last executing test programs: 46.756795115s ago: executing program 4 (id=263): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000040)=0x1) 46.464517119s ago: executing program 4 (id=269): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) open(&(0x7f0000000280)='.\x00', 0x0, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 46.296884796s ago: executing program 4 (id=270): openat$pidfd(0xffffffffffffff9c, 0x0, 0x58900, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xb6e1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}}}, 0x108) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) pread64(0xffffffffffffffff, &(0x7f00000013c0)=""/208, 0x31, 0x401) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x2, 0x0) r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000580)='$\x00\x19y\x01\xff\xb4\x9e\x95oQE\xc9\x1f|\bZ\xf44\x7f)\x03c\x9a\x85\x01V\xb8p+\x84\xfb\xe6?\x88\xe9\x98Y\x0e\xd5P\xa2\xcc\x01*\xcd%v!\x82\xf1\xaaB\x04-\x88\xeb-q8\x03\xadO\xa0F\xc5Z\x0f\xee\x94\xfcy\xa5\xa4L\xa1\xd7g\x8c\a#o\f\xdb\xcd_\x87\x1aM\xa6\xa8\xa2\xef\xb0\x9e\xa9d\xee\xacl\x9c\xcb\x03\x17\xbbG\x15\xba3\xa5r<]T\xc6R\x04\x00\x00\x00\x88\xc4\xd3\x02\xd1 @\r\x1cc\xe4|\x13H\xc2\x1fq\x88\xdd\x98\xe1~\xb0\xedK\x17x\v\x9b\xaa\xb4\a\xb6\x8b\x9e*=\x8f\x05\x8b\x88\xc9\x12\xa6\x8fs\x98\xf1\xfe\xcdX\xce,AD\xd2v\xf4\xe5\xd3\xf3\xf1TY\x1c\x8a\x98\xf8\xcf6\xc3>]l\xdaQ\xac\n{)\xc9\x95\xb4\x12j}8\x03\xba&\xe8p\xe8\xf0\xa4\xa6e\xbc\xef\x93%/x\x19\xaa\xb5\x97\x98A\\\x91\x9a \xa8\xf8\x00\x00\x00\x00\x00\x00\x00\x81', 0x0) read$ptp(r1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket(0x40000000015, 0x5, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) 45.212746815s ago: executing program 4 (id=278): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x20}, 0x18) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 45.025051716s ago: executing program 4 (id=283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002200)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf80, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, "074f94", 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}, [@dstopts={0x16, 0x1e3, '\x00', [@jumbo, @enc_lim, @jumbo={0xc2, 0x4, 0x40}, @calipso={0x7, 0x10, {0x4, 0x2, 0x4, 0x6c8, [0x0]}}, @generic={0x2, 0xef6, "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"}]}, @hopopts={0x4fb560df2bad385d, 0x2, '\x00', [@generic={0x7, 0xf, "55b5d747d5ce5853e308cdbcf10ddd"}]}]}}}}}}, 0xfb6) 44.658069378s ago: executing program 4 (id=291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 44.194716501s ago: executing program 32 (id=291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 8.921010299s ago: executing program 5 (id=541): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x27, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002680)=ANY=[@ANYBLOB="140000001000010000000000000007000000000a60000000060a0b0400000000000000000200000034000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c617374000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r6, 0x5459, &(0x7f0000000040)) 7.896483692s ago: executing program 5 (id=546): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x80}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x0) 7.642593299s ago: executing program 5 (id=548): r0 = syz_io_uring_setup(0x9d8, &(0x7f0000000480)={0x0, 0xb44, 0x0, 0xfffffffc, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 7.222915624s ago: executing program 5 (id=552): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x8000002, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x2, {0x0, 0x0, 0x0, r5, {0xc, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}}, 0x0) 6.973395639s ago: executing program 3 (id=555): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0xa, 0x3, 0x3a) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x204019, &(0x7f00000000c0)={[{@utf8}, {@map_off}, {@mode={'mode', 0x3d, 0x7d}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@check_relaxed}, {@utf8}, {@check_strict}]}, 0x0, 0x558, &(0x7f0000000fc0)="$eJzs3V1v01gawPHHpYUqK6HV7gqhqsAB9qKVSnASCIq4AK9zkh5I7Mh2UHuFKpqiihRWlJW2vUHcsDvSzIfgdj7EXM+XQfMRMvJL6GuSDiVNB/1/EfjEPjnnsRP56YniYwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGK5VdsuWNIwXntFDeZWA7+59zR79ZEVsnhgMaRfESv+J7OzcjVddfUfe5uvxP/dkvn02bzMxotZ2f3Llb8+/Pv0VP/1QwI+E9s7u6/Wut3O20kHMkbXLg3eVteeCX3TdOpamdBXlXLZvrtcC1XNNHQos5FuKjfQTuQHamFqURUqlZLS+VW/7dWrTkOrBTdZ+eBO0bbL6km+pZ0g9L27T/Khu2waDePVkzrx5rjOg/iD+NREKtJOU6mNzW6nNGoH4kqFk1QqjqpUtIvFQqFYLJTvV+4/sO3pIyvsQ+RIjcl/aDFZ3/DsDZzOVJb/pSFGPGnLiqhjH65UJRBfmgO2ZxYfZYW7emi/+/N/P8tf3ds8J0n+v54+uz4o/w+I5ewe27Iju/JK1qQrXenI24lHNN6HJQePeV20eGIk/PRYjDTFSdaoeI34oqQiZSmLLc9lWWoSipKaGGmIlrD3Pnuvm8mnKxAtjkTiSyBKFsSVRVFSkIpUpCRKtORlVXxpiyd1qYqTtLIhm8lxLw2J+UulwsAquf7nriPFIS2R/3F63+rUDZxar5//h7h4ZtEAAAAAAIBxsJJv3+Px/4xcS0o109D2pMMCAAAAAADfUK/X68m8WPH4X0SuicX4HwAAAACA742VXGNniUhObqSlDbGSy6X4EgAAAAAAgO9EcuX/9XiRzIFyQ6wv06Uw/gcAAAAA4Dvx/8Fz7M9mVVqXrF9+kyCYsT60Vv5pbTnxSmfrQrr1wuEWo9qcdTlrJFmUp7Nnrp63stkv9ybBTHv5vDFqrn8rC8BKv7L4qgDkR7mZ1rm5ni7X+1vSXnI109B51288LIjjXJ6K9Er0n9eb/5Vk93/wmpct2djsdvIv3nTXk4PxIW7lw1Y2geKReRSHxPIumW8huebi2D2eSS7EyPrNpf3a/TfgsThbU+nLp07c5yP5KLdEZHqvbu7g/s/GfRbyg/Y+i6Jwyj3/KLfTOrcXbqeLY6IojoqiuD+KP3wsThhFaVQUpVNGAQCTsjEiC1lHE/9XnOVOnN1P8+eFfJSFtM7CXHJinZ475oxujzqj26fMbj8fuQfSoBwb9/vToaz6KX7Bp4H9ho2iFR/CC++2/i1Xtnd272xurb3svOy8LhZLZfuebd8vykyyG9mC3AMAOMboe+yMrGHdGzGq/tuXnxTk5YW8ka6sy1JytUHyi4NjW83t+xnCUjJqjYPN7tNyaNSaS9JkeoeXpSGjuovJVQ79dotD6x6MoTT+NwIAgDN0a0QePkn+Xxox7j6Yy4ePjnP77tYGAADGQwefrVz0PysITOt5oVIpONGyVoHvPlWBqda1Ml6kA3fZ8epatQI/8l2/EReemaoOVdhutfwgUjU/UC0/NCvKEktUuBpGuqlC3XS8yLhhq6GdUCvX9yLHjVTVhK5qtf/VMOGyDpIXhy3tmppxncj4ngr9duDqvFKh1morJ5JWNFXtRaZm4qKnWoFpOsGqeuY32k2tqjp0A9OK/LTBfl/Gq/lBM2k2P+mDDQDAObG9s/tqrdvtvB1jYdL7CAAADiJLAwAAAAAAAAAAAAAAAAAAAABw/p3F9X8Uxl5Y+bXXOwdhnJPCRTkXYfy5CyNPHe/P5AQFYGx+DwAA///jeFNb") ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 6.339935787s ago: executing program 2 (id=556): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x6, 0x4) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1}, 0x0) 5.492393803s ago: executing program 0 (id=557): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x27, 0x0, 0x0) request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000140)='\\\\@[\x01\x00\x00\x00', 0xfffffffffffffffe) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$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") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002680)=ANY=[@ANYBLOB="140000001000010000000000000007000000000a60000000060a0b0400000000000000000200000034000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c617374000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(r5) 5.366631075s ago: executing program 3 (id=558): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x80}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5.278118295s ago: executing program 5 (id=560): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a300000000008004100736977001400"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20008000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x400000000}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003b00)={{{@in6=@mcast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x20000000003, 0x0, 0x0, 0x1000}, {0xfffffffffffffffe, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0xfc, 0xffffffff, 0x1}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x1, 0x0, 0x1, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x40) 5.274642139s ago: executing program 2 (id=561): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x2008c014) 4.511319272s ago: executing program 3 (id=563): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000b40)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf", 0xe5}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c", 0x6e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000006000200000088e0e022b04dbd50d36f3c028c27ba1d00000000000000000005000033abe805fe", 0x5c}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b7", 0x66}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4.510462968s ago: executing program 0 (id=564): socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r0], 0x1}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 4.291362384s ago: executing program 1 (id=565): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) close(0xffffffffffffffff) execve(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f00000002c0)) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x20000, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno', @ANYRESHEX=r2, @ANYBLOB="2c706f73697861636c2c61650b00000000000065722c00908246762172d0591252732c5cfc8ecc5b2bb36109f24a760104793a3cd60fc8faf28fa9fefe32303d2d224ed5720000f28eae31e01a1b1181a7e50c076b0b16"]) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0xffac, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0) 4.275678756s ago: executing program 0 (id=566): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) 4.165051596s ago: executing program 2 (id=567): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_devices(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe80"], 0xffdd) 4.002178756s ago: executing program 1 (id=568): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = signalfd(r1, &(0x7f0000000500)={[0x1]}, 0x8) name_to_handle_at(r2, &(0x7f0000004740)='\x00', &(0x7f0000004780)=ANY=[@ANYBLOB='\f'], &(0x7f00000047c0), 0x1200) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x3d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000640)=ANY=[@ANYBLOB='map=acorn,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x2, 0xa1a, &(0x7f0000001880)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000340)='./file0\x00') open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x7001) openat$cgroup_ro(r2, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x16, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000700000000000000052000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xf92c633495b6e3b6, r2, 0x8, &(0x7f0000000e40)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x0, &(0x7f00000010c0), 0x0, 0x10, 0x1, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64=r2, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='vnet_tx_trigger\x00', r4}, 0x18) r6 = socket(0x1e, 0x805, 0x0) connect$tipc(r6, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) close(r6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000240)=0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000340), &(0x7f00000004c0)=r7}, 0x20) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000300)={[{@jqfmt_vfsv1}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@errors_continue}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) 3.793727169s ago: executing program 2 (id=569): syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f00000002c0)=ANY=[], 0x1, 0x5b1, &(0x7f0000001000)="$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") bind$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) 3.556398123s ago: executing program 3 (id=570): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r1 = syz_open_pts(r0, 0x141601) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x8, 0x20000000, 0xfffffffc, 0x7fffffd, 0x5, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) 3.555720921s ago: executing program 2 (id=571): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x80000000, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace80", 0x5e}, {&(0x7f00000004c0)="846d2ad6d4ef6560542286af609ff6ca49c12d9b19e1843ce4c332e6f0932bc521d0bdcd40638430b5dbdb1a26009aaba510eb36442d9c3fb54c6b14c0e5c2867c43e8a75801149e1613c3fc8a5fd8470359795f85d3741efcbe77df1b9bfad527863f7684842cce7eeb775eda", 0x6d}], 0x2}, 0x200000d4) 3.374783077s ago: executing program 1 (id=572): getpid() r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2, 0x0, 0x20000000}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fdatasync(r3) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r5 = socket$inet6(0xa, 0x3, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') pread64(r6, &(0x7f000001b240)=""/102388, 0x18ff4, 0x7) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af", 0x14) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={0x0, r4}, 0x18) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16, @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) unshare(0x2c020400) r7 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) sendmmsg$inet6(r5, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) 3.374253558s ago: executing program 2 (id=573): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") socket(0x1d, 0x2, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) 3.095442391s ago: executing program 0 (id=574): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000006000200000088e0e022b04d", 0x41}], 0x1}}], 0x2, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.084670682s ago: executing program 1 (id=575): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20008000) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) pipe2$9p(0x0, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x0, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}]}}]}, 0x38}}, 0x0) 2.912914327s ago: executing program 0 (id=576): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18) 2.643239364s ago: executing program 1 (id=577): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc4002}]}) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, 0x0) 2.583675097s ago: executing program 3 (id=578): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, 0x0) ustat(0x3, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x1a1) writev(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) inotify_init() sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000c0000001800018014000200626f6e645f736c6176655f310000000018000380"], 0x44}}, 0x4000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/keys\x00', 0x0, 0x0) read$hiddev(r4, &(0x7f00000014c0)=""/4093, 0xffd) pread64(r4, &(0x7f00000013c0)=""/208, 0x31, 0x401) 2.472645606s ago: executing program 1 (id=579): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x400}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 2.3651309s ago: executing program 3 (id=580): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000b40)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf", 0xe5}, {0x0}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c", 0x6e}], 0x4}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000006000200000088e0e022b04dbd50d36f3c028c27ba1d00000000000000000005000033abe805fe", 0x5c}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b7", 0x66}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.323865067s ago: executing program 5 (id=581): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) eventfd2(0x9, 0x0) io_pgetevents(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) io_destroy(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00'}, 0x18) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000003c0)={'nat\x00', 0x0, 0x3, 0x0, [0x5, 0x7, 0xf7, 0x6, 0x10000, 0x8001], 0x0, 0x0, 0x0}, &(0x7f0000000440)=0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) ioctl$TCSETSW2(r1, 0x5425, 0x0) 0s ago: executing program 0 (id=582): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff3e10, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xee8f010b3d1e850f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) llistxattr(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.157' (ED25519) to the list of known hosts. [ 81.530409][ T5824] cgroup: Unknown subsys name 'net' [ 81.699364][ T5824] cgroup: Unknown subsys name 'cpuset' [ 