.461951][ T5825] Cannot create hsr debugfs directory [ 171.663442][ T4252] Bluetooth: hci0: command 0x0419 tx timeout [ 171.927482][ T5963] 9pnet_fd: Insufficient options for proto=fd [ 171.963947][ T5963] loop3: detected capacity change from 0 to 512 [ 172.021920][ T5963] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 172.056994][ T5963] EXT4-fs (loop3): orphan cleanup on readonly fs [ 172.068993][ T5963] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 172.082331][ T5963] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 172.095206][ T5825] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 172.098181][ T5963] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 172.134855][ T5963] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.538: bg 0: block 40: padding at end of block bitmap is not set [ 172.150885][ T5963] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 172.173430][ T5963] EXT4-fs (loop3): 1 truncate cleaned up [ 172.179172][ T5963] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 172.196360][ T5825] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 172.254276][ T5825] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 172.273281][ T5963] EXT4-fs (loop3): unmounting filesystem. [ 172.286749][ T5825] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 172.628724][ T5979] loop2: detected capacity change from 0 to 128 [ 172.632827][ T5981] netlink: 76 bytes leftover after parsing attributes in process `syz.4.541'. [ 172.744215][ T5984] loop3: detected capacity change from 0 to 2048 [ 172.763172][ T5984] EXT4-fs: Ignoring removed bh option [ 172.785218][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.865694][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.878727][ T5984] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 172.908252][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.940569][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.950851][ T5984] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 172.951622][ T27] audit: type=1800 audit(1751345097.553:257): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.542" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 172.977560][ T5984] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 173.032489][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.047840][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.053909][ T5984] EXT4-fs (loop3): This should not happen!! Data will be lost [ 173.053909][ T5984] [ 173.382745][ T4764] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.390004][ T4764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.882455][ T5984] EXT4-fs (loop3): Total free blocks count 0 [ 173.891513][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.920999][ T5995] EXT4-fs (loop3): shut down requested (2) [ 173.936640][ T5984] EXT4-fs (loop3): Free/Dirty block details [ 173.947483][ T5984] EXT4-fs (loop3): free_blocks=2415919104 [ 173.953480][ T5984] EXT4-fs (loop3): dirty_blocks=16 [ 173.970070][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.978421][ T5984] EXT4-fs (loop3): Block reservation details [ 174.004265][ T4764] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.011505][ T4764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.020336][ T5984] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 174.136272][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.151119][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.191044][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.210639][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.252449][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.290363][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.340007][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.371727][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.417642][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.436408][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.492734][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.521385][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.547553][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.568554][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.137864][ T6026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.550'. [ 175.277907][ T27] audit: type=1326 audit(1751345099.883:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe335f8e929 code=0x7ffc0000 [ 175.304290][ T6026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.550'. [ 175.361850][ T27] audit: type=1326 audit(1751345099.913:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe335f8e929 code=0x7ffc0000 [ 175.462322][ T27] audit: type=1326 audit(1751345099.913:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fe335f8e929 code=0x7ffc0000 [ 175.512046][ T27] audit: type=1326 audit(1751345099.913:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe335f8e929 code=0x7ffc0000 [ 175.579460][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 175.589450][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 175.617979][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.639192][ T27] audit: type=1326 audit(1751345099.913:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe335f8e929 code=0x7ffc0000 [ 177.279730][ T6060] loop2: detected capacity change from 0 to 2048 [ 177.350702][ T6060] EXT4-fs: Ignoring removed bh option [ 177.378458][ T6062] device syzkaller0 entered promiscuous mode [ 177.590127][ T6060] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 177.613273][ T27] audit: type=1800 audit(1751345102.223:263): pid=6060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.556" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 177.662510][ T6060] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 178.463803][ T6060] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 178.523893][ T6060] EXT4-fs (loop2): This should not happen!! Data will be lost [ 178.523893][ T6060] [ 178.569655][ T6060] EXT4-fs (loop2): Total free blocks count 0 [ 178.576401][ T6060] EXT4-fs (loop2): Free/Dirty block details [ 178.602569][ T6060] EXT4-fs (loop2): free_blocks=2415919104 [ 178.625478][ T6060] EXT4-fs (loop2): dirty_blocks=16 [ 178.630776][ T6060] EXT4-fs (loop2): Block reservation details [ 178.648538][ T6060] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 178.695237][ T6060] EXT4-fs (loop2): shut down requested (2) [ 181.278047][ T6107] netlink: 24 bytes leftover after parsing attributes in process `syz.3.564'. [ 181.343568][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 181.376147][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.476368][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.564'. [ 181.650321][ T6115] netlink: 'syz.2.566': attribute type 10 has an invalid length. [ 181.735352][ T6115] team0: Port device dummy0 added [ 181.751698][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 181.783214][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 181.805352][ T6118] netlink: 'syz.2.566': attribute type 10 has an invalid length. [ 181.825331][ T6118] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 181.962678][ T6118] team0: Failed to send options change via netlink (err -105) [ 182.156584][ T6118] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 182.478920][ T6118] team0: Port device dummy0 removed [ 182.723542][ T6118] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 182.747676][ T5825] device veth0_vlan entered promiscuous mode [ 182.781452][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.793124][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.830214][ T6131] 9pnet_virtio: no channels available for device  [ 182.901767][ T5825] device veth1_vlan entered promiscuous mode [ 183.015941][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 183.076505][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 183.128661][ T5825] device veth0_macvtap entered promiscuous mode [ 183.219659][ T6137] device syzkaller0 entered promiscuous mode [ 183.247208][ T5825] device veth1_macvtap entered promiscuous mode [ 183.627403][ T6156] loop0: detected capacity change from 0 to 2048 [ 183.657378][ T6156] EXT4-fs: Ignoring removed bh option [ 183.751226][ T6156] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 183.851778][ T27] audit: type=1800 audit(1751345108.453:264): pid=6156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.576" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 183.873435][ T6156] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 183.902370][ T6156] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 183.907967][ T6154] 9pnet_fd: Insufficient options for proto=fd [ 183.934826][ T6156] EXT4-fs (loop0): This should not happen!! Data will be lost [ 183.934826][ T6156] [ 183.957154][ T6154] netlink: 52 bytes leftover after parsing attributes in process `syz.2.575'. [ 183.975427][ T6156] EXT4-fs (loop0): Total free blocks count 0 [ 183.991784][ T6156] EXT4-fs (loop0): Free/Dirty block details [ 184.001920][ T6156] EXT4-fs (loop0): free_blocks=2415919104 [ 184.022186][ T6156] EXT4-fs (loop0): dirty_blocks=16 [ 184.037794][ T6156] EXT4-fs (loop0): Block reservation details [ 184.046315][ T6156] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 184.119340][ T6156] EXT4-fs (loop0): shut down requested (2) [ 184.340811][ T6170] netlink: 20 bytes leftover after parsing attributes in process `syz.0.578'. [ 184.350006][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.578'. [ 185.470602][ T6181] 9pnet_virtio: no channels available for device  [ 186.823061][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 186.831514][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 186.845867][ T6176] netlink: 'syz.0.580': attribute type 10 has an invalid length. [ 186.931102][ T6176] team0: Port device dummy0 added [ 186.948783][ T6178] netlink: 'syz.0.580': attribute type 10 has an invalid length. [ 187.014147][ T6178] team0: Port device dummy0 removed [ 187.029817][ T6178] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 187.145764][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.192262][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.225477][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.264329][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.292462][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.312274][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.325126][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.353670][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 187.391115][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 187.427385][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.463731][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.519176][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.586214][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.602505][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.609391][ T6199] loop2: detected capacity change from 0 to 2048 [ 187.622381][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.636990][ T6199] EXT4-fs: Ignoring removed bh option [ 187.673611][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.735506][ T6199] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 187.745159][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 187.778652][ T27] audit: type=1800 audit(1751345112.383:265): pid=6199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.588" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 187.804817][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 187.815786][ T6199] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 187.866669][ T5825] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.867700][ T6199] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 187.903501][ T5825] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.915270][ T6199] EXT4-fs (loop2): This should not happen!! Data will be lost [ 187.915270][ T6199] [ 187.936743][ T5825] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.936803][ T6199] EXT4-fs (loop2): Total free blocks count 0 [ 187.952472][ T6199] EXT4-fs (loop2): Free/Dirty block details [ 187.958429][ T6199] EXT4-fs (loop2): free_blocks=2415919104 [ 187.965479][ T6199] EXT4-fs (loop2): dirty_blocks=16 [ 187.967076][ T5825] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.970645][ T6199] EXT4-fs (loop2): Block reservation details [ 187.970662][ T6199] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 187.972843][ T6212] EXT4-fs (loop2): shut down requested (2) [ 188.320332][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.589'. [ 188.324168][ T4777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.365331][ T4777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.371123][ T6214] netlink: 40 bytes leftover after parsing attributes in process `syz.2.589'. [ 188.558877][ T4769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.639624][ T4769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.701097][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 188.859934][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 188.874512][ T6214] netlink: 40 bytes leftover after parsing attributes in process `syz.2.589'. [ 189.865531][ T6239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.594'. [ 190.231964][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.594'. [ 190.573282][ T6260] netlink: 32 bytes leftover after parsing attributes in process `syz.3.597'. [ 190.835749][ T6267] loop3: detected capacity change from 0 to 2048 [ 190.860741][ T6267] EXT4-fs: Ignoring removed bh option [ 190.928157][ T6267] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 190.977297][ T27] audit: type=1800 audit(1751345115.583:266): pid=6267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.599" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 191.003465][ T6267] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 191.102739][ T6267] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 191.150084][ T6267] EXT4-fs (loop3): This should not happen!! Data will be lost [ 191.150084][ T6267] [ 191.233646][ T6267] EXT4-fs (loop3): Total free blocks count 0 [ 191.239728][ T6267] EXT4-fs (loop3): Free/Dirty block details [ 191.269584][ T6283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.603'. [ 191.275953][ T6267] EXT4-fs (loop3): free_blocks=2415919104 [ 191.290812][ T6283] netlink: 40 bytes leftover after parsing attributes in process `syz.2.603'. [ 191.308877][ T6267] EXT4-fs (loop3): dirty_blocks=16 [ 191.310311][ T6283] netlink: 40 bytes leftover after parsing attributes in process `syz.2.603'. [ 191.326066][ T6267] EXT4-fs (loop3): Block reservation details [ 191.352074][ T6267] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 191.518321][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 192.590816][ T6298] tipc: Started in network mode [ 192.621922][ T6298] tipc: Node identity 7e98131d369d, cluster identity 4711 [ 192.713645][ T6298] tipc: Enabled bearer , priority 0 [ 192.763351][ T6294] tipc: Disabling bearer [ 193.660923][ T27] audit: type=1326 audit(1751345118.263:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.0.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 193.760060][ T27] audit: type=1326 audit(1751345118.313:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.0.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 193.858292][ T27] audit: type=1326 audit(1751345118.313:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.0.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 193.989067][ T27] audit: type=1326 audit(1751345118.313:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.0.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 194.079726][ T27] audit: type=1326 audit(1751345118.323:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.0.