last executing test programs: 15.551008387s ago: executing program 1 (id=86): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x208101, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xf, [0x5, 0xf, 0x6, 0xd, 0x10, 0x1, 0x6, 0x4, 0x1, 0x8, 0xa, 0x5, 0xc, 0x9, 0x3, 0x7], 0x0, [0x80, 0x49, 0xa, 0xfffb, 0x9, 0x7f, 0x1, 0x8, 0x1, 0x7, 0x0, 0x8, 0x8, 0xc2d, 0xfffd, 0x4], [0x4, 0x1ff, 0x4, 0x315e, 0x8, 0x6, 0x7ff, 0x9, 0x7, 0x7, 0x37, 0x3, 0x1, 0xc, 0x28, 0x2]}}]}}]}, 0x8c}}, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 13.880216213s ago: executing program 1 (id=93): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8000c62) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 11.989402474s ago: executing program 1 (id=100): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002080)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000780)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 10.800422171s ago: executing program 1 (id=105): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000", @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x39, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000004080002"], 0x190}}, 0x0) 10.10963806s ago: executing program 1 (id=109): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="0100fdfff7ff000000000800000030000280280003800c000180080001000800000018000180120002006d61785f62617463685f74696d65000004000100180001801400020073797a5f74756e"], 0x5c}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) 9.845712045s ago: executing program 1 (id=110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c801", @ANYRES16, @ANYBLOB="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"], 0x1c8}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r5, 0xb}}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) 8.681898594s ago: executing program 4 (id=115): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) capset(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) 8.083704048s ago: executing program 4 (id=118): pivot_root(0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 6.94078541s ago: executing program 4 (id=122): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000000c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1fff}]}) personality(0x400000b) 5.916090595s ago: executing program 4 (id=123): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x10) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) unshare(0x20060400) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac10009"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0xffffd000) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200002100000000000000", @ANYRES32, @ANYBLOB="00001900000000ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xffffffffffffffff) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRESOCT=0x0, @ANYRES32=r0, @ANYBLOB="010000000800"], 0x50) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20008810) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a0108"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) r11 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r11, 0x400, 0x1) 5.799973414s ago: executing program 2 (id=124): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x1, 0x803, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 5.003702284s ago: executing program 0 (id=127): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = socket$rds(0x15, 0x5, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x101) bind$rds(r2, &(0x7f0000000100)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000540)='sched_kthread_work_execute_start\x00', r5, 0x0, 0x80000000}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) syz_io_uring_submit(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r8 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x3, 0x400, 0x3, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r4, 0x20, &(0x7f00000004c0)={&(0x7f0000000200)=""/126, 0x7e, 0x0, &(0x7f0000000280)=""/38, 0x26}}, 0x10) io_uring_enter(r8, 0x47fa, 0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r7, 0x0, 0x0, 0x0, 0x64040011, 0x1}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="0900000002000000040000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000003094e3039db3818700000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae000000952584b5c9e769ea32823c276f21530aefcdf4deaa857f0ceeb92bf634afd38983c5a413e79d509ba01a6e8d"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r12}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5b5, &(0x7f0000000a00)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) 4.797140906s ago: executing program 2 (id=128): write$tun(0xffffffffffffffff, 0x0, 0x32) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x18) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 4.546722054s ago: executing program 3 (id=129): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0xffffffff, 0x0, 0xfffffffe, 0x160}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r1, 0x47fa, 0xfd5d, 0x200000000000000, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r4, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1}) 4.01692987s ago: executing program 2 (id=130): fchmod(0xffffffffffffffff, 0x43) 3.831081665s ago: executing program 0 (id=131): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2060, 0x10) fcntl$setlease(r1, 0x400, 0x0) utime(&(0x7f0000000100)='./file0\x00', 0x0) 3.650615035s ago: executing program 3 (id=132): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x789, &(0x7f0000000fc0)="$eJzs3c1rXFUbAPDnTpKmTfu+iSBo3RgQNFA6MTW2CgoVFyJYKOjadphMQ80kUzKT0oSALSK4EVRcCLrpyoUfdefWj63+Fy7EUjUtVlxI5E5m0kkzk07SZCaa3w9u5px77+ScZ879ODPncm8Ae9Zw+icTcTgi3ksiBmvzk4joq6Z6I06urHd7aTGfTkksL7/6W1Jd59bSYj4a3pM6WMs8HBHfvR1xJLO+3PL8wlSuWCzM1vKjlekLo+X5haPnp3OThcnCzPGx8fFjJ54+cXz7Yv3jx4VD199/6YkvT/711kPX3v0+iZNxqLasMY4te35tdjiGa59JX/oRrvHifRe2uyTdrgBbku6aPSt7eRyOweippgCA/7I3I2IZANhjEud/ANhj6r8D3FpazNen7v4i0Vk3XoiI/Svx18c3V5b01sbs9lfHQQduJWtGRpKIGNqG8ocj4pOvX/88nWK7xiEB2nD5SkScHRpef/xP1l2zsFlPbrBsX+11+K75aflGoKEzvkn7P8806/9lVvs/0aT/099k392KZvt/EnF5dcaBbShkAzc+jXiu4dq22w3x1wz11HL/q/b5+pJz54uF9Nj2/4gYib7+ND+2QRkjN/++2WpZY//v9w/e+CwtP329s0bml97+te+ZyFVy9xNzoxtXIh7pbRZ/str+SYv+7+k2y3j52Xc+brUsjT+Ntz6ti7/a/jt3Rli+GvF40/a/c0VbsuH1iaPVzWG0vlE08dVPHw20Kr+x/dMpLb/+XaAT0vYf2Dj+oaTxes3y5sv44ergt62W3Tv+5tv/vuS1arrej7iUq1RmxyL2Ja+sn3/sznsv5R6tpVbWT+Mfeaz5/r/R9p9+JzzbZvy913/9Yuvx76w0/olNtf/mE9duT/W0Kr+99h+vpkZqc9o5/rVbwfv57AAAAAAAAAAAAAAAAAAAAAAAAACgXZmIOBRJJruazmSy2ZVneD8YA5liqVw5cq40NzMR1WdlD0Vfpn6ry8GG+6GO1e6HX88fuyv/VEQ8EBEf9h9I6vdRnOhy7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQd7DF8/9TP/d3u3YAwI7Z3+0KAAAd5/wPAHuP8z8A7D3tnf97drweAEDn+P4PAHuP8z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA77PSpU+m0/OfSYj7NT1ycn5sqXTw6UShPZafn8tl8afZCdrJUmiwWsvnS9L3+X7FUujAeM3OXRiuFcmW0PL9wZro0N1M5c346N1k4U+jrSFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDnl+YWpXLFYmJXYQmJ5d1Sj+4me2ua0W+rT0USyO6qxzYkuH5gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/iX+CQAA//8vWSHt") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0xce342, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) 