last executing test programs: 10.098440749s ago: executing program 2 (id=374): wait4(0xffffffffffffffff, &(0x7f0000000000), 0x1, &(0x7f0000000040)={{0x0, 0x0}, {0x0, 0x0}}) syz_emit_ethernet(0x1dc, &(0x7f0000000600)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b01049d990780007fe06e2d4c3d91312ca1f9ab6010ae43cdeba8c54a1a44e52522bcb9cc46086d1be1674605c3cb9ce795a8320ab77da2e9fa027b8380c842dc602c6ccdbb02b38ba3328988bf62dac753034884d8eebc22910f24dab1af3253e844f976c8e5031f2365f9795e6cda85acce6db1df1591f81a72bdbebc114118d4794f8cbab91ae5e08ae6ff67005a9172e1fc46b46fd5df9f2982a4b7f0a3cbb56a683ac9dd024d13faed16eae277653620bf6f87a18f1e981abe643982b7844395d0caa4672016fe3c33452f3dd23852d06088b57953dd1af3cd46a3e8560aac96e93e2014a2890476f2b0685"], 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRESDEC=r1, @ANYRES32=r2, @ANYRES64=r3], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) mount$tmpfs(0x0, 0x0, 0x0, 0x20001, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000180)={[{@grpid}, {@jqfmt_vfsold}]}, 0x1, 0x254, &(0x7f0000000340)="$eJzs3T1oJGUcBvBnZnc9c7fIqY0gfoCIaCCcnWBzNgoHchwiggonojbKRYgJdomVjYXWKqlsgtgZLSVNsFEEq6gpYiNosDBYaLGyOxvJx+qqm+zIze8HszPvzsd/Zneed7bY2Q3QWOeTXEzSSjKbpJOkOLjA3dVwfthcndm8mvR6T/xcDJar2pX99c4lWUnyUJKNssjL7WRp/ZmdX7ceu++txc69H6w/PTPVgxza3dl+fO/9y29+fOnBpS+//vFykYvpHjquk1eMeK5dJLecRrH/iaJd9x7wT1x5/aNv+rm/Nck9g/x3UqZ6895euGGjkwfe+6t13/npq9unua/Ayev1Ov1r4EoPaJwySTdFOZekmi7LubnqM/y3rbPlK/MLr82+NL947YW6eyrgpHST7Uc/PfPJuSP5/6FV5X+oVetOAqein/8nr6x915/ek3JohjuqUT//s88t3x/5h8aRf2iQFw+1SvmH5hqf/1q+ogNMges/NJf8Q3PJP1zHOn8/W/6hueQfmkv+obkO5h8AaJbembrvQAbqUnf/AwAAAAAAAAAAAAAAAAAAHLc6s3l1f5hWzc/fTXYfSdIeVb81+D/i5MbB49lfiv5ifyqq1Sby7F0TbmBCH9Z89/VN30/8Ek7kizvrrJ4sX0tW3khyod0+fv4Vw/Pvv7t5zPzO8xMW+JeKI+2Hn5pu/aN+X6u3/qWt5LN+/3NhVP9T5rbBeHT/0x3/E8tjvfrbhBsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgav4IAAD//7ANbcM=") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x8004587d, &(0x7f0000000080)) capset(0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file2\x00', 0x208018, &(0x7f00000005c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@noload}, {}]}, 0xfe, 0x479, &(0x7f0000000a80)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe066) set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x46060480) 7.692100725s ago: executing program 4 (id=388): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000410000500000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000800000000000000000001801000020bd342100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1600000000", @ANYRESDEC=r0, @ANYBLOB='\x00'/15, @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0xfff, 0x1, 0xc, 0x1}) ioctl$BLKTRACESETUP(r3, 0x1276, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x8, 0x1000, 0xc0, 0x80000000, 0x8, 0x7}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYRES16=r2], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYRES8=r5, @ANYBLOB="c41054d70b32a53760e66346a693c76134127b48f7bc1a610b381eb89b3dd9d173671cfba0c664dc45fa6de41e7d5c26e7e9c3eab8945c2c0ab0fa4114760d8bcb1d9021ce34bf88c1be94e3f0ddd8a59077fa596025f97d8f191cc1862293e30aee", @ANYRES16=r5, @ANYRESOCT=r6], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x404042bbe) 7.153189414s ago: executing program 3 (id=389): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[]) 7.149376247s ago: executing program 2 (id=390): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x5]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'bridge0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="01002abd"], 0x24}, 0x1, 0x0, 0x0, 0x4004841}, 0x4810) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.563145971s ago: executing program 4 (id=393): r0 = socket$inet(0x2, 0x2, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xf3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 6.149451619s ago: executing program 3 (id=395): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0x36, 0x0) 6.12366592s ago: executing program 2 (id=396): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x4123c100, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x4800) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x47, 0x2}, 0x7) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a0682) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd132b6a5426180a8c27a00fcfffff0003336f794d20352346f8f"}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x5, 0xe1, 0x0, 0x0, @time, {}, {0x0, 0x1}, @raw8={"1b28c02c97e8c88ddd550281"}}], 0x1c) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f00000000c0)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/89, 0x59}], 0x1, 0x0) 6.087639079s ago: executing program 4 (id=397): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000001580)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "711e8f", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @dev}, {[], @time_exceed={0x9, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "bede78", 0x0, 0x0, 0x0, @dev, @loopback, [@srh]}}}}}}}, 0x0) 5.225447475s ago: executing program 3 (id=399): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1809}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000380)=@ccm_128={{0x304}, "1bb59684423031d5", "b518ec45e428570213debdfea23df4fe", "bafe5ad9", "ab31d35bed3ad4c4"}, 0x28) 5.027678644s ago: executing program 4 (id=400): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000006, &(0x7f0000000040)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@abort}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@nobh}, {@block_validity}, {@orlov}, {@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x400}}]}, 0x1, 0x556, &(0x7f0000001100)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x30, 0x3) 4.630519163s ago: executing program 1 (id=401): open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}}, 0x0) 4.517240892s ago: executing program 0 (id=402): r0 = eventfd2(0x9, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup3(r1, r0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f000009de80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x0) read$FUSE(r3, &(0x7f0000006100)={0x2020}, 0x204a) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 4.461690862s ago: executing program 2 (id=403): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000410000500000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000800000000000000000001801000020bd342100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1600000000", @ANYRESDEC=r0, @ANYBLOB='\x00'/15, @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0xfff, 0x1, 0xc, 0x1}) ioctl$BLKTRACESETUP(r3, 0x1276, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x8, 0x1000, 0xc0, 0x80000000, 0x8, 0x7}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYRES16=r2], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYRES8=r5, @ANYBLOB="c41054d70b32a53760e66346a693c76134127b48f7bc1a610b381eb89b3dd9d173671cfba0c664dc45fa6de41e7d5c26e7e9c3eab8945c2c0ab0fa4114760d8bcb1d9021ce34bf88c1be94e3f0ddd8a59077fa596025f97d8f191cc1862293e30aee", @ANYRES16=r5, @ANYRESOCT=r6], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x404042bbe) 3.658660484s ago: executing program 1 (id=404): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000580)={{}, 0x1}) 3.549503478s ago: executing program 3 (id=405): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f0000000480)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_abort}, {@minixdf}, {@errors_remount}, {@abort}, {@noblock_validity}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x618, &(0x7f0000000640)="$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") 3.361992882s ago: executing program 4 (id=406): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x5]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'bridge0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004841}, 0x4810) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.34465348s ago: executing program 1 (id=407): r0 = socket$inet(0x2, 0x2, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xf3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 3.132995025s ago: executing program 0 (id=408): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002740)=@delchain={0x5b0, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4}, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x56c, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x3, 0x2}}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bridge\x00'}, @TCA_U32_ACT={0x53c, 0x7, [@m_mpls={0xb4, 