81.708467][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.349139][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.045437][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.053208][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.056857][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.062982][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.076048][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.084742][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.086858][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.100390][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.108346][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.108416][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.123417][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.128063][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.138798][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.146721][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.148455][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.160938][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.169358][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.177412][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.192520][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.200610][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.210523][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.235622][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.243431][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.253294][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.261293][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.983632][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 87.170272][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 87.222588][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 87.281506][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 87.400233][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.408812][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.416334][ T5840] bridge_slave_0: entered allmulticast mode [ 87.423717][ T5840] bridge_slave_0: entered promiscuous mode [ 87.431821][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 87.482003][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.489396][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.496926][ T5840] bridge_slave_1: entered allmulticast mode [ 87.504272][ T5840] bridge_slave_1: entered promiscuous mode [ 87.552740][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.560026][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.567893][ T5838] bridge_slave_0: entered allmulticast mode [ 87.575124][ T5838] bridge_slave_0: entered promiscuous mode [ 87.613742][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.621061][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.628770][ T5838] bridge_slave_1: entered allmulticast mode [ 87.636623][ T5838] bridge_slave_1: entered promiscuous mode [ 87.647074][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.727927][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.769528][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.782270][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.810802][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.818167][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.825698][ T5836] bridge_slave_0: entered allmulticast mode [ 87.832883][ T5836] bridge_slave_0: entered promiscuous mode [ 87.840811][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.848062][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.855320][ T5835] bridge_slave_0: entered allmulticast mode [ 87.862577][ T5835] bridge_slave_0: entered promiscuous mode [ 87.918046][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.925969][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.933113][ T5836] bridge_slave_1: entered allmulticast mode [ 87.941033][ T5836] bridge_slave_1: entered promiscuous mode [ 87.960926][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.968159][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.975703][ T5835] bridge_slave_1: entered allmulticast mode [ 87.982896][ T5835] bridge_slave_1: entered promiscuous mode [ 88.006097][ T5840] team0: Port device team_slave_0 added [ 88.053729][ T5838] team0: Port device team_slave_0 added [ 88.062813][ T5838] team0: Port device team_slave_1 added [ 88.070794][ T5840] team0: Port device team_slave_1 added [ 88.091290][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.099365][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.106971][ T5837] bridge_slave_0: entered allmulticast mode [ 88.114156][ T5837] bridge_slave_0: entered promiscuous mode [ 88.125418][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.172230][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.179550][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.186787][ T5837] bridge_slave_1: entered allmulticast mode [ 88.193927][ T5837] bridge_slave_1: entered promiscuous mode [ 88.206021][ T51] Bluetooth: hci0: command tx timeout [ 88.222808][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.234363][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.247930][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.271569][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.278665][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.305533][ T51] Bluetooth: hci4: command tx timeout [ 88.305668][ T51] Bluetooth: hci1: command tx timeout [ 88.305769][ T51] Bluetooth: hci3: command tx timeout [ 88.322094][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.365269][ T5850] Bluetooth: hci2: command tx timeout [ 88.377939][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.384910][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.411012][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.423255][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.430350][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.456819][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.470259][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.483122][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.519500][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.526619][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.552778][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.587350][ T5836] team0: Port device team_slave_0 added [ 88.596808][ T5835] team0: Port device team_slave_0 added [ 88.626561][ T5836] team0: Port device team_slave_1 added [ 88.635884][ T5835] team0: Port device team_slave_1 added [ 88.660665][ T5837] team0: Port device team_slave_0 added [ 88.721542][ T5837] team0: Port device team_slave_1 added [ 88.784508][ T5840] hsr_slave_0: entered promiscuous mode [ 88.791213][ T5840] hsr_slave_1: entered promiscuous mode [ 88.812272][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.819336][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.845844][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.857674][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.864644][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.891306][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.903473][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.910572][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.936603][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.953025][ T5838] hsr_slave_0: entered promiscuous mode [ 88.959961][ T5838] hsr_slave_1: entered promiscuous mode [ 88.967002][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.974737][ T5838] Cannot create hsr debugfs directory [ 88.982327][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.989339][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.015451][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.028029][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.035284][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.061336][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.108672][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.115892][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.142004][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.283152][ T5835] hsr_slave_0: entered promiscuous mode [ 89.290558][ T5835] hsr_slave_1: entered promiscuous mode [ 89.297228][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.304815][ T5835] Cannot create hsr debugfs directory [ 89.317446][ T5837] hsr_slave_0: entered promiscuous mode [ 89.323721][ T5837] hsr_slave_1: entered promiscuous mode [ 89.330451][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.338247][ T5837] Cannot create hsr debugfs directory [ 89.435215][ T5836] hsr_slave_0: entered promiscuous mode [ 89.441555][ T5836] hsr_slave_1: entered promiscuous mode [ 89.449306][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.458993][ T5836] Cannot create hsr debugfs directory [ 89.897558][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.909612][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.922172][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.942461][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.012923][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.027716][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.049306][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.071552][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.143577][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.166813][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.179135][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.204735][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.258603][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.269234][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.282994][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.290053][ T5850] Bluetooth: hci0: command tx timeout [ 90.326047][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.376096][ T5850] Bluetooth: hci3: command tx timeout [ 90.381596][ T5850] Bluetooth: hci1: command tx timeout [ 90.387688][ T51] Bluetooth: hci4: command tx timeout [ 90.406983][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.431496][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.445150][ T5850] Bluetooth: hci2: command tx timeout [ 90.465743][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.476912][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.487799][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.500350][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.531896][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.539164][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.556498][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.563707][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.637464][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.704903][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.746923][ T4439] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.754103][ T4439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.780031][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.792462][ T4439] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.799615][ T4439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.844571][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.872653][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.927138][ T4439] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.934303][ T4439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.963177][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.979591][ T4439] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.986752][ T4439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.043742][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.053719][ T4439] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.060882][ T4439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.073684][ T4439] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.080863][ T4439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.171800][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.219834][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.227072][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.262413][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.277409][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.284608][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.323063][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.478952][ T5840] veth0_vlan: entered promiscuous mode [ 91.518293][ T5840] veth1_vlan: entered promiscuous mode [ 91.647633][ T5840] veth0_macvtap: entered promiscuous mode [ 91.678376][ T5840] veth1_macvtap: entered promiscuous mode [ 91.731835][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.780871][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.812689][ T43] cfg80211: failed to load regulatory.db [ 91.821212][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.867444][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.876662][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.889866][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.899749][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.926559][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.993874][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.043362][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.091730][ T5837] veth0_vlan: entered promiscuous mode [ 92.158516][ T5837] veth1_vlan: entered promiscuous mode [ 92.213484][ T5836] veth0_vlan: entered promiscuous mode [ 92.261071][ T989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.272538][ T989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.297194][ T5836] veth1_vlan: entered promiscuous mode [ 92.336913][ T5837] veth0_macvtap: entered promiscuous mode [ 92.376412][ T5850] Bluetooth: hci0: command tx timeout [ 92.388653][ T5835] veth0_vlan: entered promiscuous mode [ 92.398908][ T5837] veth1_macvtap: entered promiscuous mode [ 92.405191][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.413060][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.437544][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.447524][ T5850] Bluetooth: hci4: command tx timeout [ 92.449786][ T5854] Bluetooth: hci3: command tx timeout [ 92.452947][ T5850] Bluetooth: hci1: command tx timeout [ 92.470463][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.495432][ T5835] veth1_vlan: entered promiscuous mode [ 92.522223][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.531614][ T51] Bluetooth: hci2: command tx timeout [ 92.538631][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.548221][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.557043][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.580653][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.628687][ T5836] veth0_macvtap: entered promiscuous mode [ 92.647940][ T5836] veth1_macvtap: entered promiscuous mode [ 92.749738][ T5928] loop0: detected capacity change from 0 to 512 [ 92.756103][ T5838] veth0_vlan: entered promiscuous mode [ 92.775759][ T5928] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 92.792978][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.798475][ T5928] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 92.826941][ T5928] EXT4-fs error (device loop0): xattr_find_entry:333: inode #15: comm syz.0.1: corrupted xattr entries [ 92.844561][ T5838] veth1_vlan: entered promiscuous mode [ 92.857173][ T5928] EXT4-fs (loop0): Remounting filesystem read-only [ 92.863805][ T5928] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 92.888643][ T5928] EXT4-fs (loop0): 1 truncate cleaned up [ 92.897208][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.897390][ T5928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.904935][ T5835] veth0_macvtap: entered promiscuous mode [ 