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 194.098304][ T6325] loop2: detected capacity change from 0 to 2048 [ 194.115070][ T6329] netlink: 12 bytes leftover after parsing attributes in process `syz.5.616'. [ 194.142515][ T6329] netlink: 40 bytes leftover after parsing attributes in process `syz.5.616'. [ 194.151997][ T27] audit: type=1326 audit(1751345118.323:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 194.167301][ T6325] EXT4-fs: Ignoring removed bh option [ 194.193313][ T6329] netlink: 40 bytes leftover after parsing attributes in process `syz.5.616'. [ 194.251377][ T6325] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 194.283891][ T27] audit: type=1326 audit(1751345118.323:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 194.310759][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.323199][ T27] audit: type=1326 audit(1751345118.323:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 194.345741][ T27] audit: type=1326 audit(1751345118.323:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 194.430549][ T6325] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 194.559269][ T6325] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 194.990319][ T6325] EXT4-fs (loop2): This should not happen!! Data will be lost [ 194.990319][ T6325] [ 195.289090][ T6325] EXT4-fs (loop2): Total free blocks count 0 [ 195.338363][ T6325] EXT4-fs (loop2): Free/Dirty block details [ 195.376933][ T6325] EXT4-fs (loop2): free_blocks=2415919104 [ 195.437506][ T6325] EXT4-fs (loop2): dirty_blocks=16 [ 195.480748][ T6325] EXT4-fs (loop2): Block reservation details [ 195.487004][ T6325] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 195.580306][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 197.099788][ T6360] netlink: 24 bytes leftover after parsing attributes in process `syz.2.620'. [ 197.294085][ T6362] tipc: Started in network mode [ 197.299195][ T6362] tipc: Node identity 52b800f3c35b, cluster identity 4711 [ 197.319728][ T6362] tipc: Enabled bearer , priority 0 [ 197.354239][ T6370] loop3: detected capacity change from 0 to 1024 [ 197.411027][ T6367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.620'. [ 197.439103][ T6370] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 197.469883][ T6370] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.588649][ T6357] tipc: Disabling bearer [ 197.590777][ T6370] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: comm syz.3.624: lblock 0 mapped to illegal pblock 0 (length 5) [ 197.649602][ T6370] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 197.713342][ T6370] EXT4-fs (loop3): This should not happen!! Data will be lost [ 197.713342][ T6370] [ 197.806794][ T6370] EXT4-fs (loop3): unmounting filesystem. [ 198.005841][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 198.005855][ T27] audit: type=1326 audit(1751345122.613:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ecf8e929 code=0x7ffc0000 [ 198.091550][ T6387] loop3: detected capacity change from 0 to 2048 [ 198.138589][ T27] audit: type=1326 audit(1751345122.653:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ecf8e929 code=0x7ffc0000 [ 198.183492][ T6387] EXT4-fs: Ignoring removed bh option [ 198.246020][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.5.631'. [ 198.257488][ T6387] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 198.274333][ T27] audit: type=1326 audit(1751345122.653:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f24ecf8e929 code=0x7ffc0000 [ 198.376139][ T6391] netlink: 40 bytes leftover after parsing attributes in process `syz.5.631'. [ 198.391035][ T6387] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 198.399468][ T6391] netlink: 40 bytes leftover after parsing attributes in process `syz.5.631'. [ 198.447109][ T27] audit: type=1326 audit(1751345122.653:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ecf8e929 code=0x7ffc0000 [ 198.499773][ T6387] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 198.522855][ T27] audit: type=1326 audit(1751345122.653:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ecf8e929 code=0x7ffc0000 [ 198.550711][ T27] audit: type=1800 audit(1751345122.993:288): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.630" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 198.602277][ T6387] EXT4-fs (loop3): This should not happen!! Data will be lost [ 198.602277][ T6387] [ 198.612080][ T6387] EXT4-fs (loop3): Total free blocks count 0 [ 198.662324][ T6387] EXT4-fs (loop3): Free/Dirty block details [ 198.703110][ T6387] EXT4-fs (loop3): free_blocks=2415919104 [ 198.708934][ T6387] EXT4-fs (loop3): dirty_blocks=16 [ 198.762486][ T6387] EXT4-fs (loop3): Block reservation details [ 198.768563][ T6387] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 198.803571][ T6387] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 198.961692][ T6398] 9pnet_fd: Insufficient options for proto=fd [ 199.973778][ T6398] netlink: 52 bytes leftover after parsing attributes in process `syz.2.632'. [ 200.184011][ T6430] tipc: Started in network mode [ 200.202447][ T6430] tipc: Node identity 86955b3e78c4, cluster identity 4711 [ 200.223819][ T6430] tipc: Enabled bearer , priority 0 [ 201.068759][ T6428] tipc: Disabling bearer [ 201.425326][ T6441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.640'. [ 201.474272][ T6445] loop3: detected capacity change from 0 to 256 [ 201.499837][ T6446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.640'. [ 201.509204][ T4252] Bluetooth: hci3: command 0x0406 tx timeout [ 201.515499][ T4252] Bluetooth: hci4: command 0x0406 tx timeout [ 201.521619][ T4252] Bluetooth: hci1: command 0x0406 tx timeout [ 201.532291][ T4264] Bluetooth: hci2: command 