0x1e, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x6005}, @TCA_MPLS_LABEL={0x8, 0x5, 0x38993}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x1ff, 0x0, 0x29c2, 0x7f}, 0x4}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xbc27b}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf80e6}]}, {0x39, 0x6, "612d3699db034f8f08430151bfb3f0819c1d44301a821ce1a7e2fcd26a93322f414a08eb783ba01be15256ed15fc2fa03568c8552b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mirred={0xf8, 0x1e, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7, 0x20000000, 0xffff, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x7, 0x8, 0x8, 0x401}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3a61, 0x5a68ce02, 0x0, 0x2eca, 0x5}, 0x3}}]}, {0x69, 0x6, "71558f82c797ed40aa96cae0561caac80e37421fbe6b5847795e9152419bd6e36082801f37e53ccbea50d8b4e7d6d4cd06cec76ec462499bdf122811144a51b56146738d4d25cbd285f2e729dbbe3c6137f7cd123b784cfddefd732ecc306f6cd0dc9c82ff"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x64, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x35, 0x6, "becc0dfba237e62806d749b491e4df74a2edaae87448c525c394a1cd2b702d5bf5d0417b2f2d65c8e351d44c338dd81ad3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0xfc, 0x15, 0x0, 0x0, {{0x7}, {0xac, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffc01}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x3d, 0x6, {0x6, 'security\x00', 0x63, 0xc, "f74fefd4940193941910a10b7b3c60639c9c5a"}}, @TCA_IPT_TARG={0x2a, 0x6, {0xffff, 'mangle\x00', 0x8, 0x4}}]}, {0x29, 0x6, "7cc4d4d8913023393152cf1483893cb72022204afc5a3c78451fb35e595b70d04ef5495ca4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x44, 0xb, 0x0, 0x0, {{0x7}, {0x4}, {0x19, 0x6, "3b8dd99ff628f0e136ea03ee3bb7e4eb97a588c1fa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x2c, 0x1f, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ctinfo={0x64, 0xf, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x25, 0x6, "871e4a3093c0e8019f3e85d16b62fbd06858927c4759e03eb68fe380f18d158dfe"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_pedit={0xc8, 0x13, 0x0, 0x0, {{0xa}, {0x4}, {0x99, 0x6, "13095aa19e3ff97ff1475cc7f6d44e64023e0f07f5503ec93c537ec467da66e10c0670c5424185a4211b985fbb71c90e943fd5ba6989123f51adc29f4d098a5853a725f727bd15293ea587519524ef80fd8af80f756cfebcef3980870a5ae562474c9ec51aaff99d80483e5889203fa14a5bdb050b4f8c23a709ea648f0083bafcaefd2dfdc6e9fd21bd1230b100d95fdedd566e96"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x90, 0x2, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_ZONE={0x6, 0x4, 0x260d}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0e16c0fbcfd4e59e5f04cfa3cef75f58"}, @TCA_CT_ZONE={0x6, 0x4, 0x40}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x5b0}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.113375175s ago: executing program 2 (id=409): syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x5400, 0x0) 2.660287732s ago: executing program 0 (id=410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2.477786213s ago: executing program 1 (id=411): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 2.123675832s ago: executing program 1 (id=412): r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) recvmsg(r0, &(0x7f0000002600)={0x0, 0x0, 0x0}, 0x2021) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000180)}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x1b0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r5) sendmsg$IEEE802154_LIST_PHY(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x14, r6, 0x30b, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) r8 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000268000/0x4000)=nil, 0x4000, 0x1000002, 0x4016012, r8, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r7, 0x0, 0x25, 0x1, @void}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 2.024293118s ago: executing program 0 (id=413): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x4123c100, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x4800) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x47, 0x2}, 0x7) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a0682) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd132b6a5426180a8c27a00fcfffff0003336f794d20352346f8f"}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x5, 0xe1, 0x0, 0x0, @time, {}, {0x0, 0x1}, @raw8={"1b28c02c97e8c88ddd550281"}}], 0x1c) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f00000000c0)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/89, 0x59}], 0x1, 0x0) 1.611218836s ago: executing program 2 (id=414): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0900000004000000ff"], 0x50) socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@discard}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@dioread_nolock}]}, 0x4, 0x45b, &(0x7f00000010c0)="$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") 1.43758967s ago: executing program 3 (id=415): syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 889.589715ms ago: executing program 1 (id=416): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x56, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") unlink(&(0x7f0000000000)='./file1\x00') 775.817416ms ago: executing program 0 (id=417): ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000580)={{}, 0x1}) 534.527875ms ago: executing program 4 (id=418): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 236.400753ms ago: executing program 0 (id=419): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000410000500000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000800000000000000000001801000020bd342100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1600000000", @ANYRESDEC=r0, @ANYBLOB='\x00'/15, @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0xfff, 0x1, 0xc, 0x1}) ioctl$BLKTRACESETUP(r3, 0x1276, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x8, 0x1000, 0xc0, 0x80000000, 0x8, 0x7}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYRES16=r2], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYRES8=r5, @ANYBLOB="c41054d70b32a53760e66346a693c76134127b48f7bc1a610b381eb89b3dd9d173671cfba0c664dc45fa6de41e7d5c26e7e9c3eab8945c2c0ab0fa4114760d8bcb1d9021ce34bf88c1be94e3f0ddd8a59077fa596025f97d8f191cc1862293e30aee", @ANYRES16=r5, @ANYRESOCT=r6], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x404042bbe) 0s ago: executing program 3 (id=420): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002740)=@delchain={0x5b0, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4}, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x56c, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x3, 0x2}}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bridge\x00'}, @TCA_U32_ACT={0x53c, 0x7, [@m_mpls={0xb4, 0x1e, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x6005}, @TCA_MPLS_LABEL={0x8, 0x5, 0x38993}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x1ff, 0x0, 0x29c2, 0x7f}, 0x4}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xbc27b}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf80e6}]}, {0x39, 0x6, "612d3699db034f8f08430151bfb3f0819c1d44301a821ce1a7e2fcd26a93322f414a08eb783ba01be15256ed15fc2fa03568c8552b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mirred={0xf8, 0x1e, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7, 0x20000000, 0xffff, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x7, 0x8, 0x8, 0x401}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3a61, 0x5a68ce02, 0x0, 0x2eca, 0x5}, 0x3}}]}, {0x69, 0x6, "71558f82c797ed40aa96cae0561caac80e37421fbe6b5847795e9152419bd6e36082801f37e53ccbea50d8b4e7d6d4cd06cec76ec462499bdf122811144a51b56146738d4d25cbd285f2e729dbbe3c6137f7cd123b784cfddefd732ecc306f6cd0dc9c82ff"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x64, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x35, 0x6, "becc0dfba237e62806d749b491e4df74a2edaae87448c525c394a1cd2b702d5bf5d0417b2f2d65c8e351d44c338dd81ad3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0xfc, 0x15, 0x0, 0x0, {{0x7}, {0xac, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffc01}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x3d, 0x6, {0x6, 'security\x00', 0x63, 0xc, "f74fefd4940193941910a10b7b3c60639c9c5a"}}, @TCA_IPT_TARG={0x2a, 0x6, {0xffff, 'mangle\x00', 0x8, 0x4}}]}, {0x29, 0x6, "7cc4d4d8913023393152cf1483893cb72022204afc5a3c78451fb35e595b70d04ef5495ca4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x44, 0xb, 0x0, 0x0, {{0x7}, {0x4}, {0x19, 