92.946398][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.956769][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.962473][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.965925][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.983869][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.992807][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.001544][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.029238][ T5835] veth1_macvtap: entered promiscuous mode [ 93.128251][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.143497][ T5206] udevd[5206]: worker [5894] terminated by signal 33 (Unknown signal 33) [ 93.169914][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.178486][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.187406][ T5206] udevd[5206]: worker [5894] failed while handling '/devices/virtual/block/loop0' [ 93.221096][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.231893][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.242694][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.261534][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.271760][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.292809][ T5838] veth0_macvtap: entered promiscuous mode [ 93.340308][ T5838] veth1_macvtap: entered promiscuous mode [ 93.507551][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.596061][ T989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.608609][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.624038][ T989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.636874][ T5838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.649841][ T5838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.659197][ T5838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.671405][ T5838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.739250][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.758243][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.763358][ T5947] netlink: 268 bytes leftover after parsing attributes in process `syz.0.11'. [ 93.789305][ T5947] unsupported nla_type 65024 [ 93.878811][ T989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.900463][ T989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.994181][ T5952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 94.369574][ T5955] loop2: detected capacity change from 0 to 512 [ 94.382694][ T5955] EXT4-fs: Ignoring removed bh option [ 94.444431][ T5955] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.454106][ T5955] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 94.464295][ T51] Bluetooth: hci0: command tx timeout [ 94.518610][ T5955] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 94.528974][ T51] Bluetooth: hci1: command tx timeout [ 94.534684][ T51] Bluetooth: hci3: command tx timeout [ 94.540621][ T51] Bluetooth: hci4: command tx timeout [ 94.555666][ T5955] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 94.597879][ T5955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.664391][ T5850] Bluetooth: hci2: command tx timeout [ 94.790308][ T5951] syz.0.13: vmalloc error: size 268439552, failed to allocated page array size 524296, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 94.809666][ T5951] CPU: 0 UID: 0 PID: 5951 Comm: syz.0.13 Not tainted 6.15.0-next-20250604-syzkaller #0 PREEMPT(full) [ 94.809693][ T5951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 94.809713][ T5951] Call Trace: [ 94.809721][ T5951] [ 94.809729][ T5951] dump_stack_lvl+0x189/0x250 [ 94.809762][ T5951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.809781][ T5951] ? __pfx__printk+0x10/0x10 [ 94.809803][ T5951] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 94.809824][ T5951] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 94.809847][ T5951] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 94.809871][ T5951] warn_alloc+0x214/0x310 [ 94.809899][ T5951] ? __pfx_warn_alloc+0x10/0x10 [ 94.809931][ T5951] ? __get_vm_area_node+0x28f/0x300 [ 94.809952][ T5951] ? xskq_create+0xbf/0x170 [ 94.809985][ T5951] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 94.810033][ T5951] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 94.810060][ T5951] ? __kasan_kmalloc+0x93/0xb0 [ 94.810100][ T5951] vmalloc_user_noprof+0xad/0xf0 [ 94.810121][ T5951] ? xskq_create+0xbf/0x170 [ 94.810140][ T5951] xskq_create+0xbf/0x170 [ 94.810161][ T5951] xsk_init_queue+0xb0/0x110 [ 94.810182][ T5951] xsk_setsockopt+0x4de/0x710 [ 94.810213][ T5951] ? __pfx_xsk_setsockopt+0x10/0x10 [ 94.810247][ T5951] ? aa_sock_opt_perm+0xff/0x1b0 [ 94.810277][ T5951] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 94.810301][ T5951] ? __pfx_xsk_setsockopt+0x10/0x10 [ 94.810330][ T5951] do_sock_setsockopt+0x257/0x3e0 [ 94.810360][ T5951] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 94.810391][ T5951] ? __fget_files+0x2a/0x420 [ 94.810421][ T5951] __x64_sys_setsockopt+0x18b/0x220 [ 94.810455][ T5951] do_syscall_64+0xfa/0x3b0 [ 94.810474][ T5951] ? lockdep_hardirqs_on+0x9c/0x150 [ 94.810493][ T5951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.810522][ T5951] ? clear_bhb_loop+0x60/0xb0 [ 94.810551][ T5951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.810568][ T5951] RIP: 0033:0x7f097438e969 [ 94.810589][ T5951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.810604][ T5951] RSP: 002b:00007f0975203038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 94.810623][ T5951] RAX: ffffffffffffffda RBX: 00007f09745b5fa0 RCX: 00007f097438e969 [ 94.810636][ T5951] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 94.810647][ T5951] RBP: 00007f0974410ab1 R08: 0000000000000004 R09: 0000000000000000 [ 94.810657][ T5951] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 94.810668][ T5951] R13: 0000000000000000 R14: 00007f09745b5fa0 R15: 00007fff203f32d8 [ 94.810697][ T5951] [ 94.810708][ T5951] Mem-Info: [ 95.083176][ T5951] active_anon:7928 inactive_anon:0 isolated_anon:0 [ 95.083176][ T5951] active_file:837 inactive_file:39830 isolated_file:0 [ 95.083176][ T5951] unevictable:768 dirty:1618 writeback:0 [ 95.083176][ T5951] slab_reclaimable:9859 slab_unreclaimable:94691 [ 95.083176][ T5951] mapped:33062 shmem:4295 pagetables:1011 [ 95.083176][ T5951] sec_pagetables:0 bounce:0 [ 95.083176][ T5951] kernel_misc_reclaimable:0 [ 95.083176][ T5951] free:1311676 free_pcp:25323 free_cma:0 [ 95.138257][ T5951] Node 0 active_anon:31712kB inactive_anon:0kB active_file:3348kB inactive_file:159120kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123948kB dirty:6460kB writeback:0kB shmem:15644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10744kB pagetables:3876kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 95.185376][ T5951] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 95.221682][ T5951] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 95.253296][ T5951] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 95.259192][ T5951] Node 0 DMA32 free:1327948kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20028kB inactive_anon:0kB active_file:3348kB inactive_file:157288kB unevictable:1536kB writepending:6460kB present:3129332kB managed:2560992kB mlocked:0kB bounce:0kB free_pcp:96356kB local_pcp:48368kB free_cma:0kB [ 95.295052][ T5951] lowmem_reserve[]: 0 0 1 1 1 [ 95.296516][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.299806][ T5951] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:8kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 95.365133][ T5951] lowmem_reserve[]: 0 0 0 0 0 [ 95.370027][ T5951] Node 1 Normal free:3903272kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:12kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16944kB local_pcp:7136kB free_cma:0kB [ 95.418684][ T5951] lowmem_reserve[]: 0 0 0 0 0 [ 95.423546][ T5951] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 95.438438][ T5951] Node 0 DMA32: 3*4kB (M) 6*8kB (UME) 5*16kB (M) 7*32kB (UME) 5*64kB (ME) 5*128kB (UME) 6*256kB (UME) 6*512kB (ME) 3*1024kB (ME) 4*2048kB (ME) 320*4096kB (M) = 1327916kB [ 95.455729][ T5951] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 95.467937][ T5951] Node 1 Normal: 67*4kB (UME) 51*8kB (UME) 43*16kB (UME) 45*32kB (UME) 20*64kB (UME) 3*128kB (ME) 6*256kB (UME) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 950*4096kB (M) = 3903348kB [ 95.485956][ T5951] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 95.495991][ T5951] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 95.505370][ T5951] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 95.515013][ T5951] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 95.524341][ T5951] 42013 total pagecache pages [ 95.529141][ T5951] 0 pages in swap cache [ 95.533316][ T5951] Free swap = 124996kB [ 95.539188][ T5951] Total swap = 124996kB [ 95.543383][ T5951] 2097051 pages RAM [ 95.547367][ T5951] 0 pages HighMem/MovableOnly [ 95.552063][ T5951] 424697 pages reserved [ 95.556327][ T5951] 0 pages cma reserved [ 95.772524][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.781076][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.918902][ T989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.949922][ T989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.014791][ T5967] netlink: 100 bytes leftover after parsing attributes in process `syz.2.16'. [ 96.118919][ T989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.158014][ T989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.578272][ T5980] netlink: 268 bytes leftover after parsing attributes in process `syz.1.20'. [ 96.888944][ T5991] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.924103][ T5990] loop2: detected capacity change from 0 to 1024 [ 96.947488][ T5990] ======================================================= [ 96.947488][ T5990] WARNING: The mand mount option has been deprecated and [ 96.947488][ T5990] and is ignored by this kernel. Remove the mand [ 96.947488][ T5990] option from the mount to silence this warning. [ 96.947488][ T5990] ======================================================= [ 97.624651][ T5990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.655219][ T5990] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.913474][ T6000] netlink: 100 bytes leftover after parsing attributes in process `syz.0.27'. [ 97.974845][ T1170] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 8) [ 98.043263][ T30] audit: type=1326 audit(1749030035.494:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097438e969 code=0x7ffc0000 [ 98.076567][ T6002] process 'syz.1.26' launched '/dev/fd/5' with NULL argv: empty string added [ 98.135348][ T30] audit: type=1326 audit(1749030035.494:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f097438e969 code=0x7ffc0000 [ 98.155095][ T1170] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 117 [ 98.160178][ T30] audit: type=1326 audit(1749030035.494:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097438e969 code=0x7ffc0000 [ 98.288207][ T1170] EXT4-fs (loop2): This should not happen!! Data will be lost [ 98.288207][ T1170] [ 98.377450][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.928681][ T6026] netlink: 100 bytes leftover after parsing attributes in process `syz.0.39'. [ 99.799023][ T6034] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.852292][ T30] audit: type=1326 audit(1749030037.304:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3d78e969 code=0x7ffc0000 [ 99.884846][ T30] audit: type=1326 audit(1749030037.304:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3d78e969 code=0x7ffc0000 [ 99.933929][ T30] audit: type=1326 audit(1749030037.334:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e3d78e969 code=0x7ffc0000 [ 100.004391][ T30] audit: type=1326 audit(1749030037.334:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3d78e969 code=0x7ffc0000 [ 100.076433][ T30] audit: type=1326 audit(1749030037.334:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3d78e969 code=0x7ffc0000 [ 100.081419][ T6034] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.163557][ T30] audit: type=1326 audit(1749030037.334:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e3d78e969 code=0x7ffc0000 [ 100.319132][ T6034] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.435389][ T30] audit: type=1326 audit(1749030037.334:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3d78e969 code=0x7ffc0000 [ 100.588236][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 101.126022][ T6034] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.149744][ T6063] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 101.159461][ T6063] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 101.172267][ T6063] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 101.940692][ T6034] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.037806][ T6034] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.219950][ T6034] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.293264][ T6034] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.362012][ T6062] infiniband syz2: set active [ 102.394330][ T6062] infiniband syz2: added veth0_to_bond [ 102.421122][ T6062] syz2: rxe_create_cq: returned err = -12 [ 102.438815][ T6062] infiniband syz2: Couldn't create ib_mad CQ [ 102.445390][ T6062] infiniband syz2: Couldn't open port 1 [ 102.537752][ T6096] loop1: detected capacity change from 0 to 1024 [ 102.620801][ T6062] RDS/IB: syz2: added [ 102.629551][ T6062] smc: adding ib device syz2 with port count 1 [ 102.644165][ T6062] smc: ib device syz2 port 1 has pnetid [ 102.801768][ T6096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.875793][ T6103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.65'. [ 103.427099][ T6103] syz.4.65 (6103) used greatest stack depth: 16880 bytes left [ 103.597882][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.774395][ T6127] tipc: Enabling of bearer rejected, failed to enable media [ 106.143891][ T6143] netlink: 92 bytes leftover after parsing attributes in process `syz.0.83'. [ 106.153070][ T6141] syz.3.82 uses obsolete (PF_INET,SOCK_PACKET) [ 106.338746][ T6147] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.420601][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 106.420618][ T30] audit: type=1326 audit(1749030043.874:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6152 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100b58e969 code=0x7ffc0000 [ 106.461083][ T30] audit: type=1326 audit(1749030043.874:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6152 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100b58e969 code=0x7ffc0000 [ 106.501899][ T30] audit: type=1326 audit(1749030043.874:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6152 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f100b58e969 code=0x7ffc0000 [ 106.573203][ T6139] capability: warning: `syz.1.80' uses deprecated v2 capabilities in a way that may be insecure [ 106.597851][ T30] audit: type=1326 audit(1749030043.874:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6152 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100b58e969 code=0x7ffc0000 [ 106.664630][ T30] audit: type=1326 audit(1749030043.874:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6152 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100b58e969 code=0x7ffc0000 [ 106.668142][ T6147] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.773325][ T30] audit: type=1326 audit(1749030044.004:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz.0.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097438e969 code=0x7ffc0000 [ 106.851895][ T30] audit: type=1326 audit(1749030044.004:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz.0.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f097438e969 code=0x7ffc0000 [ 106.885776][ T6156] loop0: detected capacity change from 0 to 8192 [ 106.910689][ T30] audit: type=1326 audit(1749030044.004:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz.0.