3.408425559s ago: executing program 2 (id=133): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000700)='./file2\x00', 0x0, &(0x7f0000000740)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$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") statfs(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=""/189) 3.139817345s ago: executing program 0 (id=134): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000e7ef90030000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x76}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) quotactl$Q_GETFMT(0xffffffff80000401, 0x0, 0x0, 0x0) 2.42098895s ago: executing program 3 (id=135): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000001f40)=""/4079, 0x38, 0xfef, 0x8}, 0x28) 2.280577704s ago: executing program 0 (id=136): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000300)={0x0, 0xff61}, 0x8) 1.670524569s ago: executing program 2 (id=137): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x15, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @generic={0x9, 0x9, 0xa, 0x10, 0xfffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xe, 0x1, 0xfd5c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0x8}, 0x94) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0x100000000}, 0x18) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) sendto$inet(r1, 0x0, 0x0, 0x4004055, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x89, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "fc79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 1.577760082s ago: executing program 0 (id=138): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1e8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x1a0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x188, 0x1, [@m_nat={0x104, 0x0, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x6, 0x10000000, 0x80000001}, @empty, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x6, 0x6, 0x6979, 0x28}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x0, 0x6, 0x3, 0x9f}, @empty, @multicast1}}]}, {0x61, 0x6, "525dfeac86ce84c0651b02d8cfcfb2e8ebe4fa883a2e8593252c80a728a5f4291635480f6cbc84b2432cef684200149d9d5edd825c13eb2d4d0d699ac1ca3cc36e4a09f088dc445f0783cc90f1d501855767e6d7c186ca9b4e0cb1c4bf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_simple={0x48, 0x1e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x4, 0x10000000, 0x633, 0xe2d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x38, 0x13, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x4}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.471885792s ago: executing program 3 (id=139): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$nci(r0, 0x0, 0xfffffeea) 878.842298ms ago: executing program 4 (id=140): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x10007ffffffff}, 0x18) recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x40006040, 0x0) 696.106465ms ago: executing program 0 (id=141): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x401}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xce9d8d60ab13d530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) 626.88199ms ago: executing program 3 (id=142): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private2, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107, r4}) 537.723539ms ago: executing program 2 (id=143): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x3, 0x90, [0x200000000b80, 0x0, 0x0, 0x200000000bb0, 0x200000000d9c], 0x0, 0x0, &(0x7f0000000b80)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0xe0) 32.025384ms ago: executing program 4 (id=144): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000600)=ANY=[], 0x0) 0s ago: executing program 3 (id=145): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0xce342, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.190' (ED25519) to the list of known hosts. [ 201.593551][ T5778] cgroup: Unknown subsys name 'net' [ 201.711641][ T5778] cgroup: Unknown subsys name 'cpuset' [ 201.729962][ T5778] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 208.956501][ T5778] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 214.639766][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.648901][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.657775][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.678086][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.704787][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.731374][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.745583][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.756857][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.767093][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.773366][ T5096] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.780952][ T5807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.783153][ T5096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.796265][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.800312][ T5096] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.848077][ T5807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.859469][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.862679][ T5804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.879027][ T5804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.906615][ T5804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.917368][ T5804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.033271][ T5804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.062845][ T5804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.063029][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.084158][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.085925][ T5804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.537555][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 216.849879][ T5803] Bluetooth: hci2: command tx timeout [ 216.925583][ T5803] Bluetooth: hci0: command tx timeout [ 216.931234][ T5803] Bluetooth: hci1: command tx timeout [ 217.004424][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 