last executing test programs: 1m59.230867032s ago: executing program 0 (id=1): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000300)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m58.32787163s ago: executing program 0 (id=7): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000540)={0x28, 0x0, 0x2710, @local}, 0x10) connect$vsock_stream(r2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000009c0)={r0, 0x0, 0x25, 0x1e, @val=@netkit={@void, @value=r1}}, 0x1c) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r5 = eventfd(0xfffffff9) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, 0x0) r7 = socket(0x8000000010, 0x2, 0x0) write(r7, &(0x7f00000002c0)="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", 0xfc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8953, &(0x7f0000000400)={{0x2, 0x0, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, {0x2, 0x0, @empty}}) 1m57.908037051s ago: executing program 2 (id=3): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x1c8, &(0x7f0000000c40)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x1ba, 0x0, 0x4000, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x10, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x0, "426ec667614be8addaa4cdadeeea737a"}, @sack_perm={0x4, 0x2}]}}, {"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"}}}}}}, 0x0) 1m57.535726299s ago: executing program 0 (id=8): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d04"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe40, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100f5df86dd", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m53.564367192s ago: executing program 2 (id=14): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) listen(0xffffffffffffffff, 0x0) listen(r3, 0x101) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x34, &(0x7f00000001c0)=0x200, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/221) 1m47.912733675s ago: executing program 2 (id=18): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x36184d3a}]) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x30}, 0x1, 0xffffa888}, 0x20000880) 1m41.501705175s ago: executing program 32 (id=8): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d04"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe40, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100f5df86dd", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m31.543524473s ago: executing program 33 (id=18): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x36184d3a}]) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x30}, 0x1, 0xffffa888}, 0x20000880) 26.290663201s ago: executing program 3 (id=95): fcntl$lock(0xffffffffffffffff, 0x11, 0x0) syz_usb_connect(0x3, 0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="120101021e436d105e04f800e5e00102030109022c00012a09207f0904b270000e01002f08240201800296080924020101020806f70924020203010600", @ANYRESHEX], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x52}) r0 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) sendfile(r0, r0, 0x0, 0x10000006) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x9}}}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x8000, 0x7, 0x97be, 0x7e06, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x66, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @local}}}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xd8, 0x3, 0xd0e7500, 0x0, 0x60, 0x170, 0x1d8, 0x1d8, 0x170, 0x1d8, 0x3, 0x0, {[{{@ip={@private, @dev={0xac, 0x14, 0xd, 0x36}, 0xffffffff, 0xff, 'nr0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x1, 0xd}, 0x0, 0x70, 0xd8, 0x0, {0x60000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x100, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'tunl0\x00', 'veth1_to_bond\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 18.994524773s ago: executing program 1 (id=99): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x100000, 0x0) pipe2$9p(&(0x7f0000000240), 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 18.328343844s ago: executing program 1 (id=100): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="66643d71cd8ca88827bc491e50a4d91063"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x4040091) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x1, 0x8, 0x7, 0x0, 0x1, 0x4, 0x6, 0x0, 0x1, 0x5, 0x3, 0x1, 0x0, 0x7, 0x9, 0x78, 0x9, 0x2, 0xdf, '\x00', 0x6, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16.986878904s ago: executing program 1 (id=102): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000001c00), 0x12) 16.933129736s ago: executing program 3 (id=103): connect$tipc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0xfc, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, 0x0) close_range(r4, r6, 0x0) socket$packet(0x11, 0x2, 0x300) 16.64155213s ago: executing program 1 (id=104): syz_io_uring_setup(0x1ec3, &(0x7f0000000080)={0x0, 0x6a63, 0x200, 0x1, 0x386}, &(0x7f0000000000), &(0x7f0000000140), 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001500)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, 0x0, 0x9000}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r2 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000240)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 14.645922807s ago: executing program 1 (id=105): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="85", 0x1}], 0x1, 0x2001, 0x0, 0x3) r1 = open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa4) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) 13.091799981s ago: executing program 3 (id=107): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{}, 0x0, 0x0}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x2b, 0x80801, 0x1) shutdown(r0, 0x7ffffffe) 12.445692932s ago: executing program 3 (id=108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) personality(0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80003, 0x5) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x109000, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000000080)) r5 = fsmount(r3, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x108) getxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f5, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") 8.513398722s ago: executing program 4 (id=110): socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_GOINGDOWN(0xffffffffffffffff, 0x8004587d, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x2e, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x8) unshare(0x22020600) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x5, 0x400007f, 0x4000006, 0x8, "42341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x60300) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 8.457769385s ago: executing program 1 (id=111): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syslog(0x3, &(0x7f0000000440)=""/246, 0xf6) 6.371865792s ago: executing program 3 (id=112): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000001c00), 0x12) 4.776412015s ago: executing program 3 (id=113): r0 = socket(0x1e, 0x805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x3, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffd, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffd, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) r4 = socket$netlink(0x10, 0x3, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x22020600) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20004800) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) syz_open_procfs(0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000640)={'broute\x00', 0x0, 0x3, 0x64, [0x10, 0x7fffffff, 0x8, 0x9, 0x10001, 0x1ff], 0x5, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], &(0x7f0000000180)=""/100}, &(0x7f00000006c0)=0x78) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000004200)={0x2020}, 0x2020) 4.074556364s ago: executing program 4 (id=114): syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='syscall\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrusage(0x0, &(0x7f00000006c0)) socket(0x10, 0x3, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r3, 0x2007ffb) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711819000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) ioctl$SIOCGETMIFCNT_IN6(r6, 0x89e0, &(0x7f0000000000)) bind$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x10, 0x0, 0x0, 0xf0ffffff}, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.293948784s ago: executing program 4 (id=115): modify_ldt$write(0x1, &(0x7f00000000c0)={0x4, 0x20000800, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.185712253s ago: executing program 4 (id=116): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x2b, 0x80801, 0x1) shutdown(r0, 0x7ffffffe) 1.185034778s ago: executing program 4 (id=117): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000c00)=""/228, 0xe4}, {&(0x7f0000000240)=""/162, 0xa2}, {&(0x7f0000000e00)=""/117, 0x75}, {&(0x7f0000000200)=""/53, 0x35}, {&(0x7f0000000ec0)=""/154, 0x9a}, {&(0x7f0000000f80)=""/4089, 0xff9}, {&(0x7f0000000100)=""/232, 0xe8}], 0x7}, 0x100556}], 0x2, 0x2040, 0x0) 0s ago: executing program 4 (id=118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d0000009700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7ec6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492aba0883783d2831210e00d2bfea3bf97ff8836d000000000000946bdb747e416b3064edb4f5aea06eba207ddab9f9baf98bc5192f23d95d33357fc55f92e5937e10995059f3348f69667b9260d504ba96446e1437af6fa875d9d32fdaaae01e6c74f192a23572ef582b7dd867c163c8cedaa2a2c5baceb37d4a40244c9bdca541cc7e65e20f5b5b735e2f33df9bd0614431d7dc5e47bb31c5b827d51733b64ddad4de1cdadce076d19d62e821b435619fb89fc07f81938200b4ebce83db57a6f5e9b1c2cf4b6ee90772d4865bf448d200e5c4e1e044d3587498128273b65670c02ff5c3c3ca633c41324fdc09e0b2621087db26bb0553612f2be27579ede2344a809e6b27d0044f2337895323357caddb54642dac82ae25deb08e111e0b9fa133c9da85dc50c3454ee0ff915331bd7f32f96fb55c7990334b1a1bc4d5d817b82f9fc278cc4858fbfa4d0f32a863c1ce050caddc5ca3b10c3e63daebba039e9f80fdef113a145ace522e8379474aa8849dcc2501df3ffcb02d29d55a1a2cbe00e836db0e6b0a7ffd680dbcf7b982a956998df3dce0e9091a4d736db69038061e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.142' (ED25519) to the list of known hosts. [ 189.520473][ T5552] cgroup: Unknown subsys name 'net' [ 189.648927][ T5552] cgroup: Unknown subsys name 'cpuset' [ 189.667244][ T5552] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 195.862767][ T5552] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 200.554715][ T5571] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.566831][ T5571] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.581154][ T5571] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.596985][ T5571] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.611318][ T5571] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.669292][ T4871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 200.679584][ T4871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 200.690507][ T4871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 200.708911][ T4871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 200.722496][ T4871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 200.782023][ T5571] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 200.791581][ T5571] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 200.801140][ T5571] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 200.826301][ T5582] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 200.835406][ T5582] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 200.845309][ T5584] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 200.850715][ T5582] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 200.858742][ T5584] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 200.874743][ T5584] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 200.885201][ T4871] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 200.894959][ T5584] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 200.906054][ T4871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 200.906206][ T5584] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 200.931221][ T4871] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 200.952178][ T5584] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 202.648566][ T5584] Bluetooth: hci0: command tx timeout [ 202.808510][ T5584] Bluetooth: hci1: command tx timeout [ 202.968933][ T5584] Bluetooth: hci3: command tx timeout [ 202.969012][ T5571] Bluetooth: hci2: command tx timeout [ 203.048401][ T5584] Bluetooth: hci4: command tx timeout [ 204.016242][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.023196][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.737129][ T5584] Bluetooth: hci0: command tx timeout [ 204.888346][ T5584] Bluetooth: hci1: command tx timeout [ 205.048560][ T5584] Bluetooth: hci2: command tx timeout [ 205.049845][ T5571] Bluetooth: hci3: command tx timeout [ 205.128478][ T5571] Bluetooth: hci4: command tx timeout [ 205.802862][ T5574] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.813258][ T5574] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.821459][ T5574] bridge_slave_0: entered allmulticast mode [ 205.830963][ T5574] bridge_slave_0: entered promiscuous mode [ 205.920339][ T5574] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.931056][ T5574] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.940390][ T5574] bridge_slave_1: entered allmulticast mode [ 205.960823][ T5574] bridge_slave_1: entered promiscuous mode [ 206.030710][ T5570] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.039480][ T5570] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.047123][ T5570] bridge_slave_0: entered allmulticast mode [ 206.056656][ T5570] bridge_slave_0: entered promiscuous mode [ 206.070764][ T5573] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.078958][ T5573] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.086518][ T5573] bridge_slave_0: entered allmulticast mode [ 206.095855][ T5573] bridge_slave_0: entered promiscuous mode [ 206.185387][ T5570] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.193506][ T5570] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.201454][ T5570] bridge_slave_1: entered allmulticast mode [ 206.211574][ T5570] bridge_slave_1: entered promiscuous mode [ 206.227230][ T5573] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.235386][ T5573] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.243223][ T5573] bridge_slave_1: entered allmulticast mode [ 206.252451][ T5573] bridge_slave_1: entered promiscuous mode [ 206.299867][ T5574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.363558][ T5578] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.371930][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.379766][ T5578] bridge_slave_0: entered allmulticast mode [ 206.394306][ T5578] bridge_slave_0: entered promiscuous mode [ 206.514725][ T5574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.580348][ T5578] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.588578][ T5578] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.596149][ T5578] bridge_slave_1: entered allmulticast mode [ 206.605297][ T5578] bridge_slave_1: entered promiscuous mode [ 206.616668][ T5576] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.624698][ T5576] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.632749][ T5576] bridge_slave_0: entered allmulticast mode [ 206.641816][ T5576] bridge_slave_0: entered promiscuous mode [ 206.688614][ T5570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.707532][ T5573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.745825][ T5576] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.753722][ T5576] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.761582][ T5576] bridge_slave_1: entered allmulticast mode [ 206.770589][ T5576] bridge_slave_1: entered promiscuous mode [ 206.816389][ T5570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.819012][ T5571] Bluetooth: hci0: command tx timeout [ 206.838542][ T5573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.907323][ T5574] team0: Port device team_slave_0 added [ 206.968689][ T5571] Bluetooth: hci1: command tx timeout [ 206.980972][ T5578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.026432][ T5574] team0: Port device team_slave_1 added [ 207.096203][ T5578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.114818][ T5576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.128657][ T5584] Bluetooth: hci2: command tx timeout [ 207.134352][ T5571] Bluetooth: hci3: command tx timeout [ 207.173387][ T5570] team0: Port device team_slave_0 added [ 207.192320][ T5573] team0: Port device team_slave_0 added [ 207.208504][ T5571] Bluetooth: hci4: command tx timeout [ 207.251520][ T5576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.355023][ T5570] team0: Port device team_slave_1 added [ 207.409963][ T5573] team0: Port device team_slave_1 added [ 207.502115][ T5574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.510888][ T5574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.537686][ T5574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.634050][ T5578] team0: Port device team_slave_0 added [ 207.646980][ T5576] team0: Port device team_slave_0 added [ 207.656291][ T5574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.663879][ T5574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.690441][ T5574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.704851][ T5570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.712123][ T5570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.738386][ T5570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.786679][ T5578] team0: Port device team_slave_1 added [ 207.800042][ T5576] team0: Port device team_slave_1 added [ 207.826227][ T5570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.833421][ T5570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.859803][ T5570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.873936][ T5573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.881292][ T5573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.907797][ T5573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.996130][ T5573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.003504][ T5573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.030182][ T5573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.103818][ T5576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.111403][ T5576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.138006][ T5576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.177059][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.184375][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.210816][ T5578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.257590][ T5576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.264907][ T5576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.291699][ T5576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.309391][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.316452][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.343179][ T5578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.465332][ T5574] hsr_slave_0: entered promiscuous mode [ 208.474493][ T5574] hsr_slave_1: entered promiscuous mode [ 208.560046][ T5570] hsr_slave_0: entered promiscuous mode [ 208.569584][ T5570] hsr_slave_1: entered promiscuous mode [ 208.578449][ T5570] debugfs: 'hsr0' already exists in 'hsr' [ 208.584328][ T5570] Cannot create hsr debugfs directory [ 208.671046][ T5573] hsr_slave_0: entered promiscuous mode [ 208.680827][ T5573] hsr_slave_1: entered promiscuous mode [ 208.689352][ T5573] debugfs: 'hsr0' already exists in 'hsr' [ 208.695320][ T5573] Cannot create hsr debugfs directory [ 208.805792][ T5576] hsr_slave_0: entered promiscuous mode [ 208.815008][ T5576] hsr_slave_1: entered promiscuous mode [ 208.823451][ T5576] debugfs: 'hsr0' already exists in 'hsr' [ 208.829432][ T5576] Cannot create hsr debugfs directory [ 208.888374][ T5571] Bluetooth: hci0: command tx timeout [ 208.931136][ T5578] hsr_slave_0: entered promiscuous mode [ 208.940844][ T5578] hsr_slave_1: entered promiscuous mode [ 208.949697][ T5578] debugfs: 'hsr0' already exists in 'hsr' [ 208.955595][ T5578] Cannot create hsr debugfs directory [ 209.048389][ T5571] Bluetooth: hci1: command tx timeout [ 209.208730][ T5584] Bluetooth: hci2: command tx timeout [ 209.214520][ T5571] Bluetooth: hci3: command tx timeout [ 209.298612][ T5571] Bluetooth: hci4: command tx timeout [ 210.321104][ T5574] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 210.357242][ T5574] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 210.395898][ T5574] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 210.414133][ T5574] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 210.424667][ T5574] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 210.446501][ T5574] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 210.472541][ T5574] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 210.490259][ T5574] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 210.579323][ T5570] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 210.614612][ T5570] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 210.627594][ T5570] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 210.649899][ T5570] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 210.662420][ T5570] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 210.686981][ T5570] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 210.697671][ T5570] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 210.716337][ T5570] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 210.941896][ T5573] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 210.967836][ T5573] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 210.993351][ T5573] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 211.013476][ T5573] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.023771][ T5573] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 211.044175][ T5573] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 211.081220][ T5573] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 211.100265][ T5573] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 211.404833][ T5576] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 211.425179][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 211.435643][ T5576] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 211.459156][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.478461][ T5576] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 211.501305][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 211.552639][ T5576] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 211.573211][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 211.945628][ T5574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.979264][ T5578] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 211.999186][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 212.031757][ T5578] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 212.056097][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 212.066431][ T5578] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 212.086936][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 212.129838][ T5578] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 212.156427][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 212.333741][ T5574] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.397205][ T5570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.444527][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.452086][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.571647][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.579251][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.731947][ T5570] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.756098][ T5573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.854573][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.862168][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.959708][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.967142][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.115242][ T5573] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.157370][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.164771][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.207228][ T5576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.305599][ T116] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.313284][ T116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.577358][ T5576] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.685179][ T5578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.745635][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.753537][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.876019][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.883672][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.015340][ T5578] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.203496][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.211191][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.428975][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.436549][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.353181][ T5574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.099670][ T5570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.342234][ T5574] veth0_vlan: entered promiscuous mode [ 217.545057][ T5574] veth1_vlan: entered promiscuous mode [ 217.669818][ T5573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.013828][ T5570] veth0_vlan: entered promiscuous mode [ 218.189433][ T5576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.236238][ T5574] veth0_macvtap: entered promiscuous mode [ 218.260242][ T5570] veth1_vlan: entered promiscuous mode [ 218.353166][ T5574] veth1_macvtap: entered promiscuous mode [ 218.385599][ T5578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.661410][ T5573] veth0_vlan: entered promiscuous mode [ 218.754832][ T5574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.891668][ T5574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.930479][ T5573] veth1_vlan: entered promiscuous mode [ 218.957866][ T5570] veth0_macvtap: entered promiscuous mode [ 219.066737][ T1143] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.091935][ T1143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.127430][ T5570] veth1_macvtap: entered promiscuous mode [ 219.141447][ T1143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.177328][ T1143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.242738][ T5578] veth0_vlan: entered promiscuous mode [ 219.463934][ T5570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.519361][ T5578] veth1_vlan: entered promiscuous mode [ 219.594162][ T5570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.629219][ T5573] veth0_macvtap: entered promiscuous mode [ 219.785222][ T5573] veth1_macvtap: entered promiscuous mode [ 219.821485][ T80] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.831111][ T80] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.890554][ T80] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.921907][ T80] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.993830][ T5576] veth0_vlan: entered promiscuous mode [ 220.196423][ T5573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.297704][ T5576] veth1_vlan: entered promiscuous mode [ 220.351981][ T5578] veth0_macvtap: entered promiscuous mode [ 220.405405][ T5573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.577586][ T5578] veth1_macvtap: entered promiscuous mode [ 220.613943][ T1143] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.649774][ T1143] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.692311][ T1143] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.705530][ T1143] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.966380][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.093043][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.184735][ T5576] veth0_macvtap: entered promiscuous mode [ 221.272727][ T80] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.309875][ T5576] veth1_macvtap: entered promiscuous mode [ 221.334751][ T80] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.375665][ T80] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.398778][ T80] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.706765][ T5576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.903233][ T5576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.038796][ T1143] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.078966][ T1150] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.129450][ T1150] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.164594][ T1150] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.899230][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.936907][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.282765][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.321112][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.062149][ T5574] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 226.445230][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.499294][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.838028][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.893539][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.784571][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.823121][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.112193][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.158537][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.684576][ T5838] netlink: 'syz.0.7': attribute type 12 has an invalid length. [ 228.957171][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.009296][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.345782][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.398492][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.825798][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.867505][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.227286][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.274395][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.868652][ T5848] loop3: detected capacity change from 0 to 256 [ 230.964074][ T5848] exfat: Deprecated parameter 'utf8' [ 231.016932][ T5848] exfat: Deprecated parameter 'namecase' [ 231.248995][ T5848] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 231.564786][ T5855] random: crng reseeded on system resumption [ 231.661544][ T5853] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5'. [ 231.704867][ T5856] loop1: detected capacity change from 0 to 16 [ 231.786672][ T5856] erofs (device loop1): mounted with root inode @ nid 36. [ 232.552897][ T5858] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 235.745779][ T5871] ======================================================= [ 235.745779][ T5871] WARNING: The mand mount option has been deprecated and [ 235.745779][ T5871] and is ignored by this kernel. Remove the mand [ 235.745779][ T5871] option from the mount to silence this warning. [ 235.745779][ T5871] ======================================================= [ 235.813703][ T5871] overlay: ./file0 is not a directory [ 236.097006][ T5873] xt_TPROXY: Can be used only with -p tcp or -p udp [ 240.089500][ T5883] loop3: detected capacity change from 0 to 512 [ 240.196603][ T5883] EXT4-fs: Ignoring removed nomblk_io_submit option [ 240.294028][ T5883] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 240.541022][ T5883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.658243][ T5883] ext4 filesystem being mounted at /3/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.963782][ T5883] EXT4-fs (loop3): shut down requested (0) [ 241.824946][ T5895] loop1: detected capacity change from 0 to 128 [ 241.964554][ T29] audit: type=1800 audit(1778560659.895:2): pid=5895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.19" name="file2" dev="loop1" ino=1048607 res=0 errno=0 [ 242.001719][ T5896] loop4: detected capacity change from 0 to 1024 [ 242.022984][ T5895] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 242.071809][ T5895] FAT-fs (loop1): Filesystem has been set read-only [ 242.150398][ T5895] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 242.164276][ T5895] syz.1.19: attempt to access beyond end of device [ 242.164276][ T5895] loop1: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 242.200266][ T5890] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.225778][ T5890] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.259347][ T5896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 242.308868][ T5896] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.451369][ T5896] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.20: lblock 0 mapped to illegal pblock 0 (length 1) [ 242.583321][ T5896] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 242.621288][ T5896] EXT4-fs (loop4): This should not happen!! Data will be lost [ 242.621288][ T5896] [ 242.900596][ T5578] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.030927][ T5576] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 243.088312][ T5576] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 248.936269][ T5584] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 249.849662][ T5584] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 249.863134][ T5584] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 249.888115][ T5584] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 249.916614][ T5584] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 250.758149][ T5943] loop4: detected capacity change from 0 to 512 [ 250.815093][ T5943] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 250.826574][ T5942] loop3: detected capacity change from 0 to 512 [ 250.875110][ T5942] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 250.905752][ T5943] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 250.928644][ T5943] EXT4-fs (loop4): orphan cleanup on readonly fs [ 250.955096][ T5942] EXT4-fs (loop3): orphan cleanup on readonly fs [ 250.963352][ T5943] Quota error (device loop4): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 251.007534][ T5942] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.33: bg 0: block 16: invalid block bitmap [ 251.043437][ T5943] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 251.085045][ T5942] loop3: lost filesystem error report for type 5 error -117 [ 251.092114][ T5942] EXT4-fs (loop3): Remounting filesystem read-only [ 251.099896][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 251.099996][ C1] EXT4-fs (loop3): initial error at time 1778560668: ext4_validate_block_bitmap:432 [ 251.100146][ C1] EXT4-fs (loop3): last error at time 1778560668: ext4_validate_block_bitmap:432 [ 251.158059][ T5943] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 251.187301][ T5943] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.34: bg 0: block 15: invalid block bitmap [ 251.224002][ T5943] loop4: lost filesystem error report for type 5 error -117 [ 251.228409][ T5943] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 251.236440][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 251.236540][ C1] EXT4-fs (loop4): initial error at time 1778560668: ext4_validate_block_bitmap:432 [ 251.236679][ C1] EXT4-fs (loop4): last error at time 1778560668: ext4_validate_block_bitmap:432 [ 251.297694][ T5942] EXT4-fs (loop3): 1 truncate cleaned up [ 251.327733][ T5942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 251.400798][ T5943] loop4: lost filesystem error report for type 5 error -117 [ 251.407027][ T5942] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.445370][ T5943] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #16: comm syz.4.34: data will be lost [ 251.489791][ T5943] EXT4-fs (loop4): 1 truncate cleaned up [ 251.533393][ T5943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 252.173758][ T5584] Bluetooth: hci5: command tx timeout [ 252.478136][ T5955] loop1: detected capacity change from 0 to 1024 [ 252.479881][ T5576] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.529694][ T5955] EXT4-fs: inline encryption not supported [ 252.575979][ T5955] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 252.673989][ T5955] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm syz.1.36: lblock 2 mapped to illegal pblock 2 (length 1) [ 252.688674][ T5955] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 252.696483][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 252.712452][ C0] EXT4-fs (loop1): initial error at time 1778560669: ext4_map_blocks:791: inode 3: block 2 [ 252.722929][ C0] EXT4-fs (loop1): last error at time 1778560669: ext4_map_blocks:791: inode 3: block 2 [ 252.735986][ T5955] EXT4-fs (loop1): Remounting filesystem read-only [ 252.786955][ T5955] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 252.795783][ T5955] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 252.805065][ T5955] EXT4-fs (loop1): 1 orphan inode deleted [ 252.813239][ T5955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.356016][ T5574] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.399578][ T5584] Bluetooth: hci5: command tx timeout [ 254.985115][ T5975] loop4: detected capacity change from 0 to 512 [ 255.121099][ T5975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.156846][ T5975] ext4 filesystem being mounted at /12/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.974704][ T5870] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.298470][ T5870] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.618649][ T5584] Bluetooth: hci5: command tx timeout [ 257.286422][ T5870] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.545751][ T5991] loop1: detected capacity change from 0 to 512 [ 257.603523][ T5991] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 258.340656][ T5571] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 258.450442][ T5571] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 258.910902][ T5571] Bluetooth: hci5: command tx timeout [ 258.925340][ T5571] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 259.601840][ T5571] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 259.620204][ T5571] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 259.840295][ T5870] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.919383][ T5571] Bluetooth: hci0: command tx timeout [ 262.855129][ T5576] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.807761][ T5870] bridge_slave_1: left allmulticast mode [ 263.846117][ T5870] bridge_slave_1: left promiscuous mode [ 263.869604][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.949385][ T5870] bridge_slave_0: left allmulticast mode [ 263.986276][ T5870] bridge_slave_0: left promiscuous mode [ 264.026167][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.142434][ T5571] Bluetooth: hci0: command tx timeout [ 264.768670][ T6025] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 264.811889][ T6025] overlayfs: failed lookup in lower (newroot/14, name='file0', err=-40): overlapping layers [ 265.123846][ T6027] loop3: detected capacity change from 0 to 512 [ 265.151302][ T6027] EXT4-fs: Ignoring removed mblk_io_submit option [ 265.264847][ T6027] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.52: inode has both inline data and extents flags [ 265.355630][ T6027] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 265.358780][ T6027] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.52: couldn't read orphan inode 15 (err -117) [ 265.368418][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 265.368504][ C1] EXT4-fs (loop3): initial error at time 1778560681: ext4_orphan_get:1397: inode 15 [ 265.368657][ C1] EXT4-fs (loop3): last error at time 1778560681: ext4_orphan_get:1397: inode 15 [ 265.499373][ T6027] loop3: lost filesystem error report for type 5 error -117 [ 265.515687][ T6027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.593382][ T6031] loop4: detected capacity change from 0 to 512 [ 265.647226][ T6031] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 265.965975][ T5578] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.377247][ T5571] Bluetooth: hci0: command tx timeout [ 266.866748][ T5870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.996341][ T5870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.065288][ T5870] bond0 (unregistering): Released all slaves [ 268.173234][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 268.179917][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.722857][ T5571] Bluetooth: hci0: command tx timeout [ 269.967046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 271.489191][ T6038] ------------[ cut here ]------------ [ 271.494876][ T6038] WARNING: kernel/signal.c:2174 at do_notify_parent+0x1d9/0xf30, CPU#1: syz.3.54/6038 [ 271.504876][ T6038] Modules linked in: [ 271.509037][ T6038] CPU: 1 UID: 0 PID: 6038 Comm: syz.3.54 Not tainted syzkaller #0 PREEMPT(full) [ 271.518385][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 271.528643][ T6038] RIP: 0010:do_notify_parent+0x1d9/0xf30 [ 271.534593][ T6038] Code: e9 4c 31 f1 48 f7 d0 48 21 c8 0f 84 3b 0d 00 00 4d 39 f5 4c 8b 7d b8 0f 85 58 0d 00 00 e8 5f 09 5f 00 eb 60 e8 58 09 5f 00 90 <0f> 0b 90 31 c0 45 31 ed 45 31 ff e9 56 0c 00 00 44 89 ef e8 7f 28 [ 271.554445][ T6038] RSP: 0018:ffff8880338e3cf8 EFLAGS: 00010093 [ 271.560850][ T6038] RAX: ffffffff81a17068 RBX: ffff888055428bc0 RCX: ffff888055428000 [ 271.569037][ T6038] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 271.577208][ T6038] RBP: ffff8880338e3dc0 R08: ffffea000000000f R09: 0000000000000000 [ 271.585401][ T6038] R10: ffff8880330e3d08 R11: ffffffff82bba590 R12: 0000000000000000 [ 271.593590][ T6038] R13: ffff888055428000 R14: 0000000000000080 R15: ffff888055428000 [ 271.601774][ T6038] FS: 0000000000000000(0000) GS:ffff8881aa711000(0000) knlGS:0000000000000000 [ 271.610929][ T6038] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.617719][ T6038] CR2: 00007fa32d00409c CR3: 0000000054912000 CR4: 00000000003526f0 [ 271.625936][ T6038] Call Trace: [ 271.629365][ T6038] [ 271.632446][ T6038] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 271.638585][ T6038] ? kill_orphaned_pgrp+0x273/0xa70 [ 271.644063][ T6038] ? kmsan_get_metadata+0xf1/0x160 [ 271.649480][ T6038] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 271.655601][ T6038] do_exit+0x2430/0x3c30 [ 271.660172][ T6038] __x64_sys_exit+0x35/0x40 [ 271.664937][ T6038] x64_sys_call+0x3e96/0x3ea0 [ 271.669898][ T6038] do_syscall_64+0x134/0xf80 [ 271.674773][ T6038] ? clear_bhb_loop+0x50/0xa0 [ 271.679712][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.685865][ T6038] RIP: 0033:0x7f4d0ef9cdd9 [ 271.690512][ T6038] Code: Unable to access opcode bytes at 0x7f4d0ef9cdaf. [ 271.697703][ T6038] RSP: 002b:00007f4d0fdccfd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 271.706385][ T6038] RAX: ffffffffffffffda RBX: 00007f4d0f216180 RCX: 00007f4d0ef9cdd9 [ 271.714557][ T6038] RDX: 00007f4d0fdcd9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 271.722735][ T6038] RBP: 00007f4d0f032d69 R08: 0000000000000000 R09: 0000000000000000 [ 271.730906][ T6038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.739068][ T6038] R13: 00007f4d0f216218 R14: 00007f4d0f216180 R15: 00007ffe9c6aa448 [ 271.747305][ T6038] [ 271.750490][ T6038] ---[ end trace 0000000000000000 ]--- [ 272.749251][ T6043] Zero length message leads to an empty skb [ 273.950193][ T5870] hsr_slave_0: left promiscuous mode [ 274.034954][ T5870] hsr_slave_1: left promiscuous mode [ 274.072217][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.138227][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.199255][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.237743][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.855754][ T12] Bluetooth: hci2: Frame reassembly failed (-84) [ 275.388271][ T5870] veth1_macvtap: left promiscuous mode [ 275.534844][ T5870] veth0_macvtap: left promiscuous mode [ 275.625739][ T5870] veth1_vlan: left promiscuous mode [ 275.738293][ T5870] veth0_vlan: left promiscuous mode [ 276.709157][ T5571] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 276.977701][ T6064] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 279.095517][ T6074] loop4: detected capacity change from 0 to 512 [ 279.305545][ T6074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.409436][ T6074] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 283.094785][ T5870] team0 (unregistering): Port device team_slave_1 removed [ 283.148089][ T5870] team0 (unregistering): Port device team_slave_0 removed [ 283.584005][ T5576] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.272190][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.291225][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.323211][ T5931] bridge_slave_0: entered allmulticast mode [ 288.348356][ T5931] bridge_slave_0: entered promiscuous mode [ 288.400070][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.407912][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.425666][ T5931] bridge_slave_1: entered allmulticast mode [ 288.436789][ T5931] bridge_slave_1: entered promiscuous mode [ 288.637001][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.764575][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.121122][ T5931] team0: Port device team_slave_0 added [ 289.406854][ T5931] team0: Port device team_slave_1 added [ 289.428631][ T5226] 8021q: adding VLAN 0 to HW filter on device eth1 [ 290.140128][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.185550][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.472776][ T6108] loop1: detected capacity change from 0 to 1024 [ 290.556105][ T6108] EXT4-fs: inline encryption not supported [ 290.626629][ T6108] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 290.778533][ T6108] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm syz.1.66: lblock 2 mapped to illegal pblock 2 (length 1) [ 290.872060][ T6108] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 290.872964][ T6108] EXT4-fs (loop1): Remounting filesystem read-only [ 290.882488][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 290.882583][ C0] EXT4-fs (loop1): initial error at time 1778560705: ext4_map_blocks:791: inode 3: block 2 [ 290.882864][ C0] EXT4-fs (loop1): last error at time 1778560705: ext4_map_blocks:791: inode 3: block 2 [ 291.002473][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.021009][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.028546][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.063630][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.222350][ T6108] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 291.404333][ T6108] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 291.499794][ T6108] EXT4-fs (loop1): 1 orphan inode deleted [ 291.609633][ T6108] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.635065][ T5931] hsr_slave_0: entered promiscuous mode [ 292.665075][ T5931] hsr_slave_1: entered promiscuous mode [ 292.724971][ T5931] debugfs: 'hsr0' already exists in 'hsr' [ 292.747135][ T6124] loop4: detected capacity change from 0 to 16 [ 292.762814][ T5931] Cannot create hsr debugfs directory [ 292.769968][ T5574] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.821181][ T6124] erofs (device loop4): invalid ishare xattr prefix id 0 [ 293.539168][ T6124] loop4: detected capacity change from 0 to 1024 [ 293.693195][ T6124] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.762478][ T6130] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 294.020712][ T5870] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.379598][ T5576] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.497262][ T6137] loop3: detected capacity change from 0 to 256 [ 294.622469][ T5870] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.790535][ T6140] binder: 6138:6140 ioctl c0306201 0 returned -14 [ 294.963577][ T5665] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 294.984697][ T6143] loop4: detected capacity change from 0 to 128 [ 295.057826][ T6143] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 295.084844][ T6143] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 295.121925][ T5870] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.171744][ T5665] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 295.194534][ T5665] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 295.226128][ T5665] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 295.265202][ T5665] usb 4-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 295.314061][ T5665] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.365428][ T5665] usb 4-1: config 0 descriptor?? [ 295.379914][ T6137] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 295.875766][ T5576] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 296.187932][ T5870] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.435968][ T5665] usbhid 4-1:0.0: can't add hid device: -71 [ 296.470415][ T5665] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 296.535486][ T6153] loop1: detected capacity change from 0 to 16 [ 296.548078][ T5665] usb 4-1: USB disconnect, device number 2 [ 296.568598][ T6154] loop4: detected capacity change from 0 to 128 [ 296.641337][ T6153] erofs (device loop1): invalid ishare xattr prefix id 0 [ 296.697751][ T6154] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 296.796976][ T6154] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.000164][ T6160] loop1: detected capacity change from 0 to 512 [ 300.820774][ T6160] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.834161][ T6160] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 301.431282][ T5576] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 301.525104][ T5665] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 302.733911][ T806] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 303.004789][ T806] usb 4-1: Using ep0 maxpacket: 16 [ 303.153216][ T806] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 303.237393][ T806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.273671][ T806] usb 4-1: Product: syz [ 303.285696][ T806] usb 4-1: Manufacturer: syz [ 303.336614][ T806] usb 4-1: SerialNumber: syz [ 304.882232][ T806] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 305.222704][ T806] usb 4-1: USB disconnect, device number 3 [ 305.750387][ T5989] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.854599][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.905497][ T5989] bridge_slave_0: entered allmulticast mode [ 305.982801][ T5989] bridge_slave_0: entered promiscuous mode [ 306.067995][ T6175] netlink: 'syz.4.80': attribute type 2 has an invalid length. [ 306.297411][ T5989] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.298323][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.323968][ T5989] bridge_slave_1: entered allmulticast mode [ 306.540727][ T5989] bridge_slave_1: entered promiscuous mode [ 307.195594][ T5665] usb 2-1: device descriptor read/64, error -110 [ 307.506099][ T5665] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 307.751363][ T5665] usb 2-1: device descriptor read/64, error -32 [ 307.777741][ T5870] bridge_slave_1: left allmulticast mode [ 307.845431][ T5870] bridge_slave_1: left promiscuous mode [ 307.878504][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.913135][ T5665] usb usb2-port1: attempt power cycle [ 307.965966][ T5870] bridge_slave_0: left allmulticast mode [ 308.021418][ T5870] bridge_slave_0: left promiscuous mode [ 308.059110][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.318912][ T5665] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 308.649782][ T5665] usb 2-1: device not accepting address 4, error -71 [ 308.936760][ T5574] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.895006][ T6195] loop4: detected capacity change from 0 to 512 [ 310.202635][ T6195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.865368][ T5870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.972699][ T5870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.074606][ T5870] bond0 (unregistering): Released all slaves [ 312.313597][ T5989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.392107][ T5571] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 312.402398][ T5571] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 312.418818][ T5571] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 312.451524][ T5571] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 312.466775][ T5571] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 312.917848][ T5226] 8021q: adding VLAN 0 to HW filter on device eth2 [ 312.994842][ T5576] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.112340][ T5989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.887117][ T5989] team0: Port device team_slave_0 added [ 313.930659][ T5989] team0: Port device team_slave_1 added [ 314.697825][ T6221] loop3: detected capacity change from 0 to 512 [ 314.738967][ T5989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.799209][ T5989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.873485][ T5571] Bluetooth: hci2: command tx timeout [ 315.068336][ T5989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.165031][ T5989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.192561][ T5989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.273999][ T5989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.411289][ T5870] hsr_slave_0: left promiscuous mode [ 315.454879][ T5870] hsr_slave_1: left promiscuous mode [ 315.497889][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.536791][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.586125][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.629907][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.772874][ T5870] veth1_macvtap: left promiscuous mode [ 315.797284][ T5870] veth0_macvtap: left promiscuous mode [ 315.829006][ T5870] veth1_vlan: left promiscuous mode [ 315.846573][ T5870] veth0_vlan: left promiscuous mode [ 316.306092][ T6232] loop1: detected capacity change from 0 to 512 [ 316.479402][ T6232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.567772][ T6232] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 317.068521][ T5571] Bluetooth: hci2: command tx timeout [ 319.044980][ T6221] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 319.119358][ T6221] ------------[ cut here ]------------ [ 319.125399][ T6221] EA inode 11 i_nlink=2 [ 319.125496][ T6221] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x7a2/0x880, CPU#1: syz.3.90/6221 [ 319.140958][ T6221] Modules linked in: [ 319.145265][ T6221] CPU: 1 UID: 0 PID: 6221 Comm: syz.3.90 Tainted: G W syzkaller #0 PREEMPT(full) [ 319.156346][ T6221] Tainted: [W]=WARN [ 319.164239][ T6221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 319.175932][ T6221] RIP: 0010:ext4_xattr_inode_update_ref+0x81c/0x880 [ 319.182907][ T6221] Code: 06 00 00 44 89 ab 70 09 00 00 48 c7 83 80 0c 00 00 00 00 00 00 4d 85 f6 75 46 45 85 ff 75 55 48 8b 7d c0 48 8b 75 d0 8b 55 b8 <67> 48 0f b9 3a e9 d3 fc ff ff 44 89 e7 e8 a2 db 52 ff 89 c7 e8 bb [ 319.203071][ T6221] RSP: 0018:ffff888018a33168 EFLAGS: 00010246 [ 319.209680][ T6221] RAX: 0000000000000000 RBX: ffff88803800ce40 RCX: 00000000006036cd [ 319.218002][ T6221] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff92d43590 [ 319.226151][ T6221] RBP: ffff888018a331f0 R08: ffffea000000000f R09: 0000000000000000 [ 319.234565][ T6221] R10: ffff8880182330b0 R11: 00000000abcd0100 R12: 0000000000000000 [ 319.242914][ T6221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.251197][ T6221] FS: 00007f4d0fe0f6c0(0000) GS:ffff8881aa711000(0000) knlGS:0000000000000000 [ 319.260489][ T6221] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 319.267246][ T6221] CR2: 0000555591d7e4e8 CR3: 000000003ee00000 CR4: 00000000003526f0 [ 319.279404][ T6221] Call Trace: [ 319.283941][ T6221] [ 319.287071][ T6221] ext4_xattr_inode_dec_ref_all+0x1011/0x17b0 [ 319.293640][ T6221] ? errseq_check+0x6f/0xd0 [ 319.298603][ T6221] ext4_xattr_delete_inode+0xd14/0x14c0 [ 319.304539][ T6221] ? ext4_truncate+0x178d/0x1c10 [ 319.309765][ T6221] ? __ext4_mark_inode_dirty+0x72e/0x9a0 [ 319.315855][ T6221] ext4_evict_inode+0x202b/0x2730 [ 319.321221][ T6221] ? __pfx_ext4_evict_inode+0x10/0x10 [ 319.327040][ T6221] evict+0x69b/0xc90 [ 319.331189][ T6221] ? kmsan_get_metadata+0xf1/0x160 [ 319.336731][ T6221] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 319.343478][ T6221] iput+0x84b/0xca0 [ 319.347699][ T6221] ext4_process_orphan+0x49a/0x520 [ 319.353164][ T6221] ext4_orphan_cleanup+0x108a/0x1e10 [ 319.359179][ T6221] ext4_fill_super+0xa699/0xafa0 [ 319.364479][ T6221] ? sb_set_blocksize+0x24e/0x390 [ 319.369953][ T6221] get_tree_bdev_flags+0x6e6/0x920 [ 319.375352][ T6221] ? __pfx_ext4_fill_super+0x10/0x10 [ 319.385134][ T6221] ? __pfx_ext4_fill_super+0x10/0x10 [ 319.391857][ T6221] ? __pfx_ext4_get_tree+0x10/0x10 [ 319.397245][ T6221] get_tree_bdev+0x38/0x50 [ 319.402115][ T6221] ext4_get_tree+0x35/0x40 [ 319.406771][ T6221] vfs_get_tree+0xb3/0x5d0 [ 319.411623][ T6221] do_new_mount+0x885/0x1dd0 [ 319.416524][ T6221] ? apparmor_capable+0x2a2/0x380 [ 319.422006][ T6221] ? kmsan_get_metadata+0xf1/0x160 [ 319.427446][ T6221] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 319.433734][ T6221] path_mount+0x7a2/0x20b0 [ 319.438439][ T6221] ? user_path_at+0x1fc/0x330 [ 319.445101][ T6221] __se_sys_mount+0x704/0x7f0 [ 319.450079][ T6221] ? kmsan_get_metadata+0xf1/0x160 [ 319.457157][ T6221] __x64_sys_mount+0xe4/0x150 [ 319.462163][ T6221] x64_sys_call+0x39f0/0x3ea0 [ 319.468595][ T6221] do_syscall_64+0x134/0xf80 [ 319.473648][ T5571] Bluetooth: hci2: command tx timeout [ 319.480736][ T6221] ? clear_bhb_loop+0x50/0xa0 [ 319.487748][ T6221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.501407][ T6221] RIP: 0033:0x7f4d0ef9e04a [ 319.507647][ T6221] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.529269][ T6221] RSP: 002b:00007f4d0fe0ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 319.539544][ T6221] RAX: ffffffffffffffda RBX: 00007f4d0fe0eee0 RCX: 00007f4d0ef9e04a [ 319.548575][ T6221] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f4d0fe0eea0 [ 319.556748][ T6221] RBP: 00002000000009c0 R08: 00007f4d0fe0eee0 R09: 0000000000800718 [ 319.565195][ T6221] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 319.573547][ T6221] R13: 00007f4d0fe0eea0 R14: 000000000000048d R15: 0000200000000200 [ 319.581894][ T6221] [ 319.585079][ T6221] ---[ end trace 0000000000000000 ]--- [ 320.084117][ T6221] EXT4-fs (loop3): 1 orphan inode deleted [ 320.092268][ T6221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.159882][ T5870] team0 (unregistering): Port device team_slave_1 removed [ 320.247866][ T5574] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.286476][ T5870] team0 (unregistering): Port device team_slave_0 removed [ 320.347660][ T5578] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.708171][ T6239] loop1: detected capacity change from 0 to 512 [ 320.752859][ T6239] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 320.821328][ T6239] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 320.877820][ T6239] EXT4-fs (loop1): 1 truncate cleaned up [ 320.925890][ T6239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.140856][ T5667] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 321.324678][ T5667] usb 4-1: Using ep0 maxpacket: 16 [ 321.374437][ T5667] usb 4-1: unable to get BOS descriptor or descriptor too short [ 321.398758][ T5667] usb 4-1: config 42 has an invalid interface number: 178 but max is 0 [ 321.419019][ T5667] usb 4-1: config 42 has no interface number 0 [ 321.433194][ T5667] usb 4-1: config 42 interface 178 has no altsetting 0 [ 321.488113][ T5667] usb 4-1: string descriptor 0 read error: -22 [ 321.505936][ T5667] usb 4-1: New USB device found, idVendor=045e, idProduct=00f8, bcdDevice=e0.e5 [ 321.527375][ T5667] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.663862][ T5667] uvcvideo 4-1:42.178: Found multiple Units with ID 1 [ 321.675188][ T5571] Bluetooth: hci2: command tx timeout [ 321.695095][ T5667] uvcvideo 4-1:42.178: Found UVC 0.00 device (045e:00f8) [ 321.719193][ T5667] uvcvideo 4-1:42.178: No valid video chain found. [ 324.422783][ T5574] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.480078][ T5584] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 324.490464][ T5584] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 324.505163][ T5584] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 324.526068][ T5584] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 324.556180][ T5584] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 325.162989][ T6254] loop1: detected capacity change from 0 to 512 [ 325.219751][ T6254] EXT4-fs: Ignoring removed nobh option [ 325.285039][ T6254] EXT4-fs (loop1): Test dummy encryption mode enabled [ 325.428573][ T6254] EXT4-fs error (device loop1): __ext4_iget:5481: inode #11: block 1: comm syz.1.96: invalid block [ 325.518022][ T6254] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 325.532518][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 325.548635][ C0] EXT4-fs (loop1): initial error at time 1778560738: __ext4_iget:5481: inode 11: block 1 [ 325.559007][ C0] EXT4-fs (loop1): last error at time 1778560738: __ext4_iget:5481: inode 11: block 1 [ 325.569482][ T6254] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.96: couldn't read orphan inode 11 (err -117) [ 325.581701][ T6254] loop1: lost filesystem error report for type 5 error -117 [ 325.590442][ T6254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.020131][ T5574] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.805019][ T5584] Bluetooth: hci5: command tx timeout [ 327.238959][ T5870] bridge_slave_1: left allmulticast mode [ 327.272383][ T5870] bridge_slave_1: left promiscuous mode [ 327.293212][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.401755][ T5870] bridge_slave_0: left allmulticast mode [ 327.421611][ T5870] bridge_slave_0: left promiscuous mode [ 327.464902][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.339165][ T5870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.448716][ T5870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.538656][ T5870] bond0 (unregistering): Released all slaves [ 328.993172][ T5870] hsr_slave_0: left promiscuous mode [ 329.027086][ T48] Bluetooth: hci5: command tx timeout [ 329.034720][ T5870] hsr_slave_1: left promiscuous mode [ 329.057559][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.085390][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.618632][ T5677] usb 4-1: USB disconnect, device number 4 [ 329.882405][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 329.888902][ T5582] Bluetooth: hci1: command 0x0406 tx timeout [ 329.896045][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 330.063905][ T5870] team0 (unregistering): Port device team_slave_1 removed [ 330.136335][ T5870] team0 (unregistering): Port device team_slave_0 removed [ 330.986032][ T6305] IPv6: Can't replace route, no match found [ 331.427622][ T5584] Bluetooth: hci5: command tx timeout [ 331.620659][ T5226] 8021q: adding VLAN 0 to HW filter on device eth3 [ 332.613454][ T6308] loop1: detected capacity change from 0 to 1024 [ 332.861937][ T6308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 332.971074][ T6308] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.147517][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 333.158952][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 333.307116][ T29] audit: type=1800 audit(1778560745.389:3): pid=6308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.105" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 333.429402][ T29] audit: type=1804 audit(1778560745.455:4): pid=6308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.105" name="/newroot/34/file1/file1" dev="loop1" ino=15 res=1 errno=0 [ 333.451560][ T29] audit: type=1800 audit(1778560745.483:5): pid=6308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.105" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 333.525303][ T6060] bridge_slave_1: left allmulticast mode [ 333.541186][ T6060] bridge_slave_1: left promiscuous mode [ 333.548607][ T6060] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.566049][ T6060] bridge_slave_0: left allmulticast mode [ 333.581219][ T6060] bridge_slave_0: left promiscuous mode [ 333.598931][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.644026][ T5584] Bluetooth: hci5: command tx timeout [ 333.733248][ T6313] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 334.217522][ T6060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.299279][ T6060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.351920][ T6060] bond0 (unregistering): Released all slaves [ 335.295709][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.776381][ T6329] loop3: detected capacity change from 0 to 1024 [ 335.839757][ T6329] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 335.850227][ T6329] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 335.860470][ T6329] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 335.907519][ T6329] EXT4-fs error (device loop3): ext4_get_journal_inode:5896: inode #5: comm syz.3.108: unexpected bad inode w/o EXT4_IGET_BAD [ 335.921612][ T6329] loop3: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 335.930117][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 335.946154][ C1] EXT4-fs (loop3): initial error at time 1778560747: ext4_get_journal_inode:5896: inode 5 [ 335.956459][ C1] EXT4-fs (loop3): last error at time 1778560747: ext4_get_journal_inode:5896: inode 5 [ 335.994533][ T6329] EXT4-fs (loop3): no journal found [ 336.000241][ T6329] EXT4-fs (loop3): can't get journal size [ 336.032393][ T6329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 337.367527][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.699883][ T6060] team0 (unregistering): Port device team_slave_1 removed [ 337.785437][ T6060] team0 (unregistering): Port device team_slave_0 removed [ 338.139976][ T5574] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 339.536135][ T5578] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.785641][ T5226] 8021q: adding VLAN 0 to HW filter on device eth4 [ 343.038876][ T6361] binder: 6358:6361 ioctl 89e0 200000000000 returned -22 [ 343.108340][ T6204] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.130968][ T6204] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.156147][ T6204] bridge_slave_0: entered allmulticast mode [ 343.168289][ T6204] bridge_slave_0: entered promiscuous mode [ 343.243581][ T6204] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.261379][ T6204] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.325584][ T6204] bridge_slave_1: entered allmulticast mode [ 343.411237][ T6204] bridge_slave_1: entered promiscuous mode [ 343.842912][ T6204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.973352][ T6204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.400937][ T6369] loop3: detected capacity change from 0 to 128 [ 344.435067][ T6204] team0: Port device team_slave_0 added [ 344.586232][ T6204] team0: Port device team_slave_1 added [ 345.269247][ T6367] xt_CT: No such helper "snmp_trap" [ 345.298939][ T6204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.373562][ T6204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.570226][ T6204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.824622][ T6204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.858068][ T6204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.986982][ T6204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.137440][ T6204] hsr_slave_0: entered promiscuous mode [ 347.196986][ T6204] hsr_slave_1: entered promiscuous mode [ 347.232902][ T6204] debugfs: 'hsr0' already exists in 'hsr' [ 347.263428][ T6204] Cannot create hsr debugfs directory [ 347.475515][ T6248] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.508548][ T6248] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.525301][ T6248] bridge_slave_0: entered allmulticast mode [ 347.547808][ T6248] bridge_slave_0: entered promiscuous mode [ 347.786031][ T6248] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.872790][ T6248] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.241747][ T6382] ===================================================== [ 348.249044][ T6382] BUG: KMSAN: uninit-value in eth_type_trans+0x68f/0xae0 [ 348.256469][ T6382] eth_type_trans+0x68f/0xae0 [ 348.261417][ T6382] __dev_forward_skb2+0x4b1/0x940 [ 348.266808][ T6382] dev_forward_skb_nomtu+0x3b/0xe0 [ 348.272204][ T6382] __bpf_redirect+0x14d7/0x1760 [ 348.277388][ T6382] bpf_clone_redirect+0x4a6/0x6c0 [ 348.282731][ T6382] ___bpf_prog_run+0x13e8/0xea90 [ 348.288001][ T6382] __bpf_prog_run512+0xc5/0x100 [ 348.293093][ T6382] bpf_test_run+0x493/0xdf0 [ 348.297940][ T6382] bpf_prog_test_run_skb+0x2988/0x35f0 [ 348.303632][ T6382] bpf_prog_test_run+0x5bb/0x9f0 [ 348.308887][ T6382] __sys_bpf+0x925/0xee0 [ 348.313346][ T6382] __x64_sys_bpf+0xa4/0xf0 [ 348.318049][ T6382] x64_sys_call+0x13d0/0x3ea0 [ 348.322947][ T6382] do_syscall_64+0x134/0xf80 [ 348.327839][ T6382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.333938][ T6382] [ 348.336379][ T6382] Uninit was created at: [ 348.340996][ T6382] kmem_cache_alloc_node_noprof+0x3cd/0x12c0 [ 348.347325][ T6382] pskb_expand_head+0x2f3/0x1a40 [ 348.352477][ T6382] skb_ensure_writable+0x44e/0x510 [ 348.357812][ T6382] bpf_clone_redirect+0x301/0x6c0 [ 348.363134][ T6382] ___bpf_prog_run+0x13e8/0xea90 [ 348.368325][ T6382] __bpf_prog_run512+0xc5/0x100 [ 348.373531][ T6382] bpf_test_run+0x493/0xdf0 [ 348.378294][ T6382] bpf_prog_test_run_skb+0x2988/0x35f0 [ 348.384074][ T6382] bpf_prog_test_run+0x5bb/0x9f0 [ 348.389256][ T6382] __sys_bpf+0x925/0xee0 [ 348.393789][ T6382] __x64_sys_bpf+0xa4/0xf0 [ 348.398423][ T6382] x64_sys_call+0x13d0/0x3ea0 [ 348.403397][ T6382] do_syscall_64+0x134/0xf80 [ 348.408199][ T6382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.414368][ T6382] [ 348.416831][ T6382] CPU: 0 UID: 0 PID: 6382 Comm: syz.4.118 Tainted: G W syzkaller #0 PREEMPT(full) [ 348.427904][ T6382] Tainted: [W]=WARN [ 348.431822][ T6382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 348.442111][ T6382] ===================================================== [ 348.449252][ T6382] Disabling lock debugging due to kernel taint [ 348.455608][ T6382] Kernel panic - not syncing: kmsan.panic set ... [ 348.462181][ T6382] CPU: 0 UID: 0 PID: 6382 Comm: syz.4.118 Tainted: G B W syzkaller #0 PREEMPT(full) [ 348.473187][ T6382] Tainted: [B]=BAD_PAGE, [W]=WARN [ 348.478337][ T6382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 348.488547][ T6382] Call Trace: [ 348.491945][ T6382] [ 348.494995][ T6382] __dump_stack+0x26/0x30 [ 348.499547][ T6382] dump_stack_lvl+0x50/0x1c0 [ 348.504351][ T6382] ? dump_stack+0x12/0x25 [ 348.508893][ T6382] dump_stack+0x1e/0x25 [ 348.513429][ T6382] vpanic+0x7b4/0x1430 [ 348.517753][ T6382] panic+0x15d/0x160 [ 348.521937][ T6382] kmsan_report+0x31a/0x320 [ 348.526685][ T6382] ? bpf_clone_redirect+0x301/0x6c0 [ 348.532110][ T6382] ? __msan_warning+0x1b/0x30 [ 348.537002][ T6382] ? eth_type_trans+0x68f/0xae0 [ 348.542093][ T6382] ? __dev_forward_skb2+0x4b1/0x940 [ 348.547547][ T6382] ? dev_forward_skb_nomtu+0x3b/0xe0 [ 348.553094][ T6382] ? __bpf_redirect+0x14d7/0x1760 [ 348.558340][ T6382] ? bpf_clone_redirect+0x4a6/0x6c0 [ 348.563762][ T6382] ? ___bpf_prog_run+0x13e8/0xea90 [ 348.569114][ T6382] ? __bpf_prog_run512+0xc5/0x100 [ 348.574383][ T6382] ? bpf_test_run+0x493/0xdf0 [ 348.579292][ T6382] ? bpf_prog_test_run_skb+0x2988/0x35f0 [ 348.585165][ T6382] ? bpf_prog_test_run+0x5bb/0x9f0 [ 348.590524][ T6382] ? __sys_bpf+0x925/0xee0 [ 348.595164][ T6382] ? __x64_sys_bpf+0xa4/0xf0 [ 348.599967][ T6382] ? x64_sys_call+0x13d0/0x3ea0 [ 348.605050][ T6382] ? do_syscall_64+0x134/0xf80 [ 348.610036][ T6382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.616320][ T6382] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 348.622476][ T6382] ? kmsan_get_metadata+0xf1/0x160 [ 348.627829][ T6382] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 348.633906][ T6382] ? should_fail_ex+0x45/0x8c0 [ 348.638915][ T6382] ? stack_depot_save_flags+0x35/0x790 [ 348.644626][ T6382] ? kmsan_get_metadata+0xf1/0x160 [ 348.649985][ T6382] ? kmsan_get_metadata+0xf1/0x160 [ 348.655344][ T6382] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 348.661906][ T6382] ? kmsan_get_metadata+0xf1/0x160 [ 348.667257][ T6382] ? kmsan_get_metadata+0xf1/0x160 [ 348.672611][ T6382] ? kmsan_get_metadata+0xf1/0x160 [ 348.677984][ T6382] __msan_warning+0x1b/0x30 [ 348.682707][ T6382] eth_type_trans+0x68f/0xae0 [ 348.687637][ T6382] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 348.693730][ T6382] __dev_forward_skb2+0x4b1/0x940 [ 348.699047][ T6382] dev_forward_skb_nomtu+0x3b/0xe0 [ 348.704430][ T6382] __bpf_redirect+0x14d7/0x1760 [ 348.709527][ T6382] ? kmsan_get_metadata+0xf1/0x160 [ 348.714901][ T6382] bpf_clone_redirect+0x4a6/0x6c0 [ 348.720189][ T6382] ___bpf_prog_run+0x13e8/0xea90 [ 348.725421][ T6382] __bpf_prog_run512+0xc5/0x100 [ 348.730547][ T6382] ? sysvec_call_function_single+0x4f/0x90 [ 348.736605][ T6382] ? kmsan_get_metadata+0xf1/0x160 [ 348.741976][ T6382] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 348.748543][ T6382] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 348.754869][ T6382] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 348.760886][ T6382] ? kmsan_get_metadata+0xf1/0x160 [ 348.766244][ T6382] ? kmsan_get_metadata+0xf1/0x160 [ 348.771599][ T6382] ? kmsan_get_metadata+0xf1/0x160 [ 348.776959][ T6382] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 348.783519][ T6382] ? kmsan_get_metadata+0x146/0x160 [ 348.788967][ T6382] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 348.795034][ T6382] ? __pfx___bpf_prog_run512+0x10/0x10 [ 348.800754][ T6382] ? __pfx___bpf_prog_run512+0x10/0x10 [ 348.806477][ T6382] bpf_test_run+0x493/0xdf0 [ 348.811217][ T6382] ? kmsan_get_metadata+0xf1/0x160 [ 348.816584][ T6382] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 348.822671][ T6382] ? bpf_test_run+0x2f4/0xdf0 [ 348.827631][ T6382] bpf_prog_test_run_skb+0x2988/0x35f0 [ 348.833336][ T6382] ? futex_unqueue+0x22d/0x2c0 [ 348.838372][ T6382] ? kmsan_get_metadata+0xf1/0x160 [ 348.843739][ T6382] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 348.849832][ T6382] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 348.856435][ T6382] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 348.862490][ T6382] bpf_prog_test_run+0x5bb/0x9f0 [ 348.867707][ T6382] __sys_bpf+0x925/0xee0 [ 348.872234][ T6382] __x64_sys_bpf+0xa4/0xf0 [ 348.876878][ T6382] x64_sys_call+0x13d0/0x3ea0 [ 348.881799][ T6382] do_syscall_64+0x134/0xf80 [ 348.886617][ T6382] ? clear_bhb_loop+0x50/0xa0 [ 348.891506][ T6382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.897607][ T6382] RIP: 0033:0x7fd1e319cdd9 [ 348.902177][ T6382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.921991][ T6382] RSP: 002b:00007fd1e40d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 348.930616][ T6382] RAX: ffffffffffffffda RBX: 00007fd1e3416180 RCX: 00007fd1e319cdd9 [ 348.938771][ T6382] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 348.946914][ T6382] RBP: 00007fd1e3232d69 R08: 0000000000000000 R09: 0000000000000000 [ 348.955049][ T6382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.963190][ T6382] R13: 00007fd1e3416218 R14: 00007fd1e3416180 R15: 00007ffd4e154608 [ 348.971385][ T6382] [ 348.975197][ T6382] Kernel Offset: disabled [ 348.979706][ T6382] Rebooting in 86400 seconds..