last executing test programs: 6.482578478s ago: executing program 3 (id=8): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x88, 0x30, 0xb, 0x70bd26, 0x25dfdbfe, {}, [{0x74, 0x1, [@m_ct={0x70, 0x1, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x88}}, 0x20000080) 6.100364426s ago: executing program 3 (id=10): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x77359400}, 0x0) 5.731436642s ago: executing program 1 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4000, r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = dup(0xffffffffffffffff) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472614e873d6e6f3d", @ANYRESHEX=r5, @ANYBLOB=',wfdno', @ANYBLOB=',\x00']) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000080)={0x3, {{0x2, 0x4e23, @broadcast}}}, 0x88) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r9}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000340)={[{@errors_remount}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {}, {}, {@barrier_val={'barrier', 0x3d, 0x6d62}}]}, 0x3, 0x469, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 4.552442624s ago: executing program 1 (id=16): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) socket(0x10, 0x3, 0x6) close(0xffffffffffffffff) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000500004018210000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000c2000000bf090000000000005509010000"], &(0x7f00000004c0)='GPL\x00'}, 0x94) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c7766846e6f3d", @ANYRESHEX, @ANYBLOB=',\x00']) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="2b637075208e236ff97c564d43939f2512b7"], 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0xe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff85) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r9 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r9], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r7) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000500), 0x10) 4.482063346s ago: executing program 3 (id=17): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c000280080003400000000005000200890000000800014000e90009080006400000000208000440000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000003c0)=0x2, 0x12) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYRESOCT], 0xb4}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r7, 0x5) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r8, 0x1) flock(r8, 0x2) recvfrom(r1, &(0x7f00000004c0)=""/157, 0x9d, 0x14100, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x4e20, @local}, 0x1, 0x2}}, 0x80) dup3(r8, r7, 0x0) 3.818062289s ago: executing program 1 (id=20): connect$qrtr(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x80805, 0x0) unshare(0x6a040000) socket$netlink(0x10, 0x3, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) unshare(0x28000600) 3.18048774s ago: executing program 1 (id=23): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x108}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) unshare(0x62040200) 2.968562465s ago: executing program 0 (id=26): r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000023c0)={0x0, 'veth0_vlan\x00', {0x1}, 0xd}) 2.796578577s ago: executing program 0 (id=27): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 2.63049159s ago: executing program 0 (id=29): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x20080) r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x400, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 2.563272412s ago: executing program 3 (id=30): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x91, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r0, &(0x7f0000005480)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/111, 0x6f}], 0x1}, 0x1}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}, 0xf}, {{0x0, 0x0, 0x0}, 0xe625}], 0x3, 0x0, 0x0) 2.349451846s ago: executing program 0 (id=32): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000000c0)={r3}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x3, r2, 0x5}) socket$inet6(0x10, 0x3, 0x0) 1.933833104s ago: executing program 3 (id=33): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r0 = socket(0x2, 0x2, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x1}, 0x18) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xc2c}) 1.504242032s ago: executing program 3 (id=34): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00') r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3, 0x0, 0xffffffffffffffff, 0x5}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 1.313032416s ago: executing program 0 (id=35): r0 = socket$caif_stream(0x25, 0x1, 0x4) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x12000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000020000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000cda30000000085000000240000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="640000001600010026bd7000ffdbdf", @ANYRES32=0x0, @ANYBLOB="08000a00010000001400010000000000000000000000000000000000080008009004000014000100ff0100000000000000011400060000000000070000000000000009000000"], 