217.159656][ T5096] Bluetooth: hci3: command tx timeout [ 217.240134][ T5096] Bluetooth: hci4: command tx timeout [ 217.601761][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 217.702518][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 217.727460][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.735222][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.742902][ T5794] bridge_slave_0: entered allmulticast mode [ 217.753388][ T5794] bridge_slave_0: entered promiscuous mode [ 217.829788][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.838028][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.845929][ T5794] bridge_slave_1: entered allmulticast mode [ 217.856313][ T5794] bridge_slave_1: entered promiscuous mode [ 217.901134][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 218.293247][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.378787][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.744567][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.752524][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.762665][ T5799] bridge_slave_0: entered allmulticast mode [ 218.773085][ T5799] bridge_slave_0: entered promiscuous mode [ 218.807177][ T5794] team0: Port device team_slave_0 added [ 218.819410][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.827467][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.835540][ T5799] bridge_slave_1: entered allmulticast mode [ 218.851489][ T5799] bridge_slave_1: entered promiscuous mode [ 218.887879][ T5794] team0: Port device team_slave_1 added [ 218.925534][ T5096] Bluetooth: hci2: command tx timeout [ 219.003772][ T5096] Bluetooth: hci1: command tx timeout [ 219.009902][ T5096] Bluetooth: hci0: command tx timeout [ 219.207002][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.252855][ T5803] Bluetooth: hci3: command tx timeout [ 219.316101][ T5803] Bluetooth: hci4: command tx timeout [ 219.344453][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.352322][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.361082][ T5798] bridge_slave_0: entered allmulticast mode [ 219.370329][ T5798] bridge_slave_0: entered promiscuous mode [ 219.392606][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.402577][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.411288][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.419060][ T5798] bridge_slave_1: entered allmulticast mode [ 219.429258][ T5798] bridge_slave_1: entered promiscuous mode [ 219.476077][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.483234][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.509700][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.642656][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.650569][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.658417][ T5801] bridge_slave_0: entered allmulticast mode [ 219.667397][ T5801] bridge_slave_0: entered promiscuous mode [ 219.682685][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.690253][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.716742][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.729262][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.737179][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.744730][ T5805] bridge_slave_0: entered allmulticast mode [ 219.754314][ T5805] bridge_slave_0: entered promiscuous mode [ 219.836336][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.843939][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.851926][ T5801] bridge_slave_1: entered allmulticast mode [ 219.862225][ T5801] bridge_slave_1: entered promiscuous mode [ 219.938557][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.946370][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.953845][ T5805] bridge_slave_1: entered allmulticast mode [ 219.963698][ T5805] bridge_slave_1: entered promiscuous mode [ 219.982365][ T5799] team0: Port device team_slave_0 added [ 220.045229][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.073829][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.127386][ T5799] team0: Port device team_slave_1 added [ 220.187326][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.243217][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.380046][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.443594][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.471021][ T5794] hsr_slave_0: entered promiscuous mode [ 220.481986][ T5794] hsr_slave_1: entered promiscuous mode [ 220.502221][ T5798] team0: Port device team_slave_0 added [ 220.682079][ T5798] team0: Port device team_slave_1 added [ 220.699222][ T5801] team0: Port device team_slave_0 added [ 220.709612][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.717060][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.743399][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.906677][ T5801] team0: Port device team_slave_1 added [ 220.918300][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.926577][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.953195][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.973108][ T5805] team0: Port device team_slave_0 added [ 221.002096][ T5803] Bluetooth: hci2: command tx timeout [ 221.075277][ T5803] Bluetooth: hci0: command tx timeout [ 221.080931][ T5803] Bluetooth: hci1: command tx timeout [ 221.113856][ T5805] team0: Port device team_slave_1 added [ 221.223459][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.231668][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.258560][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.306780][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.313945][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.315217][ T5096] Bluetooth: hci3: command tx timeout [ 221.340427][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.397419][ T5096] Bluetooth: hci4: command tx timeout [ 221.422227][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.431105][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.458667][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.516941][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.524093][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.550366][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.680042][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.687428][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.713965][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.758162][ T5799] hsr_slave_0: entered promiscuous mode [ 221.768069][ T5799] hsr_slave_1: entered promiscuous mode [ 221.777828][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 