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097438e969 code=0x7ffc0000 [ 106.972586][ T6162] loop3: detected capacity change from 0 to 128 [ 106.981839][ T30] audit: type=1326 audit(1749030044.004:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz.0.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f097438e969 code=0x7ffc0000 [ 107.014699][ T6147] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.037173][ T30] audit: type=1326 audit(1749030044.004:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz.0.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097438e969 code=0x7ffc0000 [ 107.047837][ T6162] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 107.110737][ T6162] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.228727][ T6147] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.298207][ T6165] netlink: 'syz.1.80': attribute type 13 has an invalid length. [ 107.603936][ T6165] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.727798][ T6147] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.797179][ T6147] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.884414][ T6147] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.918563][ T6147] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.079627][ T5836] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.176759][ T6183] loop4: detected capacity change from 0 to 164 [ 108.210296][ T6183] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 108.512773][ T6202] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.562495][ T6207] netlink: 328 bytes leftover after parsing attributes in process `syz.2.110'. [ 108.658738][ T6202] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.738569][ T6202] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.808715][ T6202] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.009570][ T6202] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.056647][ T6202] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.097912][ T6202] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.124195][ T6202] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.656463][ T6251] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.846628][ T6259] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.895928][ T6251] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.961167][ T6259] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.110657][ T6251] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.271927][ T6259] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.375769][ T6280] netlink: 24 bytes leftover after parsing attributes in process `syz.2.136'. [ 110.424368][ T6251] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.481721][ T6280] Zero length message leads to an empty skb [ 110.557418][ T6259] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.745590][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.139'. [ 110.957374][ T6259] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.978210][ T6259] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.996888][ T6259] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.020188][ T6307] netlink: 44 bytes leftover after parsing attributes in process `syz.2.142'. [ 111.039089][ T6259] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.048415][ T6307] netlink: 67 bytes leftover after parsing attributes in process `syz.2.142'. [ 111.312307][ T6314] syz.0.147 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 111.682714][ T6251] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.749707][ T6335] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.156'. [ 111.759692][ T6335] ksmbd: Unknown IPC event: 3, ignore. [ 111.792766][ T6251] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.909052][ T6251] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.987241][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.158'. [ 112.002170][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.158'. [ 112.058604][ T6251] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.444529][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 113.444546][ T30] audit: type=1326 audit(1749030050.894:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100b58e969 code=0x7ffc0000 [ 113.512358][ T30] audit: type=1326 audit(1749030050.894:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f100b58e969 code=0x7ffc0000 [ 113.541412][ T30] audit: type=1326 audit(1749030050.894:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100b58e969 code=0x7ffc0000 [ 113.587069][ T30] audit: type=1326 audit(1749030050.894:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f100b58e969 code=0x7ffc0000 [ 113.675288][ T30] audit: type=1326 audit(1749030050.894:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100b58e969 code=0x7ffc0000 [ 113.737267][ T30] audit: type=1326 audit(1749030050.934:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f100b58e969 code=0x7ffc0000 [ 113.787996][ T30] audit: type=1326 audit(1749030050.934:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100b58e969 code=0x7ffc0000 [ 113.854049][ T30] audit: type=1326 audit(1749030050.934:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f100b58e969 code=0x7ffc0000 [ 113.881176][ T6381] netlink: 'syz.2.169': attribute type 13 has an invalid length. [ 113.922814][ T30] audit: type=1326 audit(1749030050.934:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100b58e969 code=0x7ffc0000 [ 113.966774][ T30] audit: type=1326 audit(1749030050.934:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f100b58e969 code=0x7ffc0000 [ 114.027455][ T6381] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.527445][ T6419] netlink: 268 bytes leftover after parsing attributes in process `syz.3.194'. [ 114.969709][ T6445] netlink: 28 bytes leftover after parsing attributes in process `syz.2.203'. [ 115.509000][ T6464] loop1: detected capacity change from 0 to 2046 [ 115.521071][ T6467] loop3: detected capacity change from 0 to 512 [ 115.554051][ T6467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.586967][ T6467] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.615453][ T6464] Alternate GPT is invalid, using primary GPT. [ 115.644524][ T6477] netlink: 92 bytes leftover after parsing attributes in process `syz.0.214'. [ 115.650085][ T6464] loop1: p1 p2 p3 [ 115.692960][ T6467] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.210: corrupted inode contents [ 115.770505][ T6467] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.210: mark_inode_dirty error [ 115.803538][ T6467] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.210: corrupted inode contents [ 115.871731][ T6479] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.210: corrupted inode contents [ 115.965599][ T6484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.217'. [ 115.986081][ T6479] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.210: mark_inode_dirty error [ 116.036446][ T6486] syzkaller0: entered promiscuous mode [ 116.042202][ T6479] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.210: corrupted inode contents [ 116.053999][ T6486] syzkaller0: entered allmulticast mode [ 116.101708][ T6479] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.210: mark_inode_dirty error [ 116.144331][ T6479] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.210: corrupted inode contents [ 116.166998][ T6479] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.210: mark_inode_dirty error [ 116.250298][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.440580][ T6499] netlink: 92 bytes leftover after parsing attributes in process `syz.1.225'. [ 117.604888][ T6516] netlink: 28 bytes leftover after parsing attributes in process `syz.0.230'. [ 117.941205][ T6533] netlink: 92 bytes leftover after parsing attributes in process `syz.4.238'. [ 118.343919][ T6546] netlink: 28 bytes leftover after parsing attributes in process `syz.3.243'. [ 118.584271][ T6556] loop2: detected capacity change from 0 to 512 [ 118.591420][ T6556] EXT4-fs: Ignoring removed bh option [ 118.609424][ T6556] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.618669][ T6556] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 118.648249][ T6556] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 118.660914][ T6556] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 118.731768][ T6556] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.960486][ T6569] netlink: 92 bytes leftover after parsing attributes in process `syz.0.250'. [ 119.021635][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.189170][ T6576] netlink: 16 bytes leftover after parsing attributes in process `syz.0.255'. [ 119.455846][ T6577] bridge_slave_0: left allmulticast mode [ 119.461555][ T6577] bridge_slave_0: left promiscuous mode [ 119.506053][ T6577] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.520139][ T6577] bridge_slave_1: left allmulticast mode [ 119.531376][ T6577] bridge_slave_1: left promiscuous mode [ 119.537341][ T6577] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.548568][ T6586] loop0: detected capacity change from 0 to 1024 [ 119.567574][ T6586] EXT4-fs: Ignoring removed nobh option [ 119.578092][ T6586] EXT4-fs: Ignoring removed bh option [ 119.590310][ T6577] bond0: (slave bond_slave_0): Releasing backup interface [ 119.631200][ T6577] bond0: (slave bond_slave_1): Releasing backup interface [ 119.642740][ T6586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.651519][ T6588] loop4: detected capacity change from 0 to 2048 [ 119.687811][ T6588] Alternate GPT is invalid, using primary GPT. [ 119.694171][ T6588] loop4: p1 p2 p3 [ 119.716870][ T6577] team0: Port device team_slave_0 removed [ 119.744776][ T6586] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 119.763771][ T6577] team0: Port device team_slave_1 removed [ 119.797827][ T6577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.821287][ T6577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.848208][ T6577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.876049][ T6577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.903383][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.949061][ T9] syz2: Port: 1 Link DOWN [ 120.568854][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 120.568889][ T30] audit: type=1326 audit(1749030058.014:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187538e969 code=0x7ffc0000 [ 120.886841][ T30] audit: type=1326 audit(1749030058.064:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187538e969 code=0x7ffc0000 [ 120.941597][ T30] audit: type=1326 audit(1749030058.084:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f187538d2d0 code=0x7ffc0000 [ 121.020684][ T30] audit: type=1326 audit(1749030058.124:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1875390197 code=0x7ffc0000 [ 121.045045][ T30] audit: type=1326 audit(1749030058.124:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f187538e969 code=0x7ffc0000 [ 121.071286][ T30] audit: type=1326 audit(1749030058.134:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1875390197 code=0x7ffc0000 [ 121.093764][ T30] audit: type=1326 audit(1749030058.154:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f187538d5ca code=0x7ffc0000 [ 121.139604][ T30] audit: type=1326 audit(1749030058.194:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187538e969 code=0x7ffc0000 [ 121.191268][ T6622] loop1: detected capacity change from 0 to 512 [ 121.213303][ T30] audit: type=1326 audit(1749030058.194:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187538e969 code=0x7ffc0000 [ 121.273885][ T30] audit: type=1326 audit(1749030058.394:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f187538e969 code=0x7ffc0000 [ 121.307009][ T6622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.357890][ T6622] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.436914][ T6622] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.274: corrupted inode contents [ 121.480322][ T6622] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.274: mark_inode_dirty error [ 121.493355][ T6622] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.274: corrupted inode contents [ 121.513744][ T6622] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.274: corrupted inode contents [ 121.526936][ T6622] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.274: mark_inode_dirty error [ 121.572466][ T6622] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.274: corrupted inode contents [ 121.598463][ T6622] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.274: mark_inode_dirty error [ 121.693303][ T6622] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.274: corrupted inode contents [ 121.705792][ T6622] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.274: mark_inode_dirty error [ 121.790700][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.925463][ T6289] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.964011][ T6655] netlink: 92 bytes leftover after parsing attributes in process `syz.0.290'. [ 122.061253][ T6289] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.218216][ T6289] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.287078][ T6289] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.452029][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.287'. [ 122.951556][ T6674] loop2: detected capacity change from 0 to 512 [ 122.990285][ T6673] netlink: 16 bytes leftover after parsing attributes in process `syz.3.300'. [ 123.064531][ T6674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.077359][ T6674] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.095934][ T6674] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.299: corrupted inode contents [ 123.111722][ T6674] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.299: mark_inode_dirty error [ 123.138032][ T6674] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.299: corrupted inode contents [ 123.200741][ T6681] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.299: corrupted inode contents [ 123.230497][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 123.241947][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 123.255462][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 123.262616][ T6681] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.299: mark_inode_dirty error [ 123.274101][ T6289] bridge_slave_1: left allmulticast mode [ 123.285408][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.289813][ T6681] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.299: corrupted inode contents [ 123.309293][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 123.319579][ T6289] bridge_slave_1: left promiscuous mode [ 123.355826][ T6289] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.375234][ T6681] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.299: mark_inode_dirty error [ 123.393000][ T6289] bridge_slave_0: left allmulticast mode [ 123.415246][ T6289] bridge_slave_0: left promiscuous mode [ 123.422738][ T6681] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.299: corrupted inode contents [ 123.442074][ T6289] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.460508][ T6681] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.299: mark_inode_dirty error [ 123.562004][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.920530][ T6686] loop3: detected capacity change from 0 to 1024 [ 123.931172][ T6686] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 123.952340][ T6686] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 123.960752][ T6686] EXT4-fs (loop3): orphan cleanup on readonly fs [ 123.967899][ T6686] EXT4-fs error (device loop3): ext4_quota_enable:7124: inode #3: comm