0x6, "3b8dd99ff628f0e136ea03ee3bb7e4eb97a588c1fa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x2c, 0x1f, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ctinfo={0x64, 0xf, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x25, 0x6, "871e4a3093c0e8019f3e85d16b62fbd06858927c4759e03eb68fe380f18d158dfe"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_pedit={0xc8, 0x13, 0x0, 0x0, {{0xa}, {0x4}, {0x99, 0x6, "13095aa19e3ff97ff1475cc7f6d44e64023e0f07f5503ec93c537ec467da66e10c0670c5424185a4211b985fbb71c90e943fd5ba6989123f51adc29f4d098a5853a725f727bd15293ea587519524ef80fd8af80f756cfebcef3980870a5ae562474c9ec51aaff99d80483e5889203fa14a5bdb050b4f8c23a709ea648f0083bafcaefd2dfdc6e9fd21bd1230b100d95fdedd566e96"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x90, 0x2, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_ZONE={0x6, 0x4, 0x260d}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0e16c0fbcfd4e59e5f04cfa3cef75f58"}, @TCA_CT_ZONE={0x6, 0x4, 0x40}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x5b0}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.55' (ED25519) to the list of known hosts. syzkaller login: [ 200.015496][ T5761] cgroup: Unknown subsys name 'net' [ 200.170376][ T5761] cgroup: Unknown subsys name 'cpuset' [ 200.192947][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.300956][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.308135][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.460457][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 259.978304][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.998556][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 260.009660][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 260.028473][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 260.040030][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 260.058578][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 260.080082][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 260.088689][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 260.100267][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 260.100965][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 260.108852][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 260.129510][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 260.132326][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 260.148806][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 260.149161][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 260.169641][ T5795] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 260.179633][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 260.188639][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 260.200982][ T5795] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 260.209553][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 260.215977][ T5790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 260.221813][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 260.226527][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 260.240694][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 260.246175][ T5077] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 260.250244][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 260.259033][ T5077] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 260.288529][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 260.314071][ T5780] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 260.345983][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 261.775312][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 261.844905][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 262.054627][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 262.338032][ T5780] Bluetooth: hci2: command tx timeout [ 262.343768][ T5780] Bluetooth: hci3: command tx timeout [ 262.347545][ T5077] Bluetooth: hci0: command tx timeout [ 262.399976][ T5788] Bluetooth: hci1: command tx timeout [ 262.478853][ T5788] Bluetooth: hci4: command tx timeout [ 262.532955][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 263.024054][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.032936][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.041392][ T5784] bridge_slave_0: entered allmulticast mode [ 263.051004][ T5784] bridge_slave_0: entered promiscuous mode [ 263.066751][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 263.093207][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.101989][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.110188][ T5784] bridge_slave_1: entered allmulticast mode [ 263.119595][ T5784] bridge_slave_1: entered promiscuous mode [ 263.365915][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.469600][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.526126][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.535102][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.543163][ T5778] bridge_slave_0: entered allmulticast mode [ 263.552767][ T5778] bridge_slave_0: entered promiscuous mode [ 263.614447][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.622471][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.632792][ T5781] bridge_slave_0: entered allmulticast mode [ 263.642113][ T5781] bridge_slave_0: entered promiscuous mode [ 263.655092][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.663075][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.671165][ T5778] bridge_slave_1: entered allmulticast mode [ 263.680423][ T5778] bridge_slave_1: entered promiscuous mode [ 263.726284][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.734289][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.742274][ T5781] bridge_slave_1: entered allmulticast mode [ 263.751607][ T5781] bridge_slave_1: entered promiscuous mode [ 263.768291][ T5784] team0: Port device team_slave_0 added [ 264.042881][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.064588][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.072623][ T5792] bridge_slave_0: entered allmulticast mode [ 264.082368][ T5792] bridge_slave_0: entered promiscuous mode [ 264.101680][ T5784] team0: Port device team_slave_1 added [ 264.109932][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.121631][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.130874][ T5792] bridge_slave_1: entered allmulticast mode [ 264.140389][ T5792] bridge_slave_1: entered promiscuous mode [ 264.323977][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.344845][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.397732][ T5788] Bluetooth: hci3: command tx timeout [ 264.403435][ T5788] Bluetooth: hci0: command tx timeout [ 264.409636][ T5077] Bluetooth: hci2: command tx timeout [ 264.442314][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.477436][ T5780] Bluetooth: hci1: command tx timeout [ 264.505369][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.517424][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.524596][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.552000][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.563126][ T5780] Bluetooth: hci4: command tx timeout [ 264.577967][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.589719][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.597315][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.623800][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.645166][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.931598][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.939644][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.947527][ T5777] bridge_slave_0: entered allmulticast mode [ 264.956779][ T5777] bridge_slave_0: entered promiscuous mode [ 264.976354][ T5778] team0: Port device team_slave_0 added [ 264.996743][ T5778] team0: Port device team_slave_1 added [ 265.014638][ T5792] team0: Port device team_slave_0 added [ 265.028373][ T5781] team0: Port device team_slave_0 added [ 265.036731][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.045599][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.054145][ T5777] bridge_slave_1: entered allmulticast mode [ 265.063138][ T5777] bridge_slave_1: entered promiscuous mode [ 265.153449][ T5792] team0: Port device team_slave_1 added [ 265.163226][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.171800][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.199385][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.219073][ T5781] team0: Port device team_slave_1 added [ 