221.783770][ T5799] Cannot create hsr debugfs directory [ 221.829235][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.836515][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.862988][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.131750][ T5798] hsr_slave_0: entered promiscuous mode [ 222.141601][ T5798] hsr_slave_1: entered promiscuous mode [ 222.150292][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 222.156273][ T5798] Cannot create hsr debugfs directory [ 222.361827][ T5805] hsr_slave_0: entered promiscuous mode [ 222.372749][ T5805] hsr_slave_1: entered promiscuous mode [ 222.382199][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 222.388272][ T5805] Cannot create hsr debugfs directory [ 222.435088][ T5801] hsr_slave_0: entered promiscuous mode [ 222.446177][ T5801] hsr_slave_1: entered promiscuous mode [ 222.454310][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 222.460513][ T5801] Cannot create hsr debugfs directory [ 223.082265][ T5096] Bluetooth: hci2: command tx timeout [ 223.166500][ T5096] Bluetooth: hci1: command tx timeout [ 223.172146][ T5096] Bluetooth: hci0: command tx timeout [ 223.397314][ T5096] Bluetooth: hci3: command tx timeout [ 223.484411][ T5096] Bluetooth: hci4: command tx timeout [ 223.684742][ T5794] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 223.797726][ T5794] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 223.912082][ T5794] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 223.969894][ T5794] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 224.141126][ T5799] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 224.178765][ T5799] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 224.206965][ T5799] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 224.229411][ T5799] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 224.414446][ T5798] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 224.544329][ T5798] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 224.582069][ T5798] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 224.643286][ T5798] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 224.921423][ T5805] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 225.073019][ T5805] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 225.098929][ T5805] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 225.127936][ T5805] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 225.187488][ T5801] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 225.289227][ T5801] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 225.391580][ T5801] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 225.443108][ T5801] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 225.539763][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.816929][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.897701][ T3909] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.905382][ T3909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.945824][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.008951][ T3072] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.016706][ T3072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.328487][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.468534][ T4026] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.476216][ T4026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.570540][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.620221][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.634953][ T4026] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.642545][ T4026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.920242][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.050259][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.113588][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.121385][ T4313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.202219][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.209959][ T4313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.227746][ T4313] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.235456][ T4313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.326285][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.440342][ T4313] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.448127][ T4313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.523454][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.698536][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.706313][ T4313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.734772][ T4313] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.742745][ T4313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.103683][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.615157][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.805505][ T5794] veth0_vlan: entered promiscuous mode [ 229.944019][ T5794] veth1_vlan: entered promiscuous mode [ 230.222651][ T5799] veth0_vlan: entered promiscuous mode [ 230.278446][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.383753][ T5799] veth1_vlan: entered promiscuous mode [ 230.428140][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.543639][ T5794] veth0_macvtap: entered promiscuous mode [ 230.573565][ T5794] veth1_macvtap: entered promiscuous mode [ 230.743021][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.883484][ T5799] veth0_macvtap: entered promiscuous mode [ 230.947713][ T5798] veth0_vlan: entered promiscuous mode [ 230.992363][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.016176][ T5799] veth1_macvtap: entered promiscuous mode [ 231.070509][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.117282][ T5798] veth1_vlan: entered promiscuous mode [ 231.272043][ T3909] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.323803][ T5805] veth0_vlan: entered promiscuous mode [ 231.357199][ T3909] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.394260][ T3909] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.431147][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.478303][ T3909] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.538425][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.605639][ T5805] veth1_vlan: entered promiscuous mode [ 231.694501][ T5798] veth0_macvtap: entered promiscuous mode [ 231.709187][ T4313] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.774372][ T4313] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.809593][ T5798] veth1_macvtap: entered promiscuous mode [ 231.833381][ T4313] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.921167][ T4313] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.056316][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.098977][ T5805] veth0_macvtap: entered promiscuous mode [ 232.156462][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.201853][ T5805] veth1_macvtap: entered promiscuous mode [ 232.318976][ T4053] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.364232][ T4053] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.408994][ T4053] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.481959][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.504236][ T3941] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.589032][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.776750][ T3072] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.828859][ T3072] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.899015][ T3072] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.972601][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.068008][ T5801] veth0_vlan: entered promiscuous mode [ 234.194749][ T5801] veth1_vlan: entered promiscuous mode [ 234.573975][ T5801] veth0_macvtap: entered promiscuous mode [ 234.661107][ T5801] veth1_macvtap: entered promiscuous mode [ 234.938407][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.945475][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 235.010386][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.072298][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.176230][ T4211] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.229838][ T4211] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.270351][ T4211] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.318697][ T4211] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.500265][ T3941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.508728][ T3941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.791794][ T4053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.800853][ T4053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.810705][ T3941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.822379][ T3941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.089653][ T3072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.089755][ T4313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.097855][ T3072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.106700][ T4313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.441275][ T5794] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 240.476410][ T3013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.484475][ T3013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.891028][ T3013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.899406][ T3013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.156825][ T4053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.170335][ T4053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.701368][ T30] audit: type=1326 audit(1761853186.678:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 241.846686][ T30] audit: type=1326 audit(1761853186.728:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 241.868925][ T30] audit: type=1326 audit(1761853186.728:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 242.715593][ T4026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.723911][ T4026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.170723][ T4053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.179110][ T4053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.493619][ T5998] loop0: detected capacity change from 0 to 512 [ 243.573034][ T5998] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 243.766486][ T30] audit: type=1800 audit(1761853188.748:5): pid=5998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9" name="file1" dev="loop0" ino=1048605 res=0 errno=0 [ 243.874473][ T5998] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 243.927250][ T5998] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 243.996092][ T5998] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 249.968050][ T30] audit: type=1326 audit(1761853194.938:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.0.31" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 249.996085][ T30] audit: type=1326 audit(1761853194.948:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.0.31" exe="/root/syz-executor" sig=0 arch=40000003 syscall=349 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 250.018397][ T30] audit: type=1326 audit(1761853194.948:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.0.31" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 250.403639][ T30] audit: type=1326 audit(1761853195.068:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.0.31" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 252.807487][ T6057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.33'. [ 253.178010][ T6059] loop4: detected capacity change from 0 to 512 [ 254.228767][ T6059] ------------[ cut here ]------------ [ 254.234447][ T6059] EA inode 11 i_nlink=2 [ 254.235946][ T6059] WARNING: CPU: 1 PID: 6059 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x711/0x900 [ 254.251169][ T6059] Modules linked in: [ 254.255440][ T6059] CPU: 1 UID: 0 PID: 6059 Comm: syz.4.34 Not tainted syzkaller #0 PREEMPT(none) [ 254.264983][ T6059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 254.285489][ T6059] RIP: 0010:ext4_xattr_inode_update_ref+0x711/0x900 [ 254.292490][ T6059] Code: 00 00 00 00 4d 85 ed 0f 85 e6 01 00 00 45 85 ff 0f 85 ee 01 00 00 48 c7 c7 ef 65 ba 91 48 8b 75 d0 8b 55 c0 e8 90 2b dd fd 90 <0f> 0b 90 90 4c 8b 6d a8 4c 8b 75 c8 4c 8b 7d b0 e9 6c fe ff ff e8 [ 254.315181][ T6059] RSP: 0018:ffff888052ec6d50 EFLAGS: 00010283 [ 254.321645][ T6059] RAX: ffffffff81208325 RBX: ffff8881152a4da0 RCX: 0000000000080000 [ 254.330070][ T6059] RDX: ffffc90009806000 RSI: 00000000000057c0 RDI: 00000000000057c1 [ 254.338627][ T6059] RBP: ffff888052ec6dd8 R08: ffffea000000000f R09: 0000000000000000 [ 254.347054][ T6059] R10: ffff888237aba028 R11: ffff88823f273c80 R12: 0000000000000000 [ 254.355351][ T6059] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 254.363525][ T6059] FS: 0000000000000000(0000) GS:ffff8881aae51000(0063) knlGS:00000000f542db40 [ 254.372819][ T6059] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 254.388560][ T6059] CR2: 00000000f73b7c4c CR3: 000000004fd8a000 CR4: 00000000003526f0 [ 254.399175][ T6059] Call Trace: [ 254.402643][ T6059] [ 254.406032][ T6059] ext4_xattr_set_entry+0x1169/0x3440 [ 254.411833][ T6059] ext4_xattr_ibody_set+0x437/0xa40 [ 254.417588][ T6059] ext4_expand_extra_isize_ea+0x2ea9/0x3bb0 [ 254.423982][ T6059] __ext4_expand_extra_isize+0x571/0x6f0 [ 254.430122][ T6059] __ext4_mark_inode_dirty+0x654/0x970 [ 254.436041][ T6059] ext4_evict_inode+0x171c/0x2480 [ 254.441408][ T6059] ? __pfx_ext4_evict_inode+0x10/0x10 [ 254.447189][ T6059] evict+0x700/0xd00 [ 254.451384][ T6059] ? kmsan_get_metadata+0xfb/0x160 [ 254.457008][ T6059] iput+0xba3/0xfa0 [ 254.461104][ T6059] ext4_process_orphan+0x49a/0x520 [ 254.466907][ T6059] ext4_orphan_cleanup+0x10a6/0x1e30 [ 254.472545][ T6059] ext4_fill_super+0xa788/0xb010 [ 254.487144][ T6059] get_tree_bdev_flags+0x6e6/0x920 [ 254.492588][ T6059] ? __pfx_ext4_fill_super+0x10/0x10 [ 254.500605][ T6059] ? __pfx_ext4_fill_super+0x10/0x10 [ 254.506454][ T6059] ? __pfx_ext4_get_tree+0x10/0x10 [ 254.511923][ T6059] get_tree_bdev+0x38/0x50 [ 254.516819][ T6059] ext4_get_tree+0x35/0x40 [ 254.521581][ T6059] vfs_get_tree+0xb3/0x5c0 [ 254.526544][ T6059] do_new_mount+0x839/0x15f0 [ 254.531492][ T6059] ? kmsan_get_metadata+0xfb/0x160 [ 254.537080][ T6059] path_mount+0x747/0x1fb0 [ 254.541903][ T6059] __se_sys_mount+0x6f7/0x7e0 [ 254.547136][ T6059] __ia32_sys_mount+0xe2/0x150 [ 254.552211][ T6059] ia32_sys_call+0x2c16/0x4310 [ 254.557568][ T6059] __do_fast_syscall_32+0xb0/0x150 [ 254.563034][ T6059] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 254.569301][ T6059] do_fast_syscall_32+0x38/0x80 [ 254.574497][ T6059] do_SYSENTER_32+0x1f/0x30 [ 254.579474][ T6059] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 254.597934][ T6059] RIP: 0023:0xf703d539 [ 254.602342][ T6059] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 254.623669][ T6059] RSP: 002b:00000000f542d3b0 EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 254.632610][ T6059] RAX: ffffffffffffffda RBX: 00000000f542d410 RCX: 00000000800001c0 [ 254.640959][ T6059] RDX: 0000000080000180 RSI: 0000000001a08700 RDI: 00000000f542d450 [ 254.649335][ T6059] RBP: 00000000f542d410 R08: 0000000000000000 R09: 0000000000000000 [ 254.657873][ T6059] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 254.666751][ T6059] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 254.675149][ T6059] [ 254.678395][ T6059] ---[ end trace 0000000000000000 ]--- [ 254.697361][ T6059] EXT4-fs (loop4): 1 orphan inode deleted [ 254.706109][ T6059] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.880153][ T6038] Set syz1 is full, maxelem 65536 reached [ 255.629141][ T5801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.351352][ T6075] Zero length message leads to an empty skb [ 257.153540][ T6082] loop3: detected capacity change from 0 to 512 [ 257.305229][ T6088] loop4: detected capacity change from 0 to 128 [ 257.408044][ T6082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.421450][ T6082] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.514340][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 258.442332][ T6097] syz.1.48 uses obsolete (PF_INET,SOCK_PACKET) [ 258.459017][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.490075][ T6113] process 'syz.2.56' launched './file0' with NULL argv: empty string added [ 261.528019][ T6121] random: crng reseeded on system resumption [ 261.810352][ T6125] loop2: detected capacity change from 0 to 512 [ 262.010864][ T6125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.024431][ T6125] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.652092][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.278164][ T6138] netlink: 'syz.2.66': attribute type 10 has an invalid length. [ 263.292757][ T6138] batadv0: entered allmulticast mode [ 263.320666][ T6138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.339669][ T6138] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 263.608509][ T6138] netlink: 'syz.2.66': attribute type 10 has an invalid length. [ 263.616698][ T6138] netlink: 40 bytes leftover after parsing attributes in process `syz.2.66'. [ 263.626342][ T6138] batadv0: entered promiscuous mode [ 263.724731][ T6138] bond0: (slave batadv0): Releasing backup interface [ 263.750262][ T6138] bridge0: port 3(batadv0) entered blocking state [ 263.757564][ T6138] bridge0: port 3(batadv0) entered disabled state [ 263.828509][ T3941] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 263.838078][ T3941] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 264.009110][ T6147] loop1: detected capacity change from 0 to 1024 [ 264.043916][ T6147] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 264.056004][ T6147] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 264.122487][ T6147] JBD2: no valid journal superblock found [ 264.128963][ T6147] EXT4-fs (loop1): Could not load journal inode [ 264.477324][ T30] audit: type=1326 audit(1761853209.441:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 264.501070][ T30] audit: type=1326 audit(1761853209.441:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 264.524109][ T30] audit: type=1326 audit(1761853209.441:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 264.555751][ T30] audit: type=1326 audit(1761853209.441:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 264.583048][ T30] audit: type=1326 audit(1761853209.441:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 264.791062][ T30] audit: type=1326 audit(1761853209.621:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 264.813490][ T30] audit: type=1326 audit(1761853209.621:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 264.841373][ T30] audit: type=1326 audit(1761853209.641:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 264.868213][ T30] audit: type=1326 audit(1761853209.641:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 264.893960][ T30] audit: type=1326 audit(1761853209.651:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 265.613813][ T6160] loop0: detected capacity change from 0 to 512 [ 265.838151][ T6160] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.856952][ T6160] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.451341][ T5799] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.646496][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.80'. [ 267.615895][ T4053] batman_adv: batadv0: MLD Querier appeared [ 268.157348][ T6187] tipc: Started in network mode [ 268.163126][ T6187] tipc: Node identity 8ebd3e7d55, cluster identity 4711 [ 268.171819][ T6187] tipc: Enabled bearer , priority 0 [ 268.257289][ T6192] syzkaller0: entered promiscuous mode [ 268.263335][ T6192] syzkaller0: entered allmulticast mode [ 268.495870][ T6187] tipc: Resetting bearer [ 268.586270][ T6186] tipc: Resetting bearer [ 268.659968][ T6186] tipc: Disabling bearer [ 269.006161][ T6196] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 269.166197][ T6198] loop3: detected capacity change from 0 to 512 [ 269.435064][ T6198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.448661][ T6198] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.936085][ T6208] loop1: detected capacity change from 0 to 512 [ 270.108052][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.174417][ T6208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.191790][ T6208] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.334061][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 270.334266][ T30] audit: type=1326 audit(1761853215.299:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.0.