syz.3.303: iget: bad i_size value: 1407392063428608 [ 123.985361][ T6686] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.303: Bad quota inode: 3, type: 0 [ 123.996758][ T6686] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 124.014150][ T6686] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 124.022717][ T6686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 124.072911][ T6289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.083602][ T6289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.093621][ T6289] bond0 (unregistering): Released all slaves [ 124.403696][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.542182][ T6715] netlink: 100 bytes leftover after parsing attributes in process `syz.2.312'. [ 125.385644][ T6739] loop2: detected capacity change from 0 to 2048 [ 125.405507][ T5850] Bluetooth: hci3: command tx timeout [ 125.457824][ T6739] Alternate GPT is invalid, using primary GPT. [ 125.485086][ T6739] loop2: p1 p2 p3 [ 125.527705][ T6289] hsr_slave_0: left promiscuous mode [ 125.581002][ T6289] hsr_slave_1: left promiscuous mode [ 125.600014][ T6289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.622388][ T6289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.644153][ T6289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.663157][ T6289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.714686][ T6289] veth1_macvtap: left promiscuous mode [ 125.726308][ T6745] netlink: 100 bytes leftover after parsing attributes in process `syz.2.323'. [ 125.745794][ T6289] veth0_macvtap: left promiscuous mode [ 125.751489][ T6289] veth1_vlan: left promiscuous mode [ 125.771063][ T6289] veth0_vlan: left promiscuous mode [ 125.923343][ T6752] netlink: 'syz.0.313': attribute type 13 has an invalid length. [ 126.258659][ T6737] loop3: detected capacity change from 0 to 1024 [ 126.268186][ T6737] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 126.281274][ T6737] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 126.290882][ T6737] EXT4-fs (loop3): orphan cleanup on readonly fs [ 126.297658][ T6737] EXT4-fs error (device loop3): ext4_quota_enable:7124: inode #3: comm syz.3.320: iget: bad i_size value: 1407392063428608 [ 126.312811][ T6737] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.320: Bad quota inode: 3, type: 0 [ 126.324580][ T6737] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 126.340470][ T6737] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 126.349500][ T6737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.531502][ T6289] team0 (unregistering): Port device team_slave_1 removed [ 126.570336][ T6289] team0 (unregistering): Port device team_slave_0 removed [ 126.944113][ T6752] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.176787][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.269037][ T6768] futex_wake_op: syz.3.330 tries to shift op by -1; fix this program [ 127.422510][ T6683] chnl_net:caif_netlink_parms(): no params data found [ 127.487226][ T5850] Bluetooth: hci3: command tx timeout [ 127.553418][ T6781] netlink: 100 bytes leftover after parsing attributes in process `syz.1.334'. [ 127.722276][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 127.722294][ T30] audit: type=1326 audit(1749030065.174:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6788 comm="syz.1.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3d78e969 code=0x7ffc0000 [ 127.807407][ T6683] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.820117][ T30] audit: type=1326 audit(1749030065.224:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6788 comm="syz.1.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f6e3d78e969 code=0x7ffc0000 [ 127.830631][ T6683] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.870098][ T6683] bridge_slave_0: entered allmulticast mode [ 127.889847][ T30] audit: type=1326 audit(1749030065.224:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6788 comm="syz.1.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3d78e969 code=0x7ffc0000 [ 127.918468][ T6683] bridge_slave_0: entered promiscuous mode [ 127.925454][ T6794] futex_wake_op: syz.0.341 tries to shift op by -1; fix this program [ 127.942212][ T6683] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.969798][ T6683] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.990895][ T6683] bridge_slave_1: entered allmulticast mode [ 128.000441][ T6683] bridge_slave_1: entered promiscuous mode [ 128.130370][ T6683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.171073][ T6683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.533429][ T6792] loop2: detected capacity change from 0 to 1024 [ 128.543999][ T6792] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 128.573640][ T6792] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 128.583466][ T6792] EXT4-fs (loop2): orphan cleanup on readonly fs [ 128.590002][ T6792] EXT4-fs error (device loop2): ext4_quota_enable:7124: inode #3: comm syz.2.340: iget: bad i_size value: 1407392063428608 [ 128.606287][ T6792] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.340: Bad quota inode: 3, type: 0 [ 128.621130][ T6792] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 128.636243][ T6792] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 128.644839][ T6792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 129.053821][ T6820] loop3: detected capacity change from 0 to 512 [ 129.064357][ T6820] EXT4-fs: Ignoring removed bh option [ 129.073580][ T6820] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 129.082725][ T6820] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 129.575936][ T5850] Bluetooth: hci3: command tx timeout [ 129.670169][ T6820] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 129.681482][ T6820] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 129.692354][ T6820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.722100][ T6683] team0: Port device team_slave_0 added [ 129.757629][ T6683] team0: Port device team_slave_1 added [ 129.795673][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.952534][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.005829][ T6683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.027925][ T6683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.064623][ T6683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.081263][ T6683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.088317][ T6683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.150503][ T6683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.385194][ T30] audit: type=1326 audit(1749030067.834:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097438e969 code=0x7ffc0000 [ 130.387728][ T6683] hsr_slave_0: entered promiscuous mode [ 130.441698][ T30] audit: type=1326 audit(1749030067.834:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097438e969 code=0x7ffc0000 [ 130.447787][ T6683] hsr_slave_1: entered promiscuous mode [ 130.499374][ T6683] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.522927][ T30] audit: type=1326 audit(1749030067.834:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f097438e969 code=0x7ffc0000 [ 130.528871][ T6683] Cannot create hsr debugfs directory [ 130.600912][ T30] audit: type=1326 audit(1749030067.834:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097438e969 code=0x7ffc0000 [ 130.669072][ T30] audit: type=1326 audit(1749030067.834:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097438e969 code=0x7ffc0000 [ 130.740259][ T30] audit: type=1326 audit(1749030068.014:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.0.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097438e969 code=0x7ffc0000 [ 130.825077][ T30] audit: type=1326 audit(1749030068.014:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.0.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097438e969 code=0x7ffc0000 [ 131.139069][ T6683] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 131.173097][ T6683] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 131.205648][ T6683] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 131.262458][ T6683] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 131.491089][ T6885] netlink: 36 bytes leftover after parsing attributes in process `syz.3.379'. [ 131.501355][ T6847] loop2: detected capacity change from 0 to 1024 [ 131.511471][ T6885] netlink: 16 bytes leftover after parsing attributes in process `syz.3.379'. [ 131.522376][ T6887] loop0: detected capacity change from 0 to 512 [ 131.522850][ T6847] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 131.545516][ T6885] netlink: 36 bytes leftover after parsing attributes in process `syz.3.379'. [ 131.555383][ T6885] netlink: 36 bytes leftover after parsing attributes in process `syz.3.379'. [ 131.558585][ T6683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.572459][ T6847] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 131.594046][ T6847] EXT4-fs (loop2): orphan cleanup on readonly fs [ 131.618767][ T6887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.627115][ T6683] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.639504][ T6847] EXT4-fs error (device loop2): ext4_quota_enable:7124: inode #3: comm syz.2.363: iget: bad i_size value: 1407392063428608 [ 131.662862][ T5850] Bluetooth: hci3: command tx timeout [ 131.677102][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.684296][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.696245][ T6887] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.709172][ T6847] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.363: Bad quota inode: 3, type: 0 [ 131.720580][ T6847] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 131.728321][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.736403][ T6847] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 131.742391][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.751569][ T6847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.769897][ T6887] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.380: corrupted inode contents [ 131.792105][ T6887] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.380: mark_inode_dirty error [ 131.823284][ T6887] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.380: corrupted inode contents [ 131.881571][ T6892] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.380: corrupted inode contents [ 131.935505][ T6892] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.380: mark_inode_dirty error [ 131.979906][ T6892] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.380: corrupted inode contents [ 132.021345][ T6892] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.380: mark_inode_dirty error [ 132.059572][ T6892] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.380: corrupted inode contents [ 132.085688][ T6900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.383'. [ 132.101276][ T6892] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.380: mark_inode_dirty error [ 132.229524][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.258535][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.716015][ T5897] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 132.776034][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.782740][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.925257][ T5897] usb 1-1: device descriptor read/64, error -71 [ 133.042296][ T6683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.257684][ T5897] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 133.419102][ T5897] usb 1-1: device descriptor read/64, error -71 [ 133.450334][ T6932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.393'. [ 133.545800][ T5897] usb usb1-port1: attempt power cycle [ 133.557234][ T6936] loop2: detected capacity change from 0 to 512 [ 133.582096][ T6936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.624269][ T6936] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.642776][ T6936] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.395: corrupted inode contents [ 133.655602][ T6683] veth0_vlan: entered promiscuous mode [ 133.669853][ T6683] veth1_vlan: entered promiscuous mode [ 133.679878][ T6936] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.395: mark_inode_dirty error [ 133.693936][ T6936] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.395: corrupted inode contents [ 133.713025][ T6943] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.395: corrupted inode contents [ 133.721658][ T6683] veth0_macvtap: entered promiscuous mode [ 133.740988][ T6943] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.395: mark_inode_dirty error [ 133.748523][ T6683] veth1_macvtap: entered promiscuous mode [ 133.760810][ T6943] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.395: corrupted inode contents [ 133.784352][ T6943] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.395: mark_inode_dirty error [ 133.802075][ T6943] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.395: corrupted inode contents [ 133.802825][ T6683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.820357][ T6943] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.395: mark_inode_dirty error [ 133.853600][ T6683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.881193][ T6683] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.894706][ T6683] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.904648][ T6683] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.913474][ T6683] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.915983][ T5897] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 133.937751][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.967609][ T5897] usb 1-1: device descriptor read/8, error -71 [ 134.044834][ T4439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.078394][ T4439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.126723][ T6267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.153707][ T6267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.325837][ T5897] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 134.347902][ T5897] usb 1-1: device descriptor read/8, error -71 [ 134.458476][ T5897] usb usb1-port1: unable to enumerate USB device [ 135.411228][ T6939] loop1: detected capacity change from 0 to 1024 [ 135.425071][ T6939] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 135.571172][ T6939] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 135.611748][ T6939] EXT4-fs (loop1): orphan cleanup on readonly fs [ 135.639200][ T6939] EXT4-fs error (device loop1): ext4_quota_enable:7124: inode #3: comm syz.1.396: iget: bad i_size value: 1407392063428608 [ 135.653554][ T6939] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.396: Bad quota inode: 3, type: 0 [ 135.669032][ T6939] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 135.718831][ T6939] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 135.741833][ T6939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 135.787351][ T6970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.405'. [ 135.987233][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.063295][ T6975] loop0: detected capacity change from 0 to 512 [ 136.111935][ T6981] futex_wake_op: syz.2.411 tries to shift op by -1; fix this program [ 136.206479][ T6975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.249845][ T6975] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.263221][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 136.263234][ T30] audit: type=1326 audit(1749030073.714:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796898e969 code=0x7ffc0000 [ 136.293842][ T30] audit: type=1326 audit(1749030073.744:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796898e969 code=0x7ffc0000 [ 136.322850][ T30] audit: type=1326 audit(1749030073.744:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f796898e969 