0x0406 tx timeout [ 201.593381][ T6448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.643'. [ 201.602718][ T6448] netlink: 40 bytes leftover after parsing attributes in process `syz.0.643'. [ 201.614579][ T6448] netlink: 40 bytes leftover after parsing attributes in process `syz.0.643'. [ 201.627877][ T27] audit: type=1804 audit(1751345126.233:289): pid=6445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.642" name="/newroot/142/file1/file0" dev="loop3" ino=1048631 res=1 errno=0 [ 202.201483][ T6461] loop4: detected capacity change from 0 to 2048 [ 202.269315][ T6461] EXT4-fs: Ignoring removed bh option [ 202.314664][ T6461] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 202.362835][ T27] audit: type=1800 audit(1751345126.973:290): pid=6461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.646" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 202.364177][ T6461] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 202.474790][ T6472] tipc: Enabled bearer , priority 0 [ 202.485985][ T6470] loop3: detected capacity change from 0 to 128 [ 202.578717][ T6461] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 202.644301][ T6472] device syzkaller0 entered promiscuous mode [ 202.647679][ T6461] EXT4-fs (loop4): This should not happen!! Data will be lost [ 202.647679][ T6461] [ 202.661166][ T6472] tipc: Resetting bearer [ 202.697971][ T6471] tipc: Resetting bearer [ 202.747028][ T6461] EXT4-fs (loop4): Total free blocks count 0 [ 202.767294][ T6461] EXT4-fs (loop4): Free/Dirty block details [ 202.787073][ T6461] EXT4-fs (loop4): free_blocks=2415919104 [ 202.812303][ T6461] EXT4-fs (loop4): dirty_blocks=16 [ 202.822430][ T6461] EXT4-fs (loop4): Block reservation details [ 202.848999][ T6461] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 202.867347][ T6461] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 203.127747][ T6481] 9pnet_fd: Insufficient options for proto=fd [ 203.164843][ T6481] netlink: 52 bytes leftover after parsing attributes in process `syz.5.650'. [ 203.553699][ T7] tipc: Node number set to 1208292125 [ 203.813995][ T6493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.654'. [ 203.823328][ T6493] netlink: 40 bytes leftover after parsing attributes in process `syz.3.654'. [ 203.833316][ T6493] netlink: 40 bytes leftover after parsing attributes in process `syz.3.654'. [ 204.076564][ T6501] xt_hashlimit: size too large, truncated to 1048576 [ 204.091342][ T6501] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 204.332829][ T6509] loop4: detected capacity change from 0 to 512 [ 204.409632][ T6509] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 204.419661][ T6509] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.519124][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 204.625994][ T27] audit: type=1326 audit(1751345129.233:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe335f8e929 code=0x7ffc0000 [ 204.672985][ T27] audit: type=1326 audit(1751345129.233:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe335f8e929 code=0x7ffc0000 [ 204.726312][ T27] audit: type=1326 audit(1751345129.233:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe335f8e929 code=0x7ffc0000 [ 204.780573][ T27] audit: type=1326 audit(1751345129.233:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe335f8e929 code=0x7ffc0000 [ 204.811950][ T27] audit: type=1326 audit(1751345129.233:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe335f8e929 code=0x7ffc0000 [ 204.844363][ T27] audit: type=1326 audit(1751345129.233:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe335f8e929 code=0x7ffc0000 [ 204.878896][ T27] audit: type=1326 audit(1751345129.233:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe335f8e929 code=0x7ffc0000 [ 204.911002][ T27] audit: type=1326 audit(1751345129.233:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe335f8e929 code=0x7ffc0000 [ 204.943225][ T27] audit: type=1326 audit(1751345129.233:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe335f8e929 code=0x7ffc0000 [ 204.977586][ T27] audit: type=1326 audit(1751345129.233:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe335f8e929 code=0x7ffc0000 [ 206.421479][ T6471] tipc: Disabling bearer [ 206.431936][ T6495] netlink: 24 bytes leftover after parsing attributes in process `syz.5.655'. [ 206.457865][ T6502] netlink: 12 bytes leftover after parsing attributes in process `syz.5.655'. [ 206.631860][ T6532] loop0: detected capacity change from 0 to 2048 [ 206.645433][ T6532] EXT4-fs: Ignoring removed bh option [ 206.661751][ T6502] bond0: (slave bond_slave_1): Releasing backup interface [ 206.704081][ T6532] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 206.729560][ T6532] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 206.746470][ T6532] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 206.762905][ T6532] EXT4-fs (loop0): This should not happen!! Data will be lost [ 206.762905][ T6532] [ 206.773388][ T6532] EXT4-fs (loop0): Total free blocks count 0 [ 206.779452][ T6532] EXT4-fs (loop0): Free/Dirty block details [ 206.792939][ T6532] EXT4-fs (loop0): free_blocks=2415919104 [ 206.800100][ T6532] EXT4-fs (loop0): dirty_blocks=16 [ 206.806039][ T6532] EXT4-fs (loop0): Block reservation details [ 206.812455][ T6532] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 206.826125][ T6532] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 