265.228828][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.236036][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.263994][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.577745][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.584977][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.611386][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.626685][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.634042][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.660508][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.686060][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.714745][ T5784] hsr_slave_0: entered promiscuous mode [ 265.725495][ T5784] hsr_slave_1: entered promiscuous mode [ 265.742262][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.749709][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.776179][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.808196][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.815409][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.841912][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.863484][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.020188][ T5778] hsr_slave_0: entered promiscuous mode [ 266.031315][ T5778] hsr_slave_1: entered promiscuous mode [ 266.041218][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.049463][ T5778] Cannot create hsr debugfs directory [ 266.124154][ T5777] team0: Port device team_slave_0 added [ 266.193917][ T5777] team0: Port device team_slave_1 added [ 266.499408][ T5780] Bluetooth: hci0: command tx timeout [ 266.499507][ T5788] Bluetooth: hci2: command tx timeout [ 266.505072][ T5780] Bluetooth: hci3: command tx timeout [ 266.552296][ T5781] hsr_slave_0: entered promiscuous mode [ 266.557533][ T5780] Bluetooth: hci1: command tx timeout [ 266.565993][ T5781] hsr_slave_1: entered promiscuous mode [ 266.576329][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.584301][ T5781] Cannot create hsr debugfs directory [ 266.606130][ T5792] hsr_slave_0: entered promiscuous mode [ 266.616708][ T5792] hsr_slave_1: entered promiscuous mode [ 266.625708][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.633563][ T5792] Cannot create hsr debugfs directory [ 266.640687][ T5780] Bluetooth: hci4: command tx timeout [ 266.665315][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.672643][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.699319][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.822057][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.830749][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.858402][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.431391][ T5777] hsr_slave_0: entered promiscuous mode [ 267.441740][ T5777] hsr_slave_1: entered promiscuous mode [ 267.451235][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.459344][ T5777] Cannot create hsr debugfs directory [ 267.899932][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 267.993206][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 268.017582][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 268.121483][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 268.408445][ T5778] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 268.469825][ T5778] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 268.556867][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 268.564540][ T5780] Bluetooth: hci3: command tx timeout [ 268.571181][ T5788] Bluetooth: hci2: command tx timeout [ 268.576855][ T5788] Bluetooth: hci0: command tx timeout [ 268.592533][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 268.615315][ T5778] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 268.647899][ T5780] Bluetooth: hci1: command tx timeout [ 268.720072][ T5780] Bluetooth: hci4: command tx timeout [ 268.748904][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 268.771355][ T5778] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 268.794103][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 268.864527][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 268.922168][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 269.010108][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 269.081624][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 269.416771][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 269.465224][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 269.532883][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 269.612225][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 270.047704][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.261583][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.318266][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.366744][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.374659][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.484015][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.491930][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.674718][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.773382][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.831998][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.898361][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.980174][ T3968] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.988094][ T3968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.004796][ T3968] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.012682][ T3968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.141744][ T3968] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.149667][ T3968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.165935][ T3968] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.173858][ T3968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.260615][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.323576][ T5784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 271.442776][ T3968] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.450834][ T3968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.475968][ T3968] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.483717][ T3968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.547655][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.755678][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.986986][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.994846][ T3570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.019415][ T3570] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.027260][ T3570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.773163][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.066766][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.380956][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.400131][ T5784] veth0_vlan: entered promiscuous mode [ 274.435127][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.519614][ T5784] veth1_vlan: entered promiscuous mode [ 274.768014][ T5792] veth0_vlan: entered promiscuous mode [ 274.868856][ T5792] veth1_vlan: entered promiscuous mode [ 274.993736][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.096200][ T5784] veth0_macvtap: entered promiscuous mode [ 275.160326][ T5781] veth0_vlan: entered promiscuous mode [ 275.201205][ T5784] veth1_macvtap: entered promiscuous mode [ 275.259242][ T5781] veth1_vlan: entered promiscuous mode [ 275.379573][ T5792] veth0_macvtap: entered promiscuous mode [ 275.492304][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.524359][ T5792] veth1_macvtap: entered promiscuous mode [ 275.612934][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.725223][ T5777] veth0_vlan: entered promiscuous mode [ 275.746420][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.756029][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.767913][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.777212][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.830230][ T5781] veth0_macvtap: entered promiscuous mode [ 275.860380][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.871318][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.886648][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.945286][ T5781] veth1_macvtap: entered promiscuous mode [ 275.975409][ T5777] veth1_vlan: entered promiscuous mode [ 276.054116][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.065646][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.080927][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.233000][ T5792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.242423][ T5792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.251849][ T5792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.261262][ T5792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.308268][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.321018][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.331364][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.342307][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.357386][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.495890][ T5777] veth0_macvtap: entered promiscuous mode [ 276.571406][ T5777] veth1_macvtap: entered promiscuous mode [ 276.693605][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.704576][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.717389][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.730469][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.745477][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.845142][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.857677][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.868026][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.879013][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.889315][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.900200][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.915258][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.041840][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.052808][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.063151][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.074036][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.084245][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.095184][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.110593][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.154002][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.164310][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.173692][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.183134][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.221805][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.232781][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.242184][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.251560][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.902216][ T5778] veth0_vlan: entered promiscuous mode [ 277.991337][ T5778] veth1_vlan: entered promiscuous mode [ 278.396494][ T5778] veth0_macvtap: entered promiscuous mode [ 278.476709][ T5778] veth1_macvtap: entered promiscuous mode [ 278.723941][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.735801][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.746045][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.756978][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.767191][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.778082][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.788357][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.801666][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.817982][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.115588][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.128200][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.139444][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.150300][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.160542][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.171505][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.181824][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.192704][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.207821][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.352602][ T5778] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.361956][ T5778] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.373088][ T5778] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.382359][ T5778] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.698665][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.706802][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.841835][ T3968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.850117][ T3968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.009871][ T3570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.018435][ T3570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.220539][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.229006][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.311488][ T5784] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 284.564130][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.573720][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.992624][ T3968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.002239][ T3968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.063254][ T5960] loop0: detected capacity change from 0 to 128 [ 285.119072][ T3968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.127393][ T3968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.410106][ T3570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.418473][ T3570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.788995][ T5977] loop3: detected capacity change from 0 to 512 [ 286.802277][ T5977] ======================================================= [ 286.802277][ T5977] WARNING: The mand mount option has been deprecated and [ 286.802277][ T5977] and is ignored by this kernel. Remove the mand [ 286.802277][ T5977] option from the mount to silence this warning. [ 286.802277][ T5977] ======================================================= [ 286.963002][ T3597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.971400][ T3597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.055613][ T5975] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 287.080958][ T5977] EXT4-fs (loop3): too many log groups per flexible block group [ 287.089859][ T5977] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 287.140788][ T5977] EXT4-fs (loop3): mount failed [ 287.165402][ T5061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.174523][ T5061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.330125][ T29] audit: type=1326 audit(1733756546.858:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6716d7fed9 code=0x7ffc0000 [ 287.352803][ T29] audit: type=1326 audit(1733756546.868:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f6716d7fed9 code=0x7ffc0000 [ 287.375441][ T29] audit: type=1326 audit(1733756546.868:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6716d7fed9 code=0x7ffc0000 [ 287.397798][ T29] audit: type=1326 audit(1733756546.868:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6716d7fed9 code=0x7ffc0000 [ 287.423722][ T29] audit: type=1326 audit(1733756546.868:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6716d7fed9 code=0x7ffc0000 [ 287.447988][ T29] audit: type=1326 audit(1733756546.878:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f6716d7fed9 code=0x7ffc0000 [ 287.470664][ T29] audit: type=1326 audit(1733756546.878:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6716d7fed9 code=0x7ffc0000 [ 287.493061][ T29] audit: type=1326 audit(1733756546.888:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6716d7fed9 code=0x7ffc0000 [ 287.911774][ T29] audit: type=1326 audit(1733756547.108:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6716d76ea7 code=0x7ffc0000 [ 287.938190][ T29] audit: type=1326 audit(1733756547.108:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6716d1c0e9 code=0x7ffc0000 [ 288.191062][ T5989] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 288.419713][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 288.428945][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.442520][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.520154][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.528265][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.571236][ T5996] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 289.366865][ T6004] loop3: detected capacity change from 0 to 128 [ 290.748995][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.755971][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 293.652614][ T6042] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 3, id = 0 [ 293.778642][ T6035] loop0: detected capacity change from 0 to 128 [ 293.878350][ T6035] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 