code=0x7ffc0000 [ 136.323860][ T6975] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.406: corrupted inode contents [ 136.345705][ T30] audit: type=1326 audit(1749030073.744:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796898e969 code=0x7ffc0000 [ 136.664081][ T6975] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.406: mark_inode_dirty error [ 137.017373][ T6975] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.406: corrupted inode contents [ 137.083250][ T30] audit: type=1326 audit(1749030073.744:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796898e969 code=0x7ffc0000 [ 137.106555][ T30] audit: type=1326 audit(1749030073.754:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f796898e969 code=0x7ffc0000 [ 137.117900][ T6993] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.406: corrupted inode contents [ 137.130327][ T30] audit: type=1326 audit(1749030073.754:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796898e969 code=0x7ffc0000 [ 137.183731][ T6993] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.406: mark_inode_dirty error [ 137.201194][ T30] audit: type=1326 audit(1749030073.754:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f796898e969 code=0x7ffc0000 [ 137.233668][ T6993] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.406: corrupted inode contents [ 137.255137][ T30] audit: type=1326 audit(1749030074.074:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796898e969 code=0x7ffc0000 [ 137.291082][ T6993] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.406: mark_inode_dirty error [ 137.306891][ T30] audit: type=1326 audit(1749030074.084:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796898e969 code=0x7ffc0000 [ 137.332608][ T6993] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.406: corrupted inode contents [ 137.377274][ T7001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.417'. [ 137.386808][ T6993] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.406: mark_inode_dirty error [ 137.774061][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.299984][ T7024] loop2: detected capacity change from 0 to 2048 [ 139.412916][ T7024] Alternate GPT is invalid, using primary GPT. [ 139.419446][ T7024] loop2: p1 p2 p3 [ 140.643109][ T7040] bridge_slave_0: left allmulticast mode [ 140.648909][ T7040] bridge_slave_0: left promiscuous mode [ 140.654698][ T7040] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.669957][ T7040] bridge_slave_1: left allmulticast mode [ 140.680460][ T7040] bridge_slave_1: left promiscuous mode [ 140.690809][ T7040] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.723843][ T7042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.430'. [ 140.750147][ T7040] bond0: (slave bond_slave_0): Releasing backup interface [ 140.776637][ T7040] bond0: (slave bond_slave_1): Releasing backup interface [ 140.839278][ T7040] team0: Port device team_slave_0 removed [ 140.874165][ T7040] team0: Port device team_slave_1 removed [ 140.889454][ T7040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.908148][ T7040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.933578][ T7040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.947375][ T7040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.407063][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 141.407102][ T30] audit: type=1326 audit(1749030334.840:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7037 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796898e969 code=0x7ffc0000 [ 141.989108][ T7056] loop5: detected capacity change from 0 to 512 [ 142.187224][ T7056] EXT4-fs (loop5): 1 orphan inode deleted [ 142.209062][ T989] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 142.238125][ T7060] loop2: detected capacity change from 0 to 2048 [ 142.277613][ T7056] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.277858][ T989] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 142.317099][ T7056] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.346225][ T7060] Alternate GPT is invalid, using primary GPT. [ 142.363568][ T7070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.441'. [ 142.374880][ T7060] loop2: p1 p2 p3 [ 145.065143][ T7117] loop0: detected capacity change from 0 to 512 [ 145.075651][ T7117] EXT4-fs: Ignoring removed bh option [ 145.452181][ T7117] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 145.461339][ T7117] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 145.487377][ T7117] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 145.497359][ T7117] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 145.517126][ T7117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.789140][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.970710][ T7118] loop1: detected capacity change from 0 to 1024 [ 145.981956][ T7118] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 145.994559][ T7118] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 146.002905][ T7118] EXT4-fs (loop1): orphan cleanup on readonly fs [ 146.009898][ T7118] EXT4-fs error (device loop1): ext4_quota_enable:7124: inode #3: comm syz.1.451: iget: bad i_size value: 1407392063428608 [ 146.025204][ T7118] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.451: Bad quota inode: 3, type: 0 [ 146.036730][ T7118] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 146.051431][ T7118] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 146.069341][ T7118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 146.795231][ T6683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.865124][ T7130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.453'. [ 146.965550][ T7132] 9pnet_fd: Insufficient options for proto=fd [ 147.048244][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.342406][ T7161] loop2: detected capacity change from 0 to 512 [ 149.352789][ T7161] EXT4-fs: Ignoring removed bh option [ 149.369266][ T7161] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 149.378779][ T7161] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 149.479825][ T7161] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 149.491242][ T7161] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 149.512614][ T7161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.789865][ T7121] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 150.380347][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.795508][ T7177] futex_wake_op: syz.2.471 tries to shift op by -1; fix this program [ 151.069601][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.466'. [ 152.005217][ T7194] loop2: detected capacity change from 0 to 512 [ 152.248552][ T7194] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 152.322621][ T7194] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.477: invalid block [ 152.402378][ T7194] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.477: invalid indirect mapped block 4294967295 (level 1) [ 152.417794][ T7202] tmpfs: Bad value for 'mpol' [ 152.554338][ T7194] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.477: invalid indirect mapped block 4294967295 (level 1) [ 152.785624][ T7209] loop3: detected capacity change from 0 to 512 [ 152.806863][ T7209] EXT4-fs: Ignoring removed bh option [ 152.870306][ T7209] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 152.879998][ T7209] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 152.920811][ T7194] EXT4-fs (loop2): 2 truncates cleaned up [ 152.928091][ T7209] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 152.939313][ T7209] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 152.961099][ T7209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.135186][ T7194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.310518][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.350453][ T7194] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.409347][ T7170] loop1: detected capacity change from 0 to 1024 [ 153.437745][ T7170] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 153.473802][ T7170] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 153.528948][ T7170] EXT4-fs (loop1): orphan cleanup on readonly fs [ 153.576382][ T7170] EXT4-fs error (device loop1): ext4_quota_enable:7124: inode #3: comm syz.1.469: iget: bad i_size value: 1407392063428608 [ 153.616952][ T7170] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.469: Bad quota inode: 3, type: 0 [ 153.629030][ T7170] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 153.647866][ T7170] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 153.656599][ T7170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 153.789367][ T7236] tmpfs: Bad value for 'mpol' [ 153.833703][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.488'. [ 154.016764][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.294827][ T7258] netlink: 36 bytes leftover after parsing attributes in process `syz.0.503'. [ 154.349663][ T7260] loop1: detected capacity change from 0 to 512 [ 154.418027][ T7260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.455958][ T7260] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.603776][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.635665][ T7278] netlink: '+}[@': attribute type 13 has an invalid length. [ 154.782075][ T7278] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.789840][ T7278] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.058732][ T7278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.077323][ T7278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.176672][ T7278] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.185707][ T7278] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.194129][ T7278] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.202598][ T7278] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.505022][ T30] audit: type=1326 audit(1749030348.950:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100b58e969 code=0x7ffc0000 [ 155.559898][ T7317] sd 0:0:1:0: device reset [ 155.560845][ T30] audit: type=1326 audit(1749030348.960:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f100b58e969 code=0x7ffc0000 [ 155.611090][ T30] audit: type=1326 audit(1749030348.960:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100b58e969 code=0x7ffc0000 [ 155.677011][ T30] audit: type=1326 audit(1749030348.960:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100b58e969 code=0x7ffc0000 [ 155.915750][ T30] audit: type=1326 audit(1749030348.960:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f100b58e969 code=0x7ffc0000 [ 155.938889][ T30] audit: type=1326 audit(1749030348.960:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100b58e969 code=0x7ffc0000 [ 155.963348][ T30] audit: type=1326 audit(1749030348.960:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100b58e969 code=0x7ffc0000 [ 156.066274][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.527'. [ 156.421102][ T30] audit: type=1326 audit(1749030348.960:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f100b58e969 code=0x7ffc0000 [ 156.663363][ T30] audit: type=1326 audit(1749030348.980:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7316 comm="syz.1.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3d78e969 code=0x7ffc0000 [ 156.727776][ T7310] syz.3.522: vmalloc error: size 268439552, failed to allocated page array size 524296, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 156.789203][ T7310] CPU: 1 UID: 0 PID: 7310 Comm: syz.3.522 Not tainted 6.15.0-next-20250604-syzkaller #0 PREEMPT(full) [ 156.789232][ T7310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.789243][ T7310] Call Trace: [ 156.789250][ T7310] [ 156.789258][ T7310] dump_stack_lvl+0x189/0x250 [ 156.789283][ T7310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.789300][ T7310] ? __pfx__printk+0x10/0x10 [ 156.789322][ T7310] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 156.789342][ T7310] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 156.789363][ T7310] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 156.789385][ T7310] warn_alloc+0x214/0x310 [ 156.789412][ T7310] ? __pfx_warn_alloc+0x10/0x10 [ 156.789442][ T7310] ? __get_vm_area_node+0x28f/0x300 [ 156.789462][ T7310] ? xskq_create+0xbf/0x170 [ 156.789487][ T7310] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 156.789536][ T7310] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 156.789563][ T7310] ? __kasan_kmalloc+0x93/0xb0 [ 156.789584][ T7310] vmalloc_user_noprof+0xad/0xf0 [ 156.789604][ T7310] ? xskq_create+0xbf/0x170 [ 156.789621][ T7310] xskq_create+0xbf/0x170 [ 156.789641][ T7310] xsk_init_queue+0xb0/0x110 [ 156.789660][ T7310] xsk_setsockopt+0x4de/0x710 [ 156.789689][ T7310] ? __pfx_xsk_setsockopt+0x10/0x10 [ 156.789720][ T7310] ? aa_sock_opt_perm+0xff/0x1b0 [ 156.789747][ T7310] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 156.789769][ T7310] ? __pfx_xsk_setsockopt+0x10/0x10 [ 156.789797][ T7310] do_sock_setsockopt+0x257/0x3e0 [ 156.789824][ T7310] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 156.789854][ T7310] ? __fget_files+0x2a/0x420 [ 156.789881][ T7310] __x64_sys_setsockopt+0x18b/0x220 [ 156.789911][ T7310] do_syscall_64+0xfa/0x3b0 [ 156.789928][ T7310] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.789946][ T7310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.789964][ T7310] ? clear_bhb_loop+0x60/0xb0 [ 156.789985][ T7310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.790002][ T7310] RIP: 0033:0x7f100b58e969 [ 156.790017][ T7310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.790032][ T7310] RSP: 002b:00007f100c4ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 156.790050][ T7310] RAX: ffffffffffffffda RBX: 00007f100b7b5fa0 RCX: 00007f100b58e969 [ 156.790063][ T7310] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 156.790074][ T7310] RBP: 00007f100b610ab1 R08: 0000000000000004 R09: 0000000000000000 [ 156.790085][ T7310] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 156.790095][ T7310] R13: 0000000000000000 R14: 00007f100b7b5fa0 R15: 00007ffce4de7758 [ 156.790123][ T7310] [ 156.790525][ T7310] Mem-Info: [ 156.825472][ T30] audit: type=1326 audit(1749030348.980:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7316 comm="syz.1.