207.158945][ T6540] loop0: detected capacity change from 0 to 128 [ 208.414515][ T6548] 9pnet_fd: Insufficient options for proto=fd [ 208.510857][ T6548] netlink: 52 bytes leftover after parsing attributes in process `syz.5.665'. [ 208.905010][ T6577] tipc: Enabled bearer , priority 0 [ 208.918256][ T6569] loop3: detected capacity change from 0 to 8192 [ 209.162399][ T6577] device syzkaller0 entered promiscuous mode [ 209.181539][ T6577] tipc: Resetting bearer [ 209.229493][ T6576] tipc: Resetting bearer [ 209.374722][ T6586] loop5: detected capacity change from 0 to 2048 [ 209.453322][ T6586] EXT4-fs: Ignoring removed bh option [ 209.575906][ T3623] Dev loop9: unable to read RDB block 7 [ 209.595076][ T3623] loop9: unable to read partition table [ 209.618972][ T6593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.675'. [ 209.629306][ T3623] loop9: partition table beyond EOD, truncated [ 210.023010][ T6593] netlink: 40 bytes leftover after parsing attributes in process `syz.0.675'. [ 210.360638][ T6593] netlink: 40 bytes leftover after parsing attributes in process `syz.0.675'. [ 210.365040][ T6586] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 210.439016][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 210.439033][ T27] audit: type=1800 audit(1751345135.043:310): pid=6586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.674" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 210.440113][ T6586] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 210.615213][ T6586] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 210.678021][ T6586] EXT4-fs (loop5): This should not happen!! Data will be lost [ 210.678021][ T6586] [ 210.721312][ T6586] EXT4-fs (loop5): Total free blocks count 0 [ 210.755922][ T6586] EXT4-fs (loop5): Free/Dirty block details [ 210.771868][ T6586] EXT4-fs (loop5): free_blocks=2415919104 [ 210.779354][ T6586] EXT4-fs (loop5): dirty_blocks=16 [ 210.793590][ T6586] EXT4-fs (loop5): Block reservation details [ 210.810451][ T6586] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 210.823649][ T6586] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 213.047555][ T6576] tipc: Disabling bearer [ 213.171443][ T6619] netlink: 'syz.3.681': attribute type 10 has an invalid length. [ 213.186651][ T6619] device lo entered promiscuous mode [ 213.195896][ T6619] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 213.348880][ T6625] netlink: 'syz.2.682': attribute type 27 has an invalid length. [ 214.342774][ T6625] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.351480][ T6625] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.878121][ T6625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.915148][ T6625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.251480][ T6625] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.260770][ T6625] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.270101][ T6625] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.285426][ T6625] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.367337][ T6625] device gretap1 left promiscuous mode [ 215.420116][ T6632] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 215.429333][ T6632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.438388][ T6632] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.459265][ T6632] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.496819][ T6643] netlink: 24 bytes leftover after parsing attributes in process `syz.5.685'. [ 215.540572][ T6652] netlink: 12 bytes leftover after parsing attributes in process `syz.5.685'. [ 218.003733][ T4241] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 218.587412][ T4241] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 218.620734][ T6699] loop5: detected capacity change from 0 to 1764 [ 218.648343][ T4241] usb 3-1: can't read configurations, error -61 [ 218.697493][ T6702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.694'. [ 218.722425][ T6702] netlink: 40 bytes leftover after parsing attributes in process `syz.3.694'. [ 218.794987][ T6702] netlink: 40 bytes leftover after parsing attributes in process `syz.3.694'. [ 218.876574][ T4241] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 219.130948][ T6712] netlink: 3 bytes leftover after parsing attributes in process `syz.5.697'. [ 219.206474][ T6712] device batadv1 entered promiscuous mode [ 219.498593][ T6722] netlink: 24 bytes leftover after parsing attributes in process `syz.2.701'. [ 219.606956][ T6724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.702'. [ 219.725854][ T6734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.701'. [ 220.247955][ T6735] 9pnet_fd: Insufficient options for proto=fd [ 220.338349][ T6735] netlink: 52 bytes leftover after parsing attributes in process `syz.3.704'. [ 220.677806][ T6760] xt_hashlimit: size too large, truncated to 1048576 [ 223.646523][ T6802] __nla_validate_parse: 4 callbacks suppressed [ 223.646543][ T6802] netlink: 24 bytes leftover after parsing attributes in process `syz.0.718'. [ 223.832710][ T6808] Cannot find add_set index 0 as target [ 223.911009][ T6812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.720'. [ 224.137199][ T6817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.722'. [ 224.157401][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.723'. [ 224.167906][ T6817] netlink: 40 bytes leftover after parsing