294.004609][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'. [ 294.020978][ T6035] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.099293][ T6044] loop4: detected capacity change from 0 to 128 [ 294.129589][ T6035] EXT4-fs (loop0): shut down requested (0) [ 294.600420][ T6054] serio: Serial port ptm0 [ 294.729456][ T6057] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.32'. [ 295.123118][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 295.123205][ T29] audit: type=1326 audit(1733756554.668:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6059 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab3f7fed9 code=0x7ffc0000 [ 295.154126][ T29] audit: type=1326 audit(1733756554.668:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6059 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab3f7fed9 code=0x7ffc0000 [ 295.177366][ T29] audit: type=1326 audit(1733756554.688:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6059 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ab3f7fed9 code=0x7ffc0000 [ 295.200698][ T29] audit: type=1326 audit(1733756554.688:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6059 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab3f7fed9 code=0x7ffc0000 [ 295.228459][ T29] audit: type=1326 audit(1733756554.688:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6059 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab3f7fed9 code=0x7ffc0000 [ 295.253626][ T29] audit: type=1326 audit(1733756554.688:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6059 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ab3f7fed9 code=0x7ffc0000 [ 295.276247][ T29] audit: type=1326 audit(1733756554.708:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6059 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab3f7fed9 code=0x7ffc0000 [ 295.304248][ T29] audit: type=1326 audit(1733756554.708:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6059 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ab3f7fed9 code=0x7ffc0000 [ 295.464578][ T29] audit: type=1326 audit(1733756554.998:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6059 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab3f7fed9 code=0x7ffc0000 [ 295.487762][ T29] audit: type=1326 audit(1733756554.998:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6059 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab3f7fed9 code=0x7ffc0000 [ 296.838428][ T6082] loop3: detected capacity change from 0 to 128 [ 297.339704][ T6088] loop1: detected capacity change from 0 to 1024 [ 297.354003][ T6088] EXT4-fs: Ignoring removed nobh option [ 297.361989][ T6088] EXT4-fs: Ignoring removed orlov option [ 297.498888][ T6088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.698762][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 299.021472][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.140826][ T6128] loop0: detected capacity change from 0 to 128 [ 302.775978][ T6139] loop0: detected capacity change from 0 to 512 [ 303.044544][ T6139] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 303.099445][ T6139] System zones: 0-2, 18-18, 34-34 [ 303.243205][ T6139] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.60: bg 0: block 248: padding at end of block bitmap is not set [ 303.484136][ T6139] __quota_error: 1 callbacks suppressed [ 303.484233][ T6139] Quota error (device loop0): write_blk: dquota write failed [ 303.505933][ T6139] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 303.518457][ T6139] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.60: Failed to acquire dquot type 1 [ 303.637735][ T6139] EXT4-fs (loop0): 1 truncate cleaned up [ 303.645551][ T6139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.661938][ T6139] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.812371][ T6150] netlink: 816 bytes leftover after parsing attributes in process `syz.1.65'. [ 304.681372][ T6139] syz.0.60 (6139) used greatest stack depth: 3024 bytes left [ 304.730993][ T6154] serio: Serial port ptm0 [ 305.095911][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.513842][ T6169] loop2: detected capacity change from 0 to 128 [ 306.658273][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'. [ 306.772493][ T6171] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.781792][ T6171] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.791125][ T6171] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.800675][ T6171] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.810119][ T6171] vxlan0: entered promiscuous mode [ 306.815522][ T6171] vxlan0: entered allmulticast mode [ 308.373363][ T6191] program syz.0.76 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 309.638433][ T6209] netlink: 44 bytes leftover after parsing attributes in process `syz.1.85'. [ 311.004113][ T6226] program syz.3.92 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 311.595284][ T6237] netlink: 44 bytes leftover after parsing attributes in process `syz.3.96'. [ 311.646981][ T6229] program syz.2.91 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.171596][ T6242] netlink: 44 bytes leftover after parsing attributes in process `syz.2.100'. [ 312.785307][ T5950] udevd[5950]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 313.483620][ T6260] netlink: 44 bytes leftover after parsing attributes in process `syz.1.109'. [ 313.657854][ T6264] program syz.0.106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.845645][ T6279] netlink: 44 bytes leftover after parsing attributes in process `syz.3.116'. [ 315.111165][ T6285] netlink: 'syz.4.118': attribute type 21 has an invalid length. [ 315.745325][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 315.987585][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 316.026460][ T25] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 316.036153][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.079132][ T25] usb 3-1: config 0 descriptor?? [ 316.155770][ T6298] netlink: 44 bytes leftover after parsing attributes in process `syz.0.122'. [ 316.327807][ T25] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 316.339083][ T25] asix 3-1:0.0: probe with driver asix failed with error -32 [ 317.304888][ T6308] loop4: detected capacity change from 0 to 128 [ 318.250579][ T6326] vlan2: entered promiscuous mode [ 318.256497][ T6326] dummy0: entered promiscuous mode [ 318.274614][ T6326] dummy0: left promiscuous mode [ 318.402128][ T6332] netlink: 36 bytes leftover after parsing attributes in process `syz.4.135'. [ 319.157903][ T25] usb 3-1: USB disconnect, device number 2 [ 319.924494][ T6349] capability: warning: `syz.3.142' uses deprecated v2 capabilities in a way that may be insecure [ 320.032824][ T6351] program syz.4.143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 320.106142][ T6349] loop3: detected capacity change from 0 to 512 [ 320.644099][ T6353] loop2: detected capacity change from 0 to 128 [ 321.164719][ T6364] loop4: detected capacity change from 0 to 512 [ 321.372547][ T6364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.387496][ T6364] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.579722][ T6366] netlink: 36 bytes leftover after parsing attributes in process `syz.3.149'. [ 321.964757][ T5778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.182541][ T6397] tmpfs: Unknown parameter 'H' [ 323.840283][ T6405] loop4: detected capacity change from 0 to 128 [ 324.216818][ T6411] netlink: 36 bytes leftover after parsing attributes in process `syz.2.165'. [ 325.562603][ T6433] loop1: detected capacity change from 0 to 164 [ 326.046812][ T6433] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 326.598416][ T6442] loop4: detected capacity change from 0 to 128 [ 327.083914][ T6447] netlink: 36 bytes leftover after parsing attributes in process `syz.3.181'. [ 328.975091][ T6480] loop1: detected capacity change from 0 to 128 [ 329.404738][ T6485] netlink: 36 bytes leftover after parsing attributes in process `syz.0.197'. [ 329.481302][ T6488] loop3: detected capacity change from 0 to 512 [ 329.501671][ T6488] EXT4-fs: Mount option(s) incompatible with ext3 [ 330.148319][ T1662] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 330.749921][ T1662] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.762090][ T1662] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 331.001993][ T1662] usb 4-1: New USB device found, idVendor=1949, idProduct=85a5, bcdDevice=a3.3a [ 331.011941][ T1662] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.020761][ T1662] usb 4-1: Product: syz [ 331.025249][ T1662] usb 4-1: Manufacturer: syz [ 331.030449][ T1662] usb 4-1: SerialNumber: syz [ 331.104097][ T1662] usb 4-1: config 0 descriptor?? [ 331.427933][ T29] audit: type=1326 audit(1733756590.968:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067457fed9 code=0x7ffc0000 [ 331.455185][ T29] audit: type=1326 audit(1733756590.968:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067457fed9 code=0x7ffc0000 [ 331.479078][ T29] audit: type=1326 audit(1733756590.978:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f067457fed9 code=0x7ffc0000 [ 331.501898][ T29] audit: type=1326 audit(1733756590.978:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067457fed9 code=0x7ffc0000 [ 331.528403][ T29] audit: type=1326 audit(1733756590.978:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067457fed9 code=0x7ffc0000 [ 331.598664][ T29] audit: type=1326 audit(1733756591.118:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f067457fed9 code=0x7ffc0000 [ 331.621557][ T29] audit: type=1326 audit(1733756591.118:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067457fed9 code=0x7ffc0000 [ 331.644527][ T29] audit: type=1326 audit(1733756591.118:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067457fed9 code=0x7ffc0000 [ 331.671001][ T29] audit: type=1326 audit(1733756591.148:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0674581df7 code=0x7ffc0000 [ 331.699636][ T29] audit: type=1326 audit(1733756591.148:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067457fed9 code=0x7ffc0000 [ 331.970255][ T1662] usb 4-1: USB disconnect, device number 2 [ 333.423699][ T6532] loop3: detected capacity change from 0 to 512 [ 333.573647][ T6536] netlink: 60 bytes leftover after parsing attributes in process `syz.0.219'. [ 333.730937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 333.799593][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 334.339532][ T6547] netlink: 816 bytes leftover after parsing attributes in process `syz.4.222'. [ 334.394718][ T6532] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.215: casefold flag without casefold feature [ 334.430997][ T6532] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.215: couldn't read orphan inode 15 (err -117) [ 334.461563][ T6532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.520885][ T1662] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 334.612394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 334.626054][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 334.797717][ T1662] usb 3-1: Using ep0 maxpacket: 16 [ 334.832477][ T1662] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 334.842382][ T1662] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.851035][ T1662] usb 3-1: Product: syz [ 334.855490][ T1662] usb 3-1: Manufacturer: syz [ 334.860672][ T1662] usb 3-1: SerialNumber: syz [ 334.976919][ T1662] r8152-cfgselector 3-1: Unknown version 0x0000 [ 334.984245][ T1662] r8152-cfgselector 3-1: config 0 descriptor?? [ 335.136541][ T6554] bridge0: port 3(vlan2) entered blocking state [ 335.144249][ T6554] bridge0: port 3(vlan2) entered disabled state [ 335.152220][ T6554] vlan2: entered allmulticast mode [ 335.238656][ T6554] vlan2: left allmulticast mode [ 335.324135][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.508164][ T5839] r8152-cfgselector 3-1: USB disconnect, device number 3 [ 335.869796][ T6558] loop4: detected capacity change from 0 to 2048 [ 335.960412][ T6562] program syz.3.228 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 335.965324][ T6558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.466292][ T6568] netlink: 60 bytes leftover after parsing attributes in process `syz.3.231'. [ 336.686848][ T6572] netlink: 816 bytes leftover after parsing attributes in process `syz.2.234'. [ 337.140393][ T5778] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 337.522231][ T5778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.756987][ T5839] kernel write not supported for file /input/event2 (pid: 5839 comm: kworker/0:4) [ 337.988907][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 337.988996][ T29] audit: type=1326 audit(1733756597.528:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.1.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5f17fed9 code=0x7ffc0000 [ 338.110290][ T29] audit: type=1326 audit(1733756597.598:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.1.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5f17fed9 code=0x7ffc0000 [ 338.134802][ T29] audit: type=1326 audit(1733756597.618:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.1.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1b5f17fed9 code=0x7ffc0000 [ 338.157700][ T29] audit: type=1326 audit(1733756597.618:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.1.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1b5f17ff13 code=0x7ffc0000 [ 338.180478][ T29] audit: type=1326 audit(1733756597.618:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.1.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1b5f17e98f code=0x7ffc0000 [ 338.259483][ T6587] loop1: detected capacity change from 0 to 512 [ 338.288848][ T6587] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 338.308703][ T6587] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 338.343623][ T6595] program syz.3.241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.397314][ T29] audit: type=1326 audit(1733756597.788:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.1.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1b5f17ff67 code=0x7ffc0000 [ 338.425345][ T29] audit: type=1326 audit(1733756597.788:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.1.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1b5f17e840 code=0x7ffc0000 [ 338.450293][ T29] audit: type=1326 audit(1733756597.808:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.1.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1b5f17fadb code=0x7ffc0000 [ 338.473064][ T29] audit: type=1326 audit(1733756597.808:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.1.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1b5f17eb3a code=0x7ffc0000 [ 338.495824][ T29] audit: type=1326 audit(1733756597.818:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.1.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1b5f17eb3a code=0x7ffc0000 [ 338.542366][ T6587] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 338.673025][ T6587] EXT4-fs (loop1): 1 truncate cleaned up [ 338.708414][ T6587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.451647][ T6605] loop3: detected capacity change from 0 to 2048 [ 339.497952][ T5839] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 339.554891][ T6609] netlink: 816 bytes leftover after parsing attributes in process `syz.2.246'. [ 339.567931][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.706492][ T5839] usb 5-1: Using ep0 maxpacket: 16 [ 339.761372][ T6605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.807922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 339.817308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 339.866125][ T5839] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 339.875807][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.884425][ T5839] usb 5-1: Product: syz [ 339.889027][ T5839] usb 5-1: Manufacturer: syz [ 339.893942][ T5839] usb 5-1: SerialNumber: syz [ 339.929970][ T5839] r8152-cfgselector 5-1: Unknown version 0x0000 [ 339.936818][ T5839] r8152-cfgselector 5-1: config 0 descriptor?? [ 340.032535][ T6613] netlink: 60 bytes leftover after parsing attributes in process `syz.1.248'. [ 340.524819][ T5839] r8152-cfgselector 5-1: USB disconnect, device number 2 [ 340.851997][ T5792] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 340.977482][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.085188][ T6640] program syz.4.257 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 342.988079][ T6647] netlink: 788 bytes leftover after parsing attributes in process `syz.4.260'. [ 343.949103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 344.259762][ T5839] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 344.444291][ T5839] usb 4-1: Using ep0 maxpacket: 16 [ 344.527553][ T5839] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 344.537360][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.545770][ T5839] usb 4-1: Product: syz [ 344.555802][ T5839] usb 4-1: Manufacturer: syz [ 344.562643][ T5839] usb 4-1: SerialNumber: syz [ 344.618260][ T6667] program syz.4.270 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.633185][ T5839] r8152-cfgselector 4-1: Unknown version 0x0000 [ 344.640399][ T5839] r8152-cfgselector 4-1: config 0 descriptor?? [ 344.932930][ T6666] loop2: detected capacity change from 0 to 2048 [ 345.085296][ T5839] r8152-cfgselector 4-1: USB disconnect, device number 3 [ 345.213431][ T6666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.043645][ T6684] netlink: 788 bytes leftover after parsing attributes in process `syz.1.275'. [ 346.051879][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.270996][ T6701] program syz.3.282 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 348.146001][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 348.146088][ T29] audit: type=1326 audit(1733756607.688:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6704 comm="syz.4.