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3d78e969 code=0x7ffc0000 [ 156.892872][ T7310] active_anon:3792 inactive_anon:0 isolated_anon:0 [ 156.892872][ T7310] active_file:1403 inactive_file:39856 isolated_file:0 [ 156.892872][ T7310] unevictable:768 dirty:120 writeback:0 [ 156.892872][ T7310] slab_reclaimable:10784 slab_unreclaimable:153663 [ 156.892872][ T7310] mapped:30204 shmem:1564 pagetables:957 [ 156.892872][ T7310] sec_pagetables:0 bounce:0 [ 156.892872][ T7310] kernel_misc_reclaimable:0 [ 156.892872][ T7310] free:1260314 free_pcp:18889 free_cma:0 [ 157.149400][ T7310] Node 0 active_anon:15252kB inactive_anon:0kB active_file:5612kB inactive_file:159224kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120908kB dirty:480kB writeback:0kB shmem:4640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11176kB pagetables:3772kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 157.184859][ T7310] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 157.335008][ T7310] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 157.416581][ T7310] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 157.422437][ T7310] Node 0 DMA32 free:1120052kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15408kB inactive_anon:0kB active_file:5612kB inactive_file:157392kB unevictable:1536kB writepending:480kB present:3129332kB managed:2560992kB mlocked:0kB bounce:0kB free_pcp:60968kB local_pcp:20216kB free_cma:0kB [ 157.514995][ T7310] lowmem_reserve[]: 0 0 1 1 1 [ 157.525060][ T7310] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 157.577040][ T7310] lowmem_reserve[]: 0 0 0 0 0 [ 157.582323][ T7310] Node 1 Normal free:3905828kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:14400kB local_pcp:5984kB free_cma:0kB [ 157.639089][ T7310] lowmem_reserve[]: 0 0 0 0 0 [ 157.649753][ T7310] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 157.680500][ T7310] Node 0 DMA32: 2*4kB (UM) 20*8kB (UME) 67*16kB (UME) 130*32kB (UME) 127*64kB (UME) 41*128kB (ME) 17*256kB (ME) 4*512kB (M) 6*1024kB (UM) 0*2048kB 265*4096kB (M) = 1116760kB [ 157.785358][ T7310] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 157.827461][ T7310] Node 1 Normal: 179*4kB (UME) 51*8kB (UME) 44*16kB (UME) 76*32kB (UME) 34*64kB (UME) 4*128kB (UME) 6*256kB (UME) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 950*4096kB (M) = 3905828kB [ 157.909864][ T7310] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 157.921559][ T7310] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 157.931422][ T7310] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 157.941871][ T7310] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 157.951513][ T7310] 45669 total pagecache pages [ 157.956762][ T7310] 0 pages in swap cache [ 157.961571][ T7310] Free swap = 124996kB [ 157.966026][ T7310] Total swap = 124996kB [ 157.970684][ T7310] 2097051 pages RAM [ 157.974569][ T7310] 0 pages HighMem/MovableOnly [ 157.980433][ T7310] 424697 pages reserved [ 157.985087][ T7310] 0 pages cma reserved [ 158.783594][ T7369] syzkaller0: entered promiscuous mode [ 158.814245][ T7369] syzkaller0: entered allmulticast mode [ 159.453410][ T7395] netlink: 12 bytes leftover after parsing attributes in process `syz.3.553'. [ 159.628967][ T7400] loop1: detected capacity change from 0 to 736 [ 159.782560][ T7404] loop3: detected capacity change from 0 to 164 [ 159.876096][ T7400] rock: directory entry would overflow storage [ 159.882884][ T7400] rock: sig=0x3b10, size=4, remaining=3 [ 160.951191][ T7404] bridge_slave_0: left allmulticast mode [ 160.957243][ T7404] bridge_slave_0: left promiscuous mode [ 160.963064][ T7404] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.973476][ T7404] bridge_slave_1: left allmulticast mode [ 160.980379][ T7404] bridge_slave_1: left promiscuous mode [ 160.986300][ T7404] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.002019][ T7404] bond0: (slave bond_slave_0): Releasing backup interface [ 161.025727][ T7404] bond0: (slave bond_slave_1): Releasing backup interface [ 161.043306][ T7404] team0: Port device team_slave_0 removed [ 161.095973][ T7404] team0: Port device team_slave_1 removed [ 161.105773][ T7404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.113837][ T7404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.442669][ T7418] loop0: detected capacity change from 0 to 512 [ 161.453215][ T7418] EXT4-fs: Ignoring removed bh option [ 161.535042][ T7418] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 161.544156][ T7418] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 161.629022][ T7418] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 161.642022][ T7418] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 161.661716][ T7418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.058264][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.363898][ T7437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.565'. [ 162.680834][ T7447] loop1: detected capacity change from 0 to 1764 [ 162.817241][ T7447] loop1: detected capacity change from 0 to 1024 [ 162.839052][ T7447] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 162.940514][ T7447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.157500][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.377310][ T7464] netlink: 'syz.5.560': attribute type 13 has an invalid length. [ 163.617316][ T7464] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.817885][ T7467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.575'. [ 164.001498][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 164.001516][ T30] audit: type=1326 audit(1749030357.450:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.1.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3d78e969 code=0x7ffc0000 [ 164.087561][ T7475] 9pnet_virtio: no channels available for device 127.0.0.1 [ 164.089457][ T30] audit: type=1326 audit(1749030357.450:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.1.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3d78e969 code=0x7ffc0000 [ 164.145940][ T30] audit: type=1326 audit(1749030357.470:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.1.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e3d78e969 code=0x7ffc0000 [ 164.168274][ T30] audit: type=1326 audit(1749030357.470:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.1.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3d78e969 code=0x7ffc0000 [ 164.200927][ T30] audit: type=1326 audit(1749030357.470:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.1.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3d78e969 code=0x7ffc0000 [ 164.223638][ T30] audit: type=1326 audit(1749030357.470:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.1.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f6e3d78e969 code=0x7ffc0000 [ 164.251282][ T30] audit: type=1326 audit(1749030357.470:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.1.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3d78e969 code=0x7ffc0000 [ 164.273703][ T30] audit: type=1326 audit(1749030357.470:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.1.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3d78e969 code=0x7ffc0000 [ 164.334103][ C1] hrtimer: interrupt took 35639537 ns [ 164.340469][ T30] audit: type=1326 audit(1749030357.530:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7474 comm="syz.3.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100b58e969 code=0x7ffc0000 [ 164.362881][ T30] audit: type=1326 audit(1749030357.530:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7474 comm="syz.3.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100b58e969 code=0x7ffc0000 [ 201.171905][ T30] audit: type=1326 audit(1749030357.530:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7474 comm="syz.3.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f100b58e969 code=0x7ffc0000 [ 201.194242][ T30] audit: type=1326 audit(1749030357.530:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7474 comm="syz.3.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100b58e969 code=0x7ffc0000 [ 201.216550][ T30] audit: type=1326 audit(1749030357.530:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7474 comm="syz.3.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100b58e969 code=0x7ffc0000 [ 271.504872][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 271.504895][ C0] rcu: 1-...!: (2 ticks this GP) idle=909c/1/0x4000000000000000 softirq=26322/26322 fqs=5 [ 271.505305][ C0] rcu: (detected by 0, t=10502 jiffies, g=19129, q=717 ncpus=2) [ 271.505350][ C0] Sending NMI from CPU 0 to CPUs 1: [ 271.505392][ C1] NMI backtrace for cpu 1 [ 271.505415][ C1] CPU: 1 UID: 0 PID: 30 Comm: kauditd Not tainted 6.15.0-next-20250604-syzkaller #0 PREEMPT(full) [ 271.505435][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 271.505449][ C1] RIP: 0010:preempt_count_sub+0x65/0x170 [ 271.505493][ C1] Code: ff ff ff 7f 39 cf 7f 2a 81 ff ff 00 00 00 0f 93 c1 84 c0 0f 95 c0 08 c8 74 5e 65 8b 05 94 58 0c 11 f7 df 65 01 3d 8b 58 0c 11 <5b> 5d c3 cc cc cc cc cc 90 e8 9d d0 2d 03 85 c0 74 39 48 c7 c0 34 [ 271.505508][ C1] RSP: 0018:ffffc90000a08c68 EFLAGS: 00000013 [ 271.505529][ C1] RAX: 0000000000010003 RBX: dffffc0000000000 RCX: 0000000000010000 [ 271.505541][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff [ 271.505552][ C1] RBP: ffffc90000a08d08 R08: ffffffff99c7798b R09: 1ffffffff338ef31 [ 271.505564][ C1] R10: dffffc0000000000 R11: fffffbfff338ef32 R12: dffffc0000000000 [ 271.505576][ C1] R13: dffffc0000000000 R14: ffffffff99c77988 R15: 1ffff92000141190 [ 271.505589][ C1] FS: 0000000000000000(0000) GS:ffff888125d4d000(0000) knlGS:0000000000000000 [ 271.505602][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.505614][ C1] CR2: 00007f100c4abf98 CR3: 000000000df38000 CR4: 00000000003526f0 [ 271.505629][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 271.505638][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 271.505649][ C1] Call Trace: [ 271.505656][ C1] [ 271.505665][ C1] _raw_spin_unlock_irqrestore+0xad/0x110 [ 271.505695][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 271.505727][ C1] debug_deactivate+0x1d/0x200 [ 271.505744][ C1] __hrtimer_run_queues+0x2b0/0xc60 [ 271.505781][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 271.505805][ C1] ? read_tsc+0x9/0x20 [ 271.505830][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 271.505870][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 271.505898][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 271.505915][ C1] [ 271.505920][ C1] [ 271.505927][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 271.505944][ C1] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 271.505963][ C1] Code: 48 21 c3 0f 85 e9 01 00 00 e8 65 23 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 56 23 1f 00 eb 06 e8 4f 23 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 1a 9c 82 00 48 8b 1b 48 8b 44 24 [ 271.505976][ C1] RSP: 0018:ffffc90000a67760 EFLAGS: 00000293 [ 271.505989][ C1] RAX: 1ffffffff1d36d37 RBX: ffffffff8e9b69b8 RCX: ffff88801dae1e00 [ 271.506002][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 271.506012][ C1] RBP: ffffc90000a678b0 R08: ffffffff8fa123f7 R09: 1ffffffff1f4247e [ 271.506025][ C1] R10: dffffc0000000000 R11: fffffbfff1f4247f R12: dffffc0000000000 [ 271.506037][ C1] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b6960 [ 271.506062][ C1] ? console_flush_all+0x13a/0xc40 [ 271.506084][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 271.506108][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 271.506131][ C1] console_unlock+0xc4/0x270 [ 271.506149][ C1] ? __pfx_console_unlock+0x10/0x10 [ 271.506167][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 271.506190][ C1] vprintk_emit+0x5b7/0x7a0 [ 271.506207][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 271.506222][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 271.506248][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 271.506290][ C1] _printk+0xcf/0x120 [ 271.506307][ C1] ? __pfx____ratelimit+0x10/0x10 [ 271.506325][ C1] ? __pfx__printk+0x10/0x10 [ 271.506344][ C1] ? netlink_has_listeners+0x77/0x3f0 [ 271.506366][ C1] ? netlink_has_listeners+0x339/0x3f0 [ 271.506388][ C1] kauditd_hold_skb+0x1c8/0x210 [ 271.506408][ C1] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 271.506439][ C1] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 271.506458][ C1] ? __pfx_kauditd_send_multicast_skb+0x10/0x10 [ 271.506478][ C1] kauditd_send_queue+0x2a1/0x2f0 [ 271.506509][ C1] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 271.506525][ C1] ? __pfx_kauditd_send_multicast_skb+0x10/0x10 [ 271.506543][ C1] ? kauditd_thread+0xba/0x9a0 [ 271.506557][ C1] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 271.506574][ C1] kauditd_thread+0x74e/0x9a0 [ 271.506592][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 271.506613][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 271.506636][ C1] ? __pfx_kauditd_thread+0x10/0x10 [ 271.506651][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 271.506669][ C1] ? __kthread_parkme+0x7b/0x200 [ 271.506683][ C1] ? __kthread_parkme+0x1a1/0x200 [ 271.506699][ C1] kthread+0x70e/0x8a0 [ 271.506716][ C1] ? __pfx_kauditd_thread+0x10/0x10 [ 271.506731][ C1] ? __pfx_kthread+0x10/0x10 [ 271.506747][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 271.506768][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.506781][ C1] ? __pfx_kthread+0x10/0x10 [ 271.506797][ C1] ret_from_fork+0x3fc/0x770 [ 271.506818][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 271.506840][ C1] ? __switch_to_asm+0x39/0x70 [ 271.506854][ C1] ? __switch_to_asm+0x33/0x70 [ 271.506867][ C1] ? __pfx_kthread+0x10/0x10 [ 271.506883][ C1] ret_from_fork_asm+0x1a/0x30 [ 271.506905][ C1] [ 271.507377][ C0] rcu: rcu_preempt kthread starved for 7037 jiffies! g19129 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 271.507398][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 271.507408][ C0] rcu: RCU grace-period kthread stack dump: [ 271.507415][ C0] task:rcu_preempt state:R running task stack:27320 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 271.507473][ C0] Call Trace: [ 271.507479][ C0] [ 271.507491][ C0] __schedule+0x16f5/0x4d00 [ 271.507517][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 271.507545][ C0] ? schedule+0x165/0x360 [ 271.507564][ C0] ? __lock_acquire+0xab9/0xd20 [ 271.507589][ C0] ? __pfx___schedule+0x10/0x10 [ 271.507622][ C0] ? schedule+0x91/0x360 [ 271.507643][ C0] schedule+0x165/0x360 [ 271.507663][ C0] schedule_timeout+0x12b/0x270 [ 271.507688][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 271.507711][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 271.507740][ C0] ? __pfx_process_timeout+0x10/0x10 [ 271.507765][ C0] ? prepare_to_swait_event+0x341/0x380 [ 271.507792][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 271.507830][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 271.507856][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 271.507878][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 271.507911][ C0] ? finish_swait+0xcd/0x1f0 [ 271.507935][ C0] rcu_gp_kthread+0x99/0x390 [ 271.507962][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 271.507988][ C0] ? __kthread_parkme+0x7b/0x200 [ 271.508006][ C0] ? __kthread_parkme+0x1a1/0x200 [ 271.508036][ C0] kthread+0x70e/0x8a0 [ 271.508059][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 271.508083][ C0] ? __pfx_kthread+0x10/0x10 [ 271.508106][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 271.508133][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.508150][ C0] ? __pfx_kthread+0x10/0x10 [ 271.508171][ C0] ret_from_fork+0x3fc/0x770 [ 271.508199][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 271.508231][ C0] ? __switch_to_asm+0x39/0x70 [ 271.508248][ C0] ? __switch_to_asm+0x33/0x70 [ 271.508266][ C0] ? __pfx_kthread+0x10/0x10 [ 271.508288][ C0] ret_from_fork_asm+0x1a/0x30 [ 271.508322][ C0] [ 271.508330][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 271.508397][ C0] CPU: 0 UID: 0 PID: 6267 Comm: kworker/u8:11 Not tainted 6.15.0-next-20250604-syzkaller #0 PREEMPT(full) [ 271.508431][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 271.508450][ C0] Workqueue: events_unbound toggle_allocation_gate [ 271.508483][ C0] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 [ 271.508528][ C0] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 60 78 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 0b 74 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 f0 73 0b [ 271.508552][ C0] RSP: 0018:ffffc90003f9f6a0 EFLAGS: 00000293 [ 271.508579][ C0] RAX: ffffffff81b4eab0 RBX: ffff8880b863cb40 RCX: ffff88807aa08000 [ 271.508602][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 271.508621][ C0] RBP: ffffc90003f9f800 R08: ffffffff8fa123f7 R09: 1ffffffff1f4247e [ 271.508644][ C0] R10: dffffc0000000000 R11: fffffbfff1f4247f R12: 1ffff110170e828d [ 271.508668][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b8741468 [ 271.508690][ C0] FS: 0000000000000000(0000) GS:ffff888125c4d000(0000) knlGS:0000000000000000 [ 271.508715][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.508736][ C0] CR2: 00007f7968b7fab8 CR3: 000000000df38000 CR4: 00000000003526f0 [ 271.508751][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 