attributes in process `syz.3.722'. [ 224.203680][ T6817] netlink: 40 bytes leftover after parsing attributes in process `syz.3.722'. [ 224.462832][ T6829] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.725'. [ 224.494264][ T6825] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.725'. [ 224.552300][ T6830] loop4: detected capacity change from 0 to 2048 [ 224.647174][ T6830] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 225.792903][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 226.035125][ T6849] loop3: detected capacity change from 0 to 256 [ 226.095646][ T6849] FAT-fs (loop3): bogus number of FAT sectors [ 226.130834][ T6849] FAT-fs (loop3): Can't find a valid FAT filesystem [ 226.172785][ T6855] netlink: 128 bytes leftover after parsing attributes in process `syz.0.732'. [ 226.384758][ T6858] loop5: detected capacity change from 0 to 512 [ 226.421719][ T6858] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 226.506032][ T6858] EXT4-fs (loop5): 1 truncate cleaned up [ 226.531001][ T6864] netlink: 24 bytes leftover after parsing attributes in process `syz.0.734'. [ 226.532151][ T6858] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 227.277978][ T5825] EXT4-fs (loop5): unmounting filesystem. [ 227.311784][ T6889] loop0: detected capacity change from 0 to 1764 [ 228.079468][ T6903] loop3: detected capacity change from 0 to 512 [ 228.127500][ T6903] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 228.151186][ T6903] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 228.361102][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 228.709277][ T27] audit: type=1326 audit(1751345153.313:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ecf8e929 code=0x7ffc0000 [ 228.748389][ T27] audit: type=1326 audit(1751345153.313:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ecf8e929 code=0x7ffc0000 [ 228.775981][ T27] audit: type=1326 audit(1751345153.343:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f24ecf8e929 code=0x7ffc0000 [ 228.777238][ T6922] __nla_validate_parse: 6 callbacks suppressed [ 228.777258][ T6922] netlink: 12 bytes leftover after parsing attributes in process `syz.5.750'. [ 228.847026][ T6922] netlink: 40 bytes leftover after parsing attributes in process `syz.5.750'. [ 228.883419][ T6922] netlink: 40 bytes leftover after parsing attributes in process `syz.5.750'. [ 229.390221][ T6928] 9pnet_fd: Insufficient options for proto=fd [ 229.419370][ T6928] netlink: 52 bytes leftover after parsing attributes in process `syz.5.752'. [ 229.507346][ T6937] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 229.726282][ T6941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.757'. [ 230.350847][ T6948] xt_hashlimit: max too large, truncated to 1048576 [ 255.750470][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.187822][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 336.532171][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 336.539167][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6934/1:b..l P4762/1:b..l [ 336.548671][ C0] (detected by 0, t=10502 jiffies, g=28329, q=1067 ncpus=2) [ 336.556065][ C0] task:kworker/u4:10 state:R running task stack:25352 pid:4762 ppid:2 flags:0x00004000 [ 336.567945][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 336.575800][ C0] Call Trace: [ 336.579087][ C0] [ 336.582026][ C0] __schedule+0x10e9/0x40d0 [ 336.586557][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 336.592482][ C0] ? mark_lock+0x94/0x320 [ 336.596844][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 336.602856][ C0] ? preempt_schedule+0xa7/0xb0 [ 336.607719][ C0] ? batadv_iv_ogm_schedule+0xaaf/0xe90 [ 336.613276][ C0] preempt_schedule_common+0x82/0xd0 [ 336.618571][ C0] preempt_schedule+0xa7/0xb0 [ 336.623272][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 336.628921][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 336.634921][ C0] ? lock_chain_count+0x20/0x20 [ 336.639784][ C0] preempt_schedule_thunk+0x16/0x18 [ 336.645006][ C0] __local_bh_enable_ip+0x13b/0x1b0 [ 336.650237][ C0] ? _local_bh_enable+0xa0/0xa0 [ 336.655107][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 336.660318][ C0] ? batadv_iv_ogm_schedule+0xaaf/0xe90 [ 336.665878][ C0] batadv_iv_ogm_schedule+0xaaf/0xe90 [ 336.671260][ C0] ? batadv_iv_ogm_schedule+0x826/0xe90 [ 336.676926][ C0] ? batadv_iv_ogm_schedule+0x3ef/0xe90 [ 336.682493][ C0] ? batadv_iv_send_outstanding_bat_ogm_packet+0x840/0x840 [ 336.689710][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x72d/0x840 [ 336.696755][ C0] ? process_one_work+0x7a1/0x1160 [ 336.701874][ C0] process_one_work+0x898/0x1160 [ 336.706832][ C0] ? worker_detach_from_pool+0x240/0x240 [ 336.712475][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 336.717512][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 336.722897][ C0] ? kthread_data+0x4b/0xc0 [ 336.727413][ C0] worker_thread+0xaa2/0x1250 [ 336.732117][ C0] kthread+0x29d/0x330 [ 336.736214][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 336.741246][ C0] ? kthread_blkcg+0xd0/0xd0 [ 336.745852][ C0] ret_from_fork+0x1f/0x30 [ 336.750285][ C0] [ 336.753319][ C0] task:syz.0.754 state:R running task stack:26176 pid:6934 ppid:4260 flags:0x00004004 [ 336.764100][ C0] Call Trace: [ 336.767379][ C0] [ 336.770318][ C0] __schedule+0x10e9/0x40d0 [ 336.774850][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 