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 270.448112][ T30] audit: type=1326 audit(1761853215.399:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.0.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=344 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 270.475825][ T30] audit: type=1326 audit(1761853215.399:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.0.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 270.501519][ T30] audit: type=1326 audit(1761853215.399:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.0.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 270.727495][ T30] audit: type=1326 audit(1761853215.499:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.0.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 270.750302][ T30] audit: type=1326 audit(1761853215.509:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.0.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 270.778429][ T30] audit: type=1326 audit(1761853215.509:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.0.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 270.802867][ T30] audit: type=1326 audit(1761853215.509:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.0.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 270.825290][ T30] audit: type=1326 audit(1761853215.509:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.0.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 270.847562][ T30] audit: type=1326 audit(1761853215.519:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.0.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 271.191600][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.542933][ T6231] netlink: 'syz.4.102': attribute type 2 has an invalid length. [ 272.551189][ T6231] netlink: 16 bytes leftover after parsing attributes in process `syz.4.102'. [ 272.768880][ T6238] loop3: detected capacity change from 0 to 1024 [ 272.848243][ T6238] EXT4-fs: Ignoring removed oldalloc option [ 272.855426][ T6238] EXT4-fs: Ignoring removed bh option [ 273.023795][ T6238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.090213][ T6257] Driver unsupported XDP return value 0 on prog (id 56) dev N/A, expect packet loss! [ 275.461391][ T6272] mmap: syz.4.118 (6272) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 275.703631][ T6270] loop2: detected capacity change from 0 to 2048 [ 275.717325][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.611265][ T6270] EXT4-fs (loop2): failed to initialize system zone (-117) [ 276.641028][ T6270] EXT4-fs (loop2): mount failed [ 276.851994][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 276.852084][ T30] audit: type=1326 audit(1761853221.829:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 276.881258][ T30] audit: type=1326 audit(1761853221.829:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 276.909629][ T30] audit: type=1326 audit(1761853221.879:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 276.933714][ T30] audit: type=1326 audit(1761853221.879:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 277.626322][ T6286] loop3: detected capacity change from 0 to 1024 [ 277.646718][ T6286] ======================================================= [ 277.646718][ T6286] WARNING: The mand mount option has been deprecated and [ 277.646718][ T6286] and is ignored by this kernel. Remove the mand [ 277.646718][ T6286] option from the mount to silence this warning. [ 277.646718][ T6286] ======================================================= [ 277.790281][ T6292] serio: Serial port ptm0 [ 277.853074][ T6286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.494227][ T6298] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 278.590352][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.622532][ T6298] loop0: detected capacity change from 0 to 1024 [ 278.705284][ T6298] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 278.717096][ T6298] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 278.802449][ T6298] JBD2: no valid journal superblock found [ 278.808871][ T6298] EXT4-fs (loop0): Could not load journal inode [ 279.900450][ T6309] loop3: detected capacity change from 0 to 2048 [ 280.015367][ T6309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.157754][ T30] audit: type=1800 audit(1761853225.139:52): pid=6309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.132" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 280.415143][ T30] audit: type=1326 audit(1761853225.389:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6315 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 280.523763][ T30] audit: type=1326 audit(1761853225.419:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6315 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=40000003 syscall=131 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 280.546271][ T30] audit: type=1326 audit(1761853225.429:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6315 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 280.657535][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.929832][ T6311] loop2: detected capacity change from 0 to 8192 [ 280.966407][ T6311] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 282.220619][ T6330] syz_tun: entered allmulticast mode [ 282.290200][ T6329] syz_tun: left allmulticast mode [ 282.611190][ T6332] Bluetooth: MGMT ver 1.23 [ 282.907427][ T6336] tipc: Started in network mode [ 282.912636][ T6336] tipc: Node identity ac14140f, cluster identity 4711 [ 282.922961][ T6336] tipc: New replicast peer: 255.255.255.83 [ 282.930479][ T6336] tipc: Enabled bearer , priority 10 [ 283.219882][ T6340] ===================================================== [ 283.227433][ T6340] BUG: KMSAN: uninit-value in eth_type_trans+0x7af/0x9a0 [ 283.234731][ T6340] eth_type_trans+0x7af/0x9a0 [ 283.239813][ T6340] bpf_prog_run_generic_xdp+0x126b/0x2000 [ 283.245910][ T6340] do_xdp_generic+0xd52/0x1690 [ 283.250906][ T6340] tun_get_user+0x45be/0x6d70 [ 283.255927][ T6340] tun_chr_write_iter+0x3e9/0x5c0 [ 283.261172][ T6340] vfs_write+0xbe2/0x15d0 [ 283.265803][ T6340] __ia32_sys_write+0x1f9/0x4d0 [ 283.271036][ T6340] ia32_sys_call+0x35bc/0x4310 [ 283.276185][ T6340] __do_fast_syscall_32+0xb0/0x150 [ 283.281625][ T6340] do_fast_syscall_32+0x38/0x80 [ 283.286825][ T6340] do_SYSENTER_32+0x1f/0x30 [ 283.291649][ T6340] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.298410][ T6340] [ 283.300832][ T6340] Uninit was stored to memory at: [ 283.306420][ T6340] pskb_expand_head+0x310/0x1610 [ 283.311605][ T6340] do_xdp_generic+0xa79/0x1690 [ 283.316830][ T6340] tun_get_user+0x45be/0x6d70 [ 283.321729][ T6340] tun_chr_write_iter+0x3e9/0x5c0 [ 283.327072][ T6340] vfs_write+0xbe2/0x15d0 [ 283.331564][ T6340] __ia32_sys_write+0x1f9/0x4d0 [ 283.336694][ T6340] ia32_sys_call+0x35bc/0x4310 [ 283.341746][ T6340] __do_fast_syscall_32+0xb0/0x150 [ 283.347208][ T6340] do_fast_syscall_32+0x38/0x80 [ 283.352296][ T6340] do_SYSENTER_32+0x1f/0x30 [ 283.357130][ T6340] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.366584][ T6340] [ 283.369029][ T6340] Uninit was created at: [ 283.373591][ T6340] __kmalloc_node_track_caller_noprof+0xb4b/0x1ba0 [ 283.380499][ T6340] kmalloc_reserve+0x22f/0x4b0 [ 283.385603][ T6340] __alloc_skb+0x347/0x7d0 [ 283.390225][ T6340] alloc_skb_with_frags+0xc5/0xa60 [ 283.395682][ T6340] sock_alloc_send_pskb+0xacc/0xc60 [ 283.401140][ T6340] tun_get_user+0x1142/0x6d70 [ 283.406241][ T6340] tun_chr_write_iter+0x3e9/0x5c0 [ 283.411512][ T6340] vfs_write+0xbe2/0x15d0 [ 283.416228][ T6340] __ia32_sys_write+0x1f9/0x4d0 [ 283.421409][ T6340] ia32_sys_call+0x35bc/0x4310 [ 283.426752][ T6340] __do_fast_syscall_32+0xb0/0x150 [ 283.432150][ T6340] do_fast_syscall_32+0x38/0x80 [ 283.437924][ T6340] do_SYSENTER_32+0x1f/0x30 [ 283.442675][ T6340] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.449422][ T6340] [ 283.451896][ T6340] CPU: 1 UID: 0 PID: 6340 Comm: syz.4.144 Tainted: G W syzkaller #0 PREEMPT(none) [ 283.463110][ T6340] Tainted: [W]=WARN [ 283.467194][ T6340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 283.477540][ T6340] ===================================================== [ 283.484768][ T6340] Disabling lock debugging due to kernel taint [ 283.491323][ T6340] Kernel panic - not syncing: kmsan.panic set ... [ 283.497912][ T6340] CPU: 1 UID: 0 PID: 6340 Comm: syz.4.144 Tainted: G B W syzkaller #0 PREEMPT(none) [ 283.509352][ T6340] Tainted: [B]=BAD_PAGE, [W]=WARN [ 283.514482][ T6340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 283.524757][ T6340] Call Trace: [ 283.528149][ T6340] [ 283.531199][ T6340] __dump_stack+0x26/0x30 [ 283.535747][ T6340] dump_stack_lvl+0x53/0x270 [ 283.540544][ T6340] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 283.546648][ T6340] dump_stack+0x1e/0x25 [ 283.551006][ T6340] vpanic+0x435/0xd30 [ 283.555224][ T6340] panic+0x15d/0x160 [ 283.559448][ T6340] kmsan_report+0x31c/0x320 [ 283.564146][ T6340] ? __do_fast_syscall_32+0xb0/0x150 [ 283.569669][ T6340] ? __msan_warning+0x1b/0x30 [ 283.574518][ T6340] ? eth_type_trans+0x7af/0x9a0 [ 283.579609][ T6340] ? bpf_prog_run_generic_xdp+0x126b/0x2000 [ 283.585757][ T6340] ? do_xdp_generic+0xd52/0x1690 [ 283.590918][ T6340] ? tun_get_user+0x45be/0x6d70 [ 283.595973][ T6340] ? tun_chr_write_iter+0x3e9/0x5c0 [ 283.601375][ T6340] ? vfs_write+0xbe2/0x15d0 [ 283.606041][ T6340] ? __ia32_sys_write+0x1f9/0x4d0 [ 283.611237][ T6340] ? ia32_sys_call+0x35bc/0x4310 [ 283.616425][ T6340] ? __do_fast_syscall_32+0xb0/0x150 [ 283.621938][ T6340] ? do_fast_syscall_32+0x38/0x80 [ 283.627176][ T6340] ? do_SYSENTER_32+0x1f/0x30 [ 283.632074][ T6340] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.638812][ T6340] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 283.644826][ T6340] ? kmsan_get_metadata+0xfb/0x160 [ 283.650148][ T6340] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 283.656752][ T6340] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 283.663090][ T6340] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 283.669306][ T6340] ? stack_depot_save_flags+0x615/0x7b0 [ 283.675053][ T6340] ? kmsan_get_metadata+0xfb/0x160 [ 283.680394][ T6340] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 283.687075][ T6340] ? kmsan_get_metadata+0xfb/0x160 [ 283.692440][ T6340] __msan_warning+0x1b/0x30 [ 283.697112][ T6340] eth_type_trans+0x7af/0x9a0 [ 283.702064][ T6340] bpf_prog_run_generic_xdp+0x126b/0x2000 [ 283.708112][ T6340] do_xdp_generic+0xd52/0x1690 [ 283.713117][ T6340] ? tun_get_user+0x40e1/0x6d70 [ 283.718233][ T6340] ? filter_irq_stacks+0x49/0x190 [ 283.723551][ T6340] ? kmsan_get_metadata+0xfb/0x160 [ 283.728894][ T6340] ? tun_get_user+0x453d/0x6d70 [ 283.733963][ T6340] tun_get_user+0x45be/0x6d70 [ 283.738865][ T6340] ? stack_depot_save_flags+0x35/0x7b0 [ 283.744513][ T6340] ? kmsan_get_metadata+0xfb/0x160 [ 283.749824][ T6340] ? kmsan_get_metadata+0xfb/0x160 [ 283.755134][ T6340] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 283.761826][ T6340] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 283.768342][ T6340] tun_chr_write_iter+0x3e9/0x5c0 [ 283.773640][ T6340] vfs_write+0xbe2/0x15d0 [ 283.778164][ T6340] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 283.783945][ T6340] __ia32_sys_write+0x1f9/0x4d0 [ 283.789118][ T6340] ia32_sys_call+0x35bc/0x4310 [ 283.794313][ T6340] __do_fast_syscall_32+0xb0/0x150 [ 283.799760][ T6340] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 283.805739][ T6340] do_fast_syscall_32+0x38/0x80 [ 283.810830][ T6340] do_SYSENTER_32+0x1f/0x30 [ 283.815564][ T6340] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.822115][ T6340] RIP: 0023:0xf703d539 [ 283.826317][ T6340] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 283.847007][ T6340] RSP: 002b:00000000f542d520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 283.855647][ T6340] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000600 [ 283.863793][ T6340] RDX: 000000000000fdef RSI: 00000000f73d5ff4 RDI: 0000000000000000 [ 283.872025][ T6340] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 283.880152][ T6340] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 283.888265][ T6340] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 283.896422][ T6340] [ 283.899727][ T6340] Kernel Offset: disabled [ 283.904117][ T6340] Rebooting in 86400 seconds..