271.508762][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 271.508773][ C0] Call Trace: [ 271.508780][ C0] [ 271.508801][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 271.508827][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 271.508847][ C0] ? kmem_cache_alloc_bulk_noprof+0x148/0x790 [ 271.508868][ C0] ? __pfx___text_poke+0x10/0x10 [ 271.508885][ C0] ? rcu_is_watching+0x15/0xb0 [ 271.508913][ C0] ? trace_contention_end+0x39/0x120 [ 271.508938][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 271.508957][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 271.508987][ C0] smp_text_poke_batch_finish+0x5e0/0x1100 [ 271.509016][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 271.509036][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 271.509062][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 271.509096][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 271.509119][ C0] static_key_enable_cpuslocked+0x128/0x250 [ 271.509141][ C0] static_key_enable+0x1a/0x20 [ 271.509160][ C0] toggle_allocation_gate+0xad/0x240 [ 271.509179][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 271.509199][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 271.509233][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 271.509260][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 271.509288][ C0] process_scheduled_works+0xae1/0x17b0 [ 271.509342][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 271.509385][ C0] worker_thread+0x8a0/0xda0 [ 271.509414][ C0] ? __kthread_parkme+0x7b/0x200 [ 271.509441][ C0] kthread+0x70e/0x8a0 [ 271.509465][ C0] ? __pfx_worker_thread+0x10/0x10 [ 271.509481][ C0] ? __pfx_kthread+0x10/0x10 [ 271.509504][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 271.509531][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.509547][ C0] ? __pfx_kthread+0x10/0x10 [ 271.509569][ C0] ret_from_fork+0x3fc/0x770 [ 271.509597][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 271.509628][ C0] ? __switch_to_asm+0x39/0x70 [ 271.509645][ C0] ? __switch_to_asm+0x33/0x70 [ 271.509663][ C0] ? __pfx_kthread+0x10/0x10 [ 271.509684][ C0] ret_from_fork_asm+0x1a/0x30 [ 271.509719][ C0] [ 420.387226][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 204s! [kworker/u8:11:6267] [ 420.387253][ C0] Modules linked in: [ 420.387272][ C0] irq event stamp: 3238302 [ 420.387279][ C0] hardirqs last enabled at (3238301): [] irqentry_exit+0x74/0x90 [ 420.387307][ C0] hardirqs last disabled at (3238302): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 420.387328][ C0] softirqs last enabled at (3238300): [] __irq_exit_rcu+0xca/0x1f0 [ 420.387357][ C0] softirqs last disabled at (3238279): [] __irq_exit_rcu+0xca/0x1f0 [ 420.387392][ C0] CPU: 0 UID: 0 PID: 6267 Comm: kworker/u8:11 Not tainted 6.15.0-next-20250604-syzkaller #0 PREEMPT(full) [ 420.387427][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 420.387446][ C0] Workqueue: events_unbound toggle_allocation_gate [ 420.387466][ C0] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 [ 420.387494][ C0] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 60 78 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 0b 74 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 f0 73 0b [ 420.387510][ C0] RSP: 0018:ffffc90003f9f6a0 EFLAGS: 00000293 [ 420.387523][ C0] RAX: ffffffff81b4eab0 RBX: ffff8880b863cb40 RCX: ffff88807aa08000 [ 420.387537][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 420.387547][ C0] RBP: ffffc90003f9f800 R08: ffffffff8fa123f7 R09: 1ffffffff1f4247e [ 420.387560][ C0] R10: dffffc0000000000 R11: fffffbfff1f4247f R12: 1ffff110170e828d [ 420.387573][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b8741468 [ 420.387585][ C0] FS: 0000000000000000(0000) GS:ffff888125c4d000(0000) knlGS:0000000000000000 [ 420.387599][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.387611][ C0] CR2: 00007f7968b7fab8 CR3: 000000000df38000 CR4: 00000000003526f0 [ 420.387626][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 420.387636][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 420.387647][ C0] Call Trace: [ 420.387653][ C0] [ 420.387676][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 420.387702][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 420.387722][ C0] ? kmem_cache_alloc_bulk_noprof+0x148/0x790 [ 420.387742][ C0] ? __pfx___text_poke+0x10/0x10 [ 420.387758][ C0] ? rcu_is_watching+0x15/0xb0 [ 420.387785][ C0] ? trace_contention_end+0x39/0x120 [ 420.387810][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 420.387827][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 420.387856][ C0] smp_text_poke_batch_finish+0x5e0/0x1100 [ 420.387880][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 420.387900][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 420.387925][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 420.387958][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 420.387980][ C0] static_key_enable_cpuslocked+0x128/0x250 [ 420.388001][ C0] static_key_enable+0x1a/0x20 [ 420.388018][ C0] toggle_allocation_gate+0xad/0x240 [ 420.388036][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 420.388055][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 420.388088][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 420.388113][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 420.388140][ C0] process_scheduled_works+0xae1/0x17b0 [ 420.388198][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 420.388241][ C0] worker_thread+0x8a0/0xda0 [ 420.388269][ C0] ? __kthread_parkme+0x7b/0x200 [ 420.388299][ C0] kthread+0x70e/0x8a0 [ 420.388322][ C0] ? __pfx_worker_thread+0x10/0x10 [ 420.388337][ C0] ? __pfx_kthread+0x10/0x10 [ 420.388358][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 420.388384][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.388400][ C0] ? __pfx_kthread+0x10/0x10 [ 420.388420][ C0] ret_from_fork+0x3fc/0x770 [ 420.388447][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 420.388477][ C0] ? __switch_to_asm+0x39/0x70 [ 420.388495][ C0] ? __switch_to_asm+0x33/0x70 [ 420.388511][ C0] ? __pfx_kthread+0x10/0x10 [ 420.388531][ C0] ret_from_fork_asm+0x1a/0x30 [ 420.388564][ C0] [ 420.388571][ C0] Sending NMI from CPU 0 to CPUs 1: [ 420.388598][ C1] NMI backtrace for cpu 1 [ 420.388608][ C1] CPU: 1 UID: 0 PID: 30 Comm: kauditd Not tainted 6.15.0-next-20250604-syzkaller #0 PREEMPT(full) [ 420.388624][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 420.388633][ C1] RIP: 0010:_raw_spin_lock_irq+0x5/0xf0 [ 420.388656][ C1] Code: 5c 41 5e 41 5f 5d e9 9a 4f 00 00 cc e8 f4 7d fd ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <48> 89 e5 41 57 41 56 53 48 83 e4 e0 48 83 ec 60 48 89 fb 65 48 8b [ 420.388667][ C1] RSP: 0018:ffffc90000a08d30 EFLAGS: 00000006 [ 420.388679][ C1] RAX: ffffffff81ae742e RBX: ffff8880b8727c88 RCX: ffff88801dae1e00 [ 420.388690][ C1] RDX: 0000000000010000 RSI: ffffffff8be2a7a0 RDI: ffff8880b8727ac0 [ 420.388700][ C1] RBP: ffffc90000a08e90 R08: ffffffff8fa123f7 R09: 1ffffffff1f4247e [ 420.388711][ C1] R10: dffffc0000000000 R11: fffffbfff1f4247f R12: ffff8880777be340 [ 420.388722][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b8727c40 [ 420.388732][ C1] FS: 0000000000000000(0000) GS:ffff888125d4d000(0000) knlGS:0000000000000000 [ 420.388744][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.388753][ C1] CR2: 00007f100c4abf98 CR3: 000000000df38000 CR4: 00000000003526f0 [ 420.388766][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 420.388775][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 420.388784][ C1] Call Trace: [ 420.388789][ C1] [ 420.388795][ C1] __hrtimer_run_queues+0x602/0xc60 [ 420.388826][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 420.388846][ C1] ? read_tsc+0x9/0x20 [ 420.388868][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 420.388902][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 420.388927][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 420.388940][ C1] [ 420.388945][ C1] [ 420.388950][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 420.388970][ C1] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 420.388987][ C1] Code: 48 21 c3 0f 85 e9 01 00 00 e8 65 23 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 56 23 1f 00 eb 06 e8 4f 23 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 1a 9c 82 00 48 8b 1b 48 8b 44 24 [ 420.388999][ C1] RSP: 0018:ffffc90000a67760 EFLAGS: 00000293 [ 420.389010][ C1] RAX: 1ffffffff1d36d37 RBX: ffffffff8e9b69b8 RCX: ffff88801dae1e00 [ 420.389021][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 420.389029][ C1] RBP: ffffc90000a678b0 R08: ffffffff8fa123f7 R09: 1ffffffff1f4247e [ 420.389041][ C1] R10: dffffc0000000000 R11: fffffbfff1f4247f R12: dffffc0000000000 [ 420.389052][ C1] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b6960 [ 420.389072][ C1] ? console_flush_all+0x13a/0xc40 [ 420.389091][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 420.389112][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 420.389132][ C1] console_unlock+0xc4/0x270 [ 420.389147][ C1] ? __pfx_console_unlock+0x10/0x10 [ 420.389162][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 420.389183][ C1] vprintk_emit+0x5b7/0x7a0 [ 420.389199][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 420.389211][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 420.389233][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 420.389264][ C1] _printk+0xcf/0x120 [ 420.389279][ C1] ? __pfx____ratelimit+0x10/0x10 [ 420.389295][ C1] ? __pfx__printk+0x10/0x10 [ 420.389311][ C1] ? netlink_has_listeners+0x77/0x3f0 [ 420.389331][ C1] ? netlink_has_listeners+0x339/0x3f0 [ 420.389349][ C1] kauditd_hold_skb+0x1c8/0x210 [ 420.389367][ C1] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 420.389383][ C1] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 420.389400][ C1] ? __pfx_kauditd_send_multicast_skb+0x10/0x10 [ 420.389418][ C1] kauditd_send_queue+0x2a1/0x2f0 [ 420.389441][ C1] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 420.389458][ C1] ? __pfx_kauditd_send_multicast_skb+0x10/0x10 [ 420.389476][ C1] ? kauditd_thread+0xba/0x9a0 [ 420.389491][ C1] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 420.389508][ C1] kauditd_thread+0x74e/0x9a0 [ 420.389526][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 420.389548][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 420.389571][ C1] ? __pfx_kauditd_thread+0x10/0x10 [ 420.389587][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 420.389605][ C1] ? __kthread_parkme+0x7b/0x200 [ 420.389618][ C1] ? __kthread_parkme+0x1a1/0x200 [ 420.389634][ C1] kthread+0x70e/0x8a0 [ 420.389651][ C1] ? __pfx_kauditd_thread+0x10/0x10 [ 420.389667][ C1] ? __pfx_kthread+0x10/0x10 [ 420.389683][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 420.389704][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.389717][ C1] ? __pfx_kthread+0x10/0x10 [ 420.389733][ C1] ret_from_fork+0x3fc/0x770 [ 420.389754][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 420.389776][ C1] ? __switch_to_asm+0x39/0x70 [ 420.389790][ C1] ? __switch_to_asm+0x33/0x70 [ 420.389803][ C1] ? __pfx_kthread+0x10/0x10 [ 420.389819][ C1] ret_from_fork_asm+0x1a/0x30 [ 420.389841][ C1] [ 420.390597][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 420.390612][ C0] CPU: 0 UID: 0 PID: 6267 Comm: kworker/u8:11 Tainted: G L 6.15.0-next-20250604-syzkaller #0 PREEMPT(full) [ 420.390636][ C0] Tainted: [L]=SOFTLOCKUP [ 420.390643][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 420.390654][ C0] Workqueue: events_unbound toggle_allocation_gate [ 420.390674][ C0] Call Trace: [ 420.390681][ C0] [ 420.390689][ C0] dump_stack_lvl+0x99/0x250 [ 420.390706][ C0] ? __asan_memcpy+0x40/0x70 [ 420.390732][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.390750][ C0] ? __pfx__printk+0x10/0x10 [ 420.390781][ C0] panic+0x2db/0x790 [ 420.390813][ C0] ? __pfx_panic+0x10/0x10 [ 420.390840][ C0] ? nmi_backtrace_stall_check+0x433/0x440 [ 420.390875][ C0] watchdog_timer_fn+0x862/0x870 [ 420.390905][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 420.390932][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 420.390960][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 420.390993][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 420.391019][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 420.391044][ C0] __hrtimer_run_queues+0x4dd/0xc60 [ 420.391089][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 420.391115][ C0] ? read_tsc+0x9/0x20 [ 420.391146][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 420.391202][ C0] __sysvec_apic_timer_interrupt+0x108/0x410 [ 420.391233][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 420.391251][ C0] [ 420.391257][ C0] [ 420.391266][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 420.391284][ C0] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 [ 420.391312][ C0] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 60 78 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 0b 74 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 f0 73 0b [ 420.391327][ C0] RSP: 0018:ffffc90003f9f6a0 EFLAGS: 00000293 [ 420.391343][ C0] RAX: ffffffff81b4eab0 RBX: ffff8880b863cb40 RCX: ffff88807aa08000 [ 420.391357][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 420.391368][ C0] RBP: ffffc90003f9f800 R08: ffffffff8fa123f7 R09: 1ffffffff1f4247e [ 420.391382][ C0] R10: dffffc0000000000 R11: fffffbfff1f4247f R12: 1ffff110170e828d [ 420.391395][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b8741468 [ 420.391416][ C0] ? smp_call_function_many_cond+0xf80/0x12d0 [ 420.391463][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 420.391490][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 420.391510][ C0] ? kmem_cache_alloc_bulk_noprof+0x148/0x790 [ 420.391531][ C0] ? __pfx___text_poke+0x10/0x10 [ 420.391548][ C0] ? rcu_is_watching+0x15/0xb0 [ 420.391575][ C0] ? trace_contention_end+0x39/0x120 [ 420.391601][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 420.391620][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 420.391649][ C0] smp_text_poke_batch_finish+0x5e0/0x1100 [ 420.391674][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 420.391695][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 420.391720][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 420.391754][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 420.391777][ C0] static_key_enable_cpuslocked+0x128/0x250 [ 420.391799][ C0] static_key_enable+0x1a/0x20 [ 420.391817][ C0] toggle_allocation_gate+0xad/0x240 [ 420.391836][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 420.391856][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 420.391890][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 420.391916][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 420.391944][ C0] process_scheduled_works+0xae1/0x17b0 [ 420.391997][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 420.392040][ C0] worker_thread+0x8a0/0xda0 [ 420.392069][ C0] ? __kthread_parkme+0x7b/0x200 [ 420.392096][ C0] kthread+0x70e/0x8a0 [ 420.392119][ C0] ? __pfx_worker_thread+0x10/0x10 [ 420.392136][ C0] ? __pfx_kthread+0x10/0x10 [ 420.392158][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 420.392198][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.392215][ C0] ? __pfx_kthread+0x10/0x10 [ 420.392236][ C0] ret_from_fork+0x3fc/0x770 [ 420.392264][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 420.392295][ C0] ? __switch_to_asm+0x39/0x70 [ 420.392312][ C0] ? __switch_to_asm+0x33/0x70 [ 420.392330][ C0] ? __pfx_kthread+0x10/0x10 [ 420.392352][ C0] ret_from_fork_asm+0x1a/0x30 [ 420.392385][ C0] [ 421.516938][ C0] Shutting down cpus with NMI [ 421.517259][ C0] Kernel Offset: disabled