336.780752][ C0] ? lock_chain_count+0x20/0x20 [ 336.785615][ C0] ? preempt_schedule_irq+0xa6/0x150 [ 336.790911][ C0] preempt_schedule_irq+0xb1/0x150 [ 336.796031][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 336.801764][ C0] ? rcu_is_watching+0x11/0xa0 [ 336.806543][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 336.812361][ C0] irqentry_exit+0x63/0x70 [ 336.816783][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 336.822767][ C0] RIP: 0010:page_ext_get+0x133/0x2a0 [ 336.828069][ C0] Code: a1 96 e8 f0 e4 f5 ff 48 8b 05 19 35 c5 14 48 85 c0 74 42 4c 89 f1 48 c1 e9 16 4c 8d 3c c8 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 <74> 08 4c 89 ff e8 c3 e4 f5 ff 4d 8b 3f 4d 85 ff 74 20 4d 89 f5 49 [ 336.847704][ C0] RSP: 0018:ffffc90002ff77b8 EFLAGS: 00000246 [ 336.853784][ C0] RAX: 1ffff11047ffde00 RBX: ffffffff81dc6d4e RCX: 0000000000000000 [ 336.861761][ C0] RDX: 0000000000000002 RSI: 0000000000050a5e RDI: 00000003ffffffff [ 336.869739][ C0] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff2117249 [ 336.877815][ C0] R10: fffffbfff2117249 R11: 1ffffffff2117248 R12: dffffc0000000000 [ 336.885806][ C0] R13: 0000000000000000 R14: 0000000000050a5e R15: ffff88823ffef000 [ 336.893792][ C0] ? page_ext_get+0x1e/0x2a0 [ 336.898404][ C0] ? page_ext_get+0xe5/0x2a0 [ 336.903006][ C0] __page_table_check_zero+0x134/0x4b0 [ 336.908479][ C0] free_unref_page_prepare+0x8c4/0x9a0 [ 336.913959][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 336.919174][ C0] free_unref_page+0x2e/0x3f0 [ 336.923869][ C0] __vunmap+0x856/0xa00 [ 336.928044][ C0] ? __kmem_cache_free+0xb6/0x1f0 [ 336.933081][ C0] free_pg_vec+0x9e/0x120 [ 336.937426][ C0] packet_set_ring+0x1a00/0x2400 [ 336.942396][ C0] ? packet_mmap+0x4d0/0x4d0 [ 336.946991][ C0] ? __lock_acquire+0x7c50/0x7c50 [ 336.952028][ C0] ? __local_bh_enable_ip+0x12a/0x1b0 [ 336.957428][ C0] ? __might_fault+0xa6/0x120 [ 336.962122][ C0] ? __might_fault+0xc2/0x120 [ 336.966823][ C0] ? __might_fault+0xa6/0x120 [ 336.971517][ C0] packet_setsockopt+0xcd9/0x1140 [ 336.976551][ C0] ? packet_ioctl+0x240/0x240 [ 336.981231][ C0] ? __fget_files+0x28/0x4d0 [ 336.985843][ C0] ? aa_sk_perm+0x7e5/0x920 [ 336.990359][ C0] ? aa_af_perm+0x2b0/0x2b0 [ 336.994874][ C0] ? __fget_files+0x44a/0x4d0 [ 336.999569][ C0] ? aa_sock_opt_perm+0x74/0x100 [ 337.004516][ C0] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 337.010071][ C0] ? security_socket_setsockopt+0x7a/0xa0 [ 337.015801][ C0] ? packet_ioctl+0x240/0x240 [ 337.020485][ C0] __sys_setsockopt+0x3d6/0x660 [ 337.025358][ C0] ? __ia32_sys_recv+0xb0/0xb0 [ 337.030137][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 337.036135][ C0] ? lock_chain_count+0x20/0x20 [ 337.041000][ C0] __x64_sys_setsockopt+0xb1/0xc0 [ 337.046042][ C0] do_syscall_64+0x4c/0xa0 [ 337.050472][ C0] ? clear_bhb_loop+0x60/0xb0 [ 337.055154][ C0] ? clear_bhb_loop+0x60/0xb0 [ 337.059843][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 337.065753][ C0] RIP: 0033:0x7f111058e929 [ 337.070179][ C0] RSP: 002b:00007f11114bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 337.078597][ C0] RAX: ffffffffffffffda RBX: 00007f11107b5fa0 RCX: 00007f111058e929 [ 337.086577][ C0] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 [ 337.094552][ C0] RBP: 00007f1110610b39 R08: 000000000000001c R09: 0000000000000000 [ 337.102527][ C0] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 337.110503][ C0] R13: 0000000000000000 R14: 00007f11107b5fa0 R15: 00007ffe749267e8 [ 337.118496][ C0] [ 337.121523][ C0] rcu: rcu_preempt kthread starved for 9813 jiffies! g28329 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 337.132641][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 337.142614][ C0] rcu: RCU grace-period kthread stack dump: [ 337.148525][ C0] task:rcu_preempt state:R running task stack:26912 pid:16 ppid:2 flags:0x00004000 [ 337.159305][ C0] Call Trace: [ 337.162593][ C0] [ 337.165530][ C0] __schedule+0x10e9/0x40d0 [ 337.170055][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 337.175967][ C0] schedule+0xb9/0x180 [ 337.180045][ C0] schedule_timeout+0x15c/0x280 [ 337.184906][ C0] ? console_conditional_schedule+0x40/0x40 [ 337.190812][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 337.196718][ C0] ? update_process_times+0x1b0/0x1b0 [ 337.202108][ C0] ? prepare_to_swait_event+0x335/0x350 [ 337.207678][ C0] rcu_gp_fqs_loop+0x2f2/0x1310 [ 337.212545][ C0] ? rcu_gp_kthread+0x380/0x380 [ 337.217401][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 337.223564][ C0] ? rcu_gp_init+0x14b0/0x14b0 [ 337.228331][ C0] ? rcu_gp_cleanup+0xb4c/0xca0 [ 337.233193][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 337.238403][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 337.243608][ C0] rcu_gp_kthread+0x95/0x380 [ 337.248208][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 337.253326][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 337.259235][ C0] ? __kthread_parkme+0x162/0x1c0 [ 337.264277][ C0] kthread+0x29d/0x330 [ 337.268361][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 337.273482][ C0] ? kthread_blkcg+0xd0/0xd0 [ 337.278085][ C0] ret_from_fork+0x1f/0x30 [ 337.282520][ C0] [ 337.285540][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 337.291876][ C0] Sending NMI from CPU 0 to CPUs 1: [ 337.297103][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xb/0x10