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0xc090) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r6, &(0x7f00000009c0)=';', 0x1) sendfile(r6, r5, 0x0, 0x7fffeffd) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x4040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800cfdfa794a9dd63c590a67e2919fa6b3a090d952326fddb22b6238b23a21f5cb0d932d3e3c8425ee4c5d0a7aa33cba05621b8c472a0193e7c750f22189b751058496e4f7bd4104b978294e582f0a23f94981c9a1388b5d4bc6fa2fa6b7f92a405a71e5f8c4fe7", @ANYRES64=r5, @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="580100001000130700000000fcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e210002020000203b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x8880}, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r9, 0x5425, 0x0) socket(0x10, 0x803, 0x0) 1.08886609s ago: executing program 2 (id=36): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000840)="aefdda9d240303005a90f57f14705309f0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072aea", 0x2b}], 0x1) 893.385633ms ago: executing program 2 (id=37): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, &(0x7f00000004c0), &(0x7f00000006c0)='%pB \x00'}, 0x20) sigaltstack(0x0, 0x0) 681.527707ms ago: executing program 2 (id=38): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) 507.295861ms ago: executing program 2 (id=39): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56741, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xf, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5b6a, 0x6, 0x1, 0x9, 0x5, 0x1, 0x1, 0x10000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) 270.941116ms ago: executing program 0 (id=40): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") 260.695295ms ago: executing program 1 (id=41): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) 205.494027ms ago: executing program 2 (id=42): syz_open_dev$usbfs(&(0x7f0000000040), 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x5, 0x4, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002080)={r0, &(0x7f0000001000), 0x0}, 0x20) 45.22913ms ago: executing program 2 (id=43): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 0s ago: executing program 1 (id=44): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000023c0)={0x0, 'veth0_vlan\x00', {0x1}, 0xd}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.132' (ED25519) to the list of known hosts. [ 73.258637][ T5774] cgroup: Unknown subsys name 'net' [ 73.424792][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.031504][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.723255][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.733349][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.741169][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.742313][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.748839][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.764140][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.764412][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.779097][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.779826][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.793398][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.794042][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.808838][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.809384][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.827321][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.835925][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.836845][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.850842][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.857445][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.858699][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.873059][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.898036][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.916740][ T5796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.936750][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.954538][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.442979][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 77.455567][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 77.539502][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 77.601162][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 77.671722][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.679671][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.687015][ T5784] bridge_slave_0: entered allmulticast mode [ 77.694101][ T5784] bridge_slave_0: entered promiscuous mode [ 77.743414][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.750664][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.758120][ T5784] bridge_slave_1: entered allmulticast mode [ 77.764882][ T5784] bridge_slave_1: entered promiscuous mode [ 77.772390][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.779669][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.787258][ T5786] bridge_slave_0: entered allmulticast mode [ 77.794175][ T5786] bridge_slave_0: entered promiscuous mode [ 77.802959][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.810170][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.817605][ T5786] bridge_slave_1: entered allmulticast mode [ 77.824492][ T5786] bridge_slave_1: entered promiscuous mode [ 77.869362][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.877677][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.884832][ T5787] bridge_slave_0: entered allmulticast mode [ 77.892056][ T5787] bridge_slave_0: entered promiscuous mode [ 77.919542][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.942504][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.951737][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.959248][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.966428][ T5787] bridge_slave_1: entered allmulticast mode [ 77.973258][ T5787] bridge_slave_1: entered promiscuous mode [ 78.003401][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.014337][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.083032][ T5786] team0: Port device team_slave_0 added [ 78.092471][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.102108][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.110137][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.117520][ T5785] bridge_slave_0: entered allmulticast mode [ 78.124402][ T5785] bridge_slave_0: entered promiscuous mode [ 78.142548][ T5786] team0: Port device team_slave_1 added [ 78.161788][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.171320][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.178812][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.185946][ T5785] bridge_slave_1: entered allmulticast mode [ 78.193544][ T5785] bridge_slave_1: entered promiscuous mode [ 78.203151][ T5784] team0: Port device team_slave_0 added [ 78.254552][ T5784] team0: Port device team_slave_1 added [ 78.261609][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.269034][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.295279][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.308466][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.315427][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.341558][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.355134][ T5787] team0: Port device team_slave_0 added [ 78.365410][ T5787] team0: Port device team_slave_1 added [ 78.416997][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.449396][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.456476][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.482929][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.499221][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.508852][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.515818][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.542627][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.565085][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.572122][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.598128][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.639985][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.647147][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.673368][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.701994][ T5786] hsr_slave_0: entered promiscuous mode [ 78.708705][ T5786] hsr_slave_1: entered promiscuous mode [ 78.721338][ T5785] team0: Port device team_slave_0 added [ 78.731342][ T5785] team0: Port device team_slave_1 added [ 78.810717][ T5784] hsr_slave_0: entered promiscuous mode [ 78.817885][ T5784] hsr_slave_1: entered promiscuous mode [ 78.824165][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.833132][ T5784] Cannot create hsr debugfs directory [ 78.851736][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.858847][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.885176][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.917819][ T5788] Bluetooth: hci3: command tx timeout [ 78.923684][ T5801] Bluetooth: hci1: command tx timeout [ 78.936726][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.943700][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.970059][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.996665][ T5788] Bluetooth: hci0: command tx timeout [ 79.002526][ T5801] Bluetooth: hci2: command tx timeout [ 79.011529][ T5787] hsr_slave_0: entered promiscuous mode [ 79.018331][ T5787] hsr_slave_1: entered promiscuous mode [ 79.024517][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.032799][ T5787] Cannot create hsr debugfs directory [ 79.169808][ T5785] hsr_slave_0: entered promiscuous mode [ 79.180848][ T5785] hsr_slave_1: entered promiscuous mode [ 79.188698][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.196296][ T5785] Cannot create hsr debugfs directory [ 79.433787][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.458560][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.468853][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.479156][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.541271][ T5787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.567439][ T5787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.580918][ T5787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.594472][ T5787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.671643][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.688406][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.699224][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.709781][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.799143][ T5785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.809469][ T5785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.823148][ T5785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.841911][ T5785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.968701][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.000270][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.010624][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.045881][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.061224][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.082034][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.089354][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.108939][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.116075][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.131652][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.160235][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.167412][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.184522][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.191669][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.224707][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.231841][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.269363][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.276545][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.319953][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.371902][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.390912][ T5784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.417996][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.443626][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.450802][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.472137][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.479315][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.871562][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.924247][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.978217][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.998620][ T5801] Bluetooth: hci1: command tx timeout [ 80.998630][ T5788] Bluetooth: hci3: command tx timeout [ 81.034227][ T5787] veth0_vlan: entered promiscuous mode [ 81.064992][ T5787] veth1_vlan: entered promiscuous mode [ 81.077529][ T5788] Bluetooth: hci2: command tx timeout [ 81.077927][ T5801] Bluetooth: hci0: command tx timeout [ 81.102298][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.114732][ T5786] veth0_vlan: entered promiscuous mode [ 81.134213][ T5784] veth0_vlan: entered promiscuous mode [ 81.160335][ T5786] veth1_vlan: entered promiscuous mode [ 81.172085][ T5784] veth1_vlan: entered promiscuous mode [ 81.211689][ T5787] veth0_macvtap: entered promiscuous mode [ 81.245049][ T5784] veth0_macvtap: entered promiscuous mode [ 81.255156][ T5787] veth1_macvtap: entered promiscuous mode [ 81.274982][ T5784] veth1_macvtap: entered promiscuous mode [ 81.296315][ T5786] veth0_macvtap: entered promiscuous mode [ 81.324764][ T5785] veth0_vlan: entered promiscuous mode [ 81.345865][ T5786] veth1_macvtap: entered promiscuous mode [ 81.359453][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.373561][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.385379][ T5785] veth1_vlan: entered promiscuous mode [ 81.402043][ T5787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.411315][ T5787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.421015][ T5787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.430157][ T5787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.474036][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.485049][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.500778][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.510365][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.521514][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.532367][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.542985][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.555479][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.566046][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.577270][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.590127][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.601912][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.611980][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.620747][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.629989][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.681344][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.692476][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.708146][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.731585][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.743498][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.773908][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.791441][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.800865][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.816237][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.868378][ T5785] veth0_macvtap: entered promiscuous mode [ 81.940372][ T5785] veth1_macvtap: entered promiscuous mode [ 82.001984][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.017446][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.033554][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.051189][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.062933][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.073807][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.084013][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.094996][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.107126][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.150235][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.169674][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.181296][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.192333][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.204042][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.215340][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.227845][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.252491][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.261542][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.300222][ T5785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.320173][ T5785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.332401][ T5785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.343563][ T5785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.371374][ T989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.381602][ T989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.435442][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.447375][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.550995][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.589706][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.626949][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.634819][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.731824][ T5881] syz.0.1[5881]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 82.779799][ T989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.791727][ T989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.803114][ T5881] loop0: detected capacity change from 0 to 1024 [ 82.824937][ T5881] ======================================================= [ 82.824937][ T5881] WARNING: The mand mount option has been deprecated and [ 82.824937][ T5881] and is ignored by this kernel. Remove the mand [ 82.824937][ T5881] option from the mount to silence this warning. [ 82.824937][ T5881] ======================================================= [ 82.865345][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.885542][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.983269][ T5881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.083791][ T5801] Bluetooth: hci1: command tx timeout [ 83.084088][ T5788] Bluetooth: hci3: command tx timeout [ 83.157354][ T27] audit: type=1326 audit(1757843710.177:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1e718eba9 code=0x7ffc0000 [ 83.180751][ T5788] Bluetooth: hci0: command tx timeout [ 83.186191][ T5788] Bluetooth: hci2: command tx timeout [ 83.193295][ T27] audit: type=1326 audit(1757843710.207:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb1e718eba9 code=0x7ffc0000 [ 83.249339][ T27] audit: type=1326 audit(1757843710.217:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150d8eba9 code=0x7ffc0000 [ 83.271458][ T27] audit: type=1326 audit(1757843710.217:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150d8eba9 code=0x7ffc0000 [ 83.295761][ T27] audit: type=1326 audit(1757843710.247:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1e718eba9 code=0x7ffc0000 [ 83.321430][ T27] audit: type=1326 audit(1757843710.247:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1e718eba9 code=0x7ffc0000 [ 83.356883][ T5891] netlink: 'syz.2.3': attribute type 30 has an invalid length. [ 83.396852][ T27] audit: type=1326 audit(1757843710.257:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1150d8eba9 code=0x7ffc0000 [ 83.423635][ T27] audit: type=1326 audit(1757843710.257:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150d8eba9 code=0x7ffc0000 [ 83.434190][ T5891] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.455257][ T5891] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.464108][ T5891] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.472970][ T5891] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.507657][ T27] audit: type=1326 audit(1757843710.257:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1150d8eba9 code=0x7ffc0000 [ 83.548476][ T5891] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.554426][ T27] audit: type=1326 audit(1757843710.257:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150d8eba9 code=0x7ffc0000 [ 83.558615][ T5891] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.589012][ T5891] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.598008][ T5891] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.665357][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.796917][ T5891] Zero length message leads to an empty skb [ 83.895083][ T5900] loop0: detected capacity change from 0 to 1024 [ 83.908419][ T5900] EXT4-fs: Ignoring removed bh option [ 83.944675][ T5900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.998768][ T5900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 84.819846][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.011528][ T5917] loop1: detected capacity change from 0 to 512 [ 85.068422][ T5917] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 85.082691][ T5917] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 85.161583][ T5917] EXT4-fs (loop1): 1 orphan inode deleted [ 85.167492][ T5917] EXT4-fs (loop1): 1 truncate cleaned up [ 85.181963][ T5917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.336625][ T5801] Bluetooth: hci1: command tx timeout [ 85.342167][ T5801] Bluetooth: hci2: command tx timeout [ 85.347758][ T5801] Bluetooth: hci0: command tx timeout [ 85.353356][ T5788] Bluetooth: hci3: command tx timeout [ 85.385154][ T5917] EXT4-fs error (device loop1): ext4_lookup:1850: inode #2: comm syz.1.12: bad inode number: 12 [ 85.419315][ T5917] EXT4-fs (loop1): Remounting filesystem read-only [ 85.652260][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.794094][ T5923] loop0: detected capacity change from 0 to 128 [ 85.881803][ T5923] syz.0.14: attempt to access beyond end of device [ 85.881803][ T5923] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 85.932744][ T5923] syz.0.14: attempt to access beyond end of device [ 85.932744][ T5923] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 85.959497][ T5928] 9pnet_fd: Insufficient options for proto=fd [ 86.689695][ T5952] netlink: 'syz.0.21': attribute type 1 has an invalid length. [ 86.719421][ T5952] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.21'. [ 86.763357][ T5952] loop0: detected capacity change from 0 to 128 [ 86.778105][ T28] cfg80211: failed to load regulatory.db [ 86.813086][ T5952] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 86.882508][ T5952] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.247891][ T5786] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.348531][ T5965] program syz.2.25 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.181172][ T5996] sg_write: data in/out 197376/1 bytes for SCSI command 0x8-- guessing data in; [ 89.181172][ T5996] program syz.2.36 not setting count and/or reply_len properly [ 89.323985][ T27] kauditd_printk_skb: 106 callbacks suppressed [ 89.324001][ T27] audit: type=1326 audit(1757843716.347:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5998 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0788f8eba9 code=0x7ffc0000 [ 89.368821][ T27] audit: type=1326 audit(1757843716.347:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5998 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0788f8eba9 code=0x7ffc0000 [ 89.415493][ T27] audit: type=1326 audit(1757843716.357:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5998 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0788f8eba9 code=0x7ffc0000 [ 89.483325][ T27] audit: type=1326 audit(1757843716.357:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5998 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0788f8eba9 code=0x7ffc0000 [ 89.543299][ T27] audit: type=1326 audit(1757843716.357:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5998 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0788f8eba9 code=0x7ffc0000 [ 89.587632][ T27] audit: type=1326 audit(1757843716.357:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5998 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0788f8eba9 code=0x7ffc0000 [ 89.667957][ T27] audit: type=1326 audit(1757843716.367:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5998 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0788f8eba9 code=0x7ffc0000 [ 89.715023][ T27] audit: type=1326 audit(1757843716.377:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5998 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0788f8eba9 code=0x7ffc0000 [ 89.773513][ T27] audit: type=1326 audit(1757843716.377:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5998 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0788f8eba9 code=0x7ffc0000 [ 89.815502][ T27] audit: type=1326 audit(1757843716.377:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5998 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0788f8eba9 code=0x7ffc0000 [ 90.024353][ T6008] loop0: detected capacity change from 0 to 512 [ 90.100364][ T6008] EXT4-fs warning (device loop0): ext4_xattr_inode_get:545: inode #11: comm syz.0.40: ea_inode file size=0 entry size=6 [ 90.192972][ T6008] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 90.231093][ T6008] ------------[ cut here ]------------ [ 90.237483][ T6008] EA inode 11 i_nlink=2 [ 90.255689][ T6008] WARNING: CPU: 0 PID: 6008 at fs/ext4/xattr.c:1070 ext4_xattr_inode_update_ref+0x521/0x580 [ 90.270967][ T6008] Modules linked in: [ 90.274919][ T6008] CPU: 0 PID: 6008 Comm: syz.0.40 Not tainted syzkaller #0 [ 90.282318][ T6008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 90.293508][ T6008] RIP: 0010:ext4_xattr_inode_update_ref+0x521/0x580 [ 90.300429][ T6008] Code: 24 50 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 31 43 9a ff 49 8b 37 48 c7 c7 00 d1 be 8a 44 89 f2 e8 cf 73 0d ff <0f> 0b 4c 8b 64 24 18 48 8b 5c 24 10 4c 8d 7c 24 60 e9 1f fe ff ff [ 90.320152][ T6008] RSP: 0018:ffffc90005217340 EFLAGS: 00010246 [ 90.326392][ T6008] RAX: ab71cb2410637a00 RBX: 0000000000000001 RCX: 0000000000080000 [ 90.334397][ T6008] RDX: ffffc9000c779000 RSI: 0000000000025e39 RDI: 0000000000025e3a [ 90.342460][ T6008] RBP: ffffc90005217430 R08: ffffc90005216f47 R09: 1ffff92000a42de8 [ 90.350629][ T6008] R10: dffffc0000000000 R11: fffff52000a42de9 R12: ffff888076b996b0 [ 90.358878][ T6008] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff888076b99700 [ 90.366930][ T6008] FS: 00007fb1e80086c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 90.375895][ T6008] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.382579][ T6008] CR2: 000055557c2a1808 CR3: 0000000075b97000 CR4: 00000000003506f0 [ 90.390663][ T6008] Call Trace: [ 90.394951][ T6008] [ 90.398121][ T6008] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 90.403813][ T6008] ? __ext4_journal_ensure_credits+0x30/0x450 [ 90.410041][ T6008] ext4_xattr_inode_dec_ref_all+0xa2b/0xf90 [ 90.416000][ T6008] ? ext4_xattr_delete_inode+0xc00/0xc00 [ 90.421758][ T6008] ? __ext4_journal_ensure_credits+0x450/0x450 [ 90.428031][ T6008] ext4_xattr_delete_inode+0xa45/0xc00 [ 90.433541][ T6008] ? ext4_truncate+0xc12/0x1060 [ 90.438516][ T6008] ? ext4_expand_extra_isize_ea+0x19e0/0x19e0 [ 90.444643][ T6008] ext4_evict_inode+0xaa3/0xea0 [ 90.449583][ T6008] ? _raw_spin_unlock+0x28/0x40 [ 90.454480][ T6008] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 90.460455][ T6008] ? do_raw_spin_unlock+0x121/0x230 [ 90.465709][ T6008] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 90.471670][ T6008] evict+0x486/0x870 [ 90.475609][ T6008] ? __lock_acquire+0x7c80/0x7c80 [ 90.480725][ T6008] ? proc_nr_inodes+0x230/0x230 [ 90.485603][ T6008] ? do_raw_spin_unlock+0x121/0x230 [ 90.490893][ T6008] ? _raw_spin_unlock+0x28/0x40 [ 90.495776][ T6008] ? iput+0x70a/0x920 [ 90.500827][ T6008] ext4_orphan_cleanup+0xbd4/0x1400 [ 90.506104][ T6008] ? ext4_orphan_del+0xba0/0xba0 [ 90.511284][ T6008] ? ext4_register_li_request+0x183/0x940 [ 90.517306][ T6008] ? errseq_check_and_advance+0x66/0x120 [ 90.522985][ T6008] ext4_fill_super+0x5de7/0x66c0 [ 90.528044][ T6008] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 90.534341][ T6008] ? vscnprintf+0x80/0x80 [ 90.538974][ T6008] ? down_read_killable+0x340/0x340 [ 90.544269][ T6008] ? setup_bdev_super+0x56b/0x660 [ 90.549428][ T6008] get_tree_bdev+0x3e4/0x510 [ 90.554050][ T6008] ? vfs_parse_fs_string+0x160/0x160 [ 90.559414][ T6008] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 90.565696][ T6008] ? setup_bdev_super+0x660/0x660 [ 90.570803][ T6008] ? apparmor_capable+0x137/0x1a0 [ 90.575866][ T6008] ? bpf_lsm_capable+0x9/0x10 [ 90.580641][ T6008] ? security_capable+0x89/0xb0 [ 90.585535][ T6008] vfs_get_tree+0x8c/0x280 [ 90.590179][ T6008] do_new_mount+0x24b/0xa40 [ 90.594737][ T6008] __se_sys_mount+0x2da/0x3c0 [ 90.600805][ T6008] ? __x64_sys_mount+0xc0/0xc0 [ 90.605611][ T6008] ? lockdep_hardirqs_on+0x98/0x150 [ 90.611099][ T6008] ? __x64_sys_mount+0x20/0xc0 [ 90.615930][ T6008] do_syscall_64+0x55/0xb0 [ 90.620468][ T6008] ? clear_bhb_loop+0x40/0x90 [ 90.625179][ T6008] ? clear_bhb_loop+0x40/0x90 [ 90.629958][ T6008] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.635883][ T6008] RIP: 0033:0x7fb1e719034a [ 90.640384][ T6008] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.660087][ T6008] RSP: 002b:00007fb1e8007e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 90.668596][ T6008] RAX: ffffffffffffffda RBX: 00007fb1e8007ef0 RCX: 00007fb1e719034a [ 90.676665][ T6008] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fb1e8007eb0 [ 90.684694][ T6008] RBP: 0000200000000180 R08: 00007fb1e8007ef0 R09: 0000000000800700 [ 90.692774][ T6008] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 90.700845][ T6008] R13: 00007fb1e8007eb0 R14: 0000000000000473 R15: 0000200000000680 [ 90.709633][ T6008] [ 90.712677][ T6008] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 90.719955][ T6008] CPU: 0 PID: 6008 Comm: syz.0.40 Not tainted syzkaller #0 [ 90.727154][ T6008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 90.737213][ T6008] Call Trace: [ 90.740491][ T6008] [ 90.743424][ T6008] dump_stack_lvl+0x16c/0x230 [ 90.748113][ T6008] ? show_regs_print_info+0x20/0x20 [ 90.753321][ T6008] ? load_image+0x3b0/0x3b0 [ 90.757839][ T6008] panic+0x2c0/0x710 [ 90.761745][ T6008] ? bpf_jit_dump+0xd0/0xd0 [ 90.766275][ T6008] __warn+0x2e0/0x470 [ 90.770271][ T6008] ? ext4_xattr_inode_update_ref+0x521/0x580 [ 90.776260][ T6008] ? ext4_xattr_inode_update_ref+0x521/0x580 [ 90.782247][ T6008] report_bug+0x2be/0x4f0 [ 90.786584][ T6008] ? ext4_xattr_inode_update_ref+0x521/0x580 [ 90.792570][ T6008] ? ext4_xattr_inode_update_ref+0x521/0x580 [ 90.798558][ T6008] ? ext4_xattr_inode_update_ref+0x523/0x580 [ 90.804542][ T6008] handle_bug+0xcf/0x120 [ 90.808794][ T6008] exc_invalid_op+0x1a/0x50 [ 90.813304][ T6008] asm_exc_invalid_op+0x1a/0x20 [ 90.818154][ T6008] RIP: 0010:ext4_xattr_inode_update_ref+0x521/0x580 [ 90.824766][ T6008] Code: 24 50 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 31 43 9a ff 49 8b 37 48 c7 c7 00 d1 be 8a 44 89 f2 e8 cf 73 0d ff <0f> 0b 4c 8b 64 24 18 48 8b 5c 24 10 4c 8d 7c 24 60 e9 1f fe ff ff [ 90.844380][ T6008] RSP: 0018:ffffc90005217340 EFLAGS: 00010246 [ 90.850452][ T6008] RAX: ab71cb2410637a00 RBX: 0000000000000001 RCX: 0000000000080000 [ 90.858421][ T6008] RDX: ffffc9000c779000 RSI: 0000000000025e39 RDI: 0000000000025e3a [ 90.866397][ T6008] RBP: ffffc90005217430 R08: ffffc90005216f47 R09: 1ffff92000a42de8 [ 90.874371][ T6008] R10: dffffc0000000000 R11: fffff52000a42de9 R12: ffff888076b996b0 [ 90.882339][ T6008] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff888076b99700 [ 90.890327][ T6008] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 90.895971][ T6008] ? __ext4_journal_ensure_credits+0x30/0x450 [ 90.902045][ T6008] ext4_xattr_inode_dec_ref_all+0xa2b/0xf90 [ 90.907955][ T6008] ? ext4_xattr_delete_inode+0xc00/0xc00 [ 90.913592][ T6008] ? __ext4_journal_ensure_credits+0x450/0x450 [ 90.919767][ T6008] ext4_xattr_delete_inode+0xa45/0xc00 [ 90.925240][ T6008] ? ext4_truncate+0xc12/0x1060 [ 90.930098][ T6008] ? ext4_expand_extra_isize_ea+0x19e0/0x19e0 [ 90.936184][ T6008] ext4_evict_inode+0xaa3/0xea0 [ 90.941040][ T6008] ? _raw_spin_unlock+0x28/0x40 [ 90.945900][ T6008] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 90.951803][ T6008] ? do_raw_spin_unlock+0x121/0x230 [ 90.957008][ T6008] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 90.962908][ T6008] evict+0x486/0x870 [ 90.966807][ T6008] ? __lock_acquire+0x7c80/0x7c80 [ 90.971838][ T6008] ? proc_nr_inodes+0x230/0x230 [ 90.976714][ T6008] ? do_raw_spin_unlock+0x121/0x230 [ 90.981920][ T6008] ? _raw_spin_unlock+0x28/0x40 [ 90.986773][ T6008] ? iput+0x70a/0x920 [ 90.990761][ T6008] ext4_orphan_cleanup+0xbd4/0x1400 [ 90.995981][ T6008] ? ext4_orphan_del+0xba0/0xba0 [ 91.000930][ T6008] ? ext4_register_li_request+0x183/0x940 [ 91.006670][ T6008] ? errseq_check_and_advance+0x66/0x120 [ 91.012314][ T6008] ext4_fill_super+0x5de7/0x66c0 [ 91.017278][ T6008] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 91.023523][ T6008] ? vscnprintf+0x80/0x80 [ 91.027859][ T6008] ? down_read_killable+0x340/0x340 [ 91.033079][ T6008] ? setup_bdev_super+0x56b/0x660 [ 91.038107][ T6008] get_tree_bdev+0x3e4/0x510 [ 91.042714][ T6008] ? vfs_parse_fs_string+0x160/0x160 [ 91.048003][ T6008] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 91.054244][ T6008] ? setup_bdev_super+0x660/0x660 [ 91.059267][ T6008] ? apparmor_capable+0x137/0x1a0 [ 91.064310][ T6008] ? bpf_lsm_capable+0x9/0x10 [ 91.068995][ T6008] ? security_capable+0x89/0xb0 [ 91.073850][ T6008] vfs_get_tree+0x8c/0x280 [ 91.078275][ T6008] do_new_mount+0x24b/0xa40 [ 91.082800][ T6008] __se_sys_mount+0x2da/0x3c0 [ 91.087484][ T6008] ? __x64_sys_mount+0xc0/0xc0 [ 91.092247][ T6008] ? lockdep_hardirqs_on+0x98/0x150 [ 91.097451][ T6008] ? __x64_sys_mount+0x20/0xc0 [ 91.102219][ T6008] do_syscall_64+0x55/0xb0 [ 91.106647][ T6008] ? clear_bhb_loop+0x40/0x90 [ 91.111329][ T6008] ? clear_bhb_loop+0x40/0x90 [ 91.116008][ T6008] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.121914][ T6008] RIP: 0033:0x7fb1e719034a [ 91.126332][ T6008] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.145941][ T6008] RSP: 002b:00007fb1e8007e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 91.154354][ T6008] RAX: ffffffffffffffda RBX: 00007fb1e8007ef0 RCX: 00007fb1e719034a [ 91.162335][ T6008] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fb1e8007eb0 [ 91.170302][ T6008] RBP: 0000200000000180 R08: 00007fb1e8007ef0 R09: 0000000000800700 [ 91.178271][ T6008] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 91.186243][ T6008] R13: 00007fb1e8007eb0 R14: 0000000000000473 R15: 0000200000000680 [ 91.194244][ T6008] [ 91.197576][ T6008] Kernel Offset: disabled [ 91.201959][ T6008] Rebooting in 86400 seconds..