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab3f7fed9 code=0x7ffc0000 [ 348.226694][ T6707] loop2: detected capacity change from 0 to 512 [ 348.354096][ T29] audit: type=1326 audit(1733756607.798:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6704 comm="syz.4.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f3ab3f7fed9 code=0x7ffc0000 [ 348.377448][ T29] audit: type=1326 audit(1733756607.808:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6704 comm="syz.4.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab3f7fed9 code=0x7ffc0000 [ 348.886964][ T6707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.901007][ T6707] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.989635][ T6709] loop1: detected capacity change from 0 to 164 [ 349.128585][ T6709] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 349.569792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 350.000590][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 350.091955][ T6722] netlink: 788 bytes leftover after parsing attributes in process `syz.0.289'. [ 350.141951][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.195936][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 350.347800][ T25] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 350.357464][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.365803][ T25] usb 4-1: Product: syz [ 350.370514][ T25] usb 4-1: Manufacturer: syz [ 350.375433][ T25] usb 4-1: SerialNumber: syz [ 350.585351][ T25] r8152-cfgselector 4-1: Unknown version 0x0000 [ 350.596740][ T25] r8152-cfgselector 4-1: config 0 descriptor?? [ 350.773527][ T6724] kvm: kvm [6723]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x5ce00000000 [ 350.932311][ T6731] loop4: detected capacity change from 0 to 512 [ 351.198138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 351.247715][ T5839] r8152-cfgselector 4-1: USB disconnect, device number 4 [ 351.301660][ T6731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.702636][ T5778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.380988][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.387842][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 353.611460][ T6751] program syz.4.297 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 353.711700][ T6752] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 354.117804][ T6755] loop3: detected capacity change from 0 to 164 [ 354.369530][ T6755] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 354.667720][ T29] audit: type=1326 audit(1733756614.178:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5f17fed9 code=0x7ffc0000 [ 354.695030][ T29] audit: type=1326 audit(1733756614.178:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b5f17fed9 code=0x7ffc0000 [ 354.719304][ T29] audit: type=1326 audit(1733756614.178:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5f17fed9 code=0x7ffc0000 [ 354.742090][ T29] audit: type=1326 audit(1733756614.188:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b5f17fed9 code=0x7ffc0000 [ 354.770278][ T29] audit: type=1326 audit(1733756614.188:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5f17fed9 code=0x7ffc0000 [ 354.796525][ T29] audit: type=1326 audit(1733756614.188:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b5f17fed9 code=0x7ffc0000 [ 354.820554][ T29] audit: type=1326 audit(1733756614.188:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5f17fed9 code=0x7ffc0000 [ 354.843452][ T29] audit: type=1326 audit(1733756614.198:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f1b5f17fed9 code=0x7ffc0000 [ 354.866476][ T29] audit: type=1326 audit(1733756614.198:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5f17fed9 code=0x7ffc0000 [ 354.889451][ T29] audit: type=1326 audit(1733756614.198:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f1b5f17fed9 code=0x7ffc0000 [ 355.748852][ T6769] usb usb1: usbfs: process 6769 (syz.4.307) did not claim interface 8 before use [ 356.404944][ T6781] program syz.0.312 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 356.914163][ T6790] loop1: detected capacity change from 0 to 512 [ 357.192941][ T6790] EXT4-fs (loop1): too many log groups per flexible block group [ 357.202311][ T6790] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 357.319675][ T6790] EXT4-fs (loop1): mount failed [ 357.626906][ T6803] loop3: detected capacity change from 0 to 4096 [ 357.776692][ T6803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.786683][ T6805] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 357.924679][ T6807] netlink: 'syz.3.320': attribute type 27 has an invalid length. [ 358.644430][ T6815] program syz.0.324 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 358.943522][ T6807] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.953871][ T6807] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.913464][ T6807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.962353][ T6807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.265623][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.333'. [ 360.609508][ T6807] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.619261][ T6807] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.635756][ T6807] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.646655][ T6807] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.984639][ T6844] program syz.2.335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 361.021818][ T6834] ip6gretap0: entered promiscuous mode [ 361.028001][ T6834] vlan2: entered promiscuous mode [ 361.158071][ T6834] ip6gretap0: left promiscuous mode [ 361.566135][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.434286][ T6859] loop3: detected capacity change from 0 to 512 [ 362.641944][ T6859] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 362.695074][ T6859] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 362.715515][ T6859] System zones: 1-12 [ 362.736399][ T6859] EXT4-fs (loop3): orphan cleanup on readonly fs [ 362.786005][ T6859] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.341: bg 0: block 361: padding at end of block bitmap is not set [ 362.836982][ T6859] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 362.856235][ T6859] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.341: attempt to clear invalid blocks 33619980 len 1 [ 362.892529][ T6859] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.341: invalid indirect mapped block 1811939328 (level 0) [ 362.924147][ T6859] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.341: invalid indirect mapped block 2 (level 2) [ 362.955344][ T6859] EXT4-fs (loop3): 1 truncate cleaned up [ 362.963405][ T6859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 363.096111][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 363.096198][ T29] audit: type=1326 audit(1733756622.638:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067457fed9 code=0x7ffc0000 [ 363.172298][ T29] audit: type=1326 audit(1733756622.718:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f067457fed9 code=0x7ffc0000 [ 363.198006][ T29] audit: type=1326 audit(1733756622.718:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067457fed9 code=0x7ffc0000 [ 363.221931][ T29] audit: type=1326 audit(1733756622.718:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067457fed9 code=0x7ffc0000 [ 363.419014][ T6872] program syz.0.346 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 363.464825][ T29] audit: type=1326 audit(1733756622.828:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f067457fed9 code=0x7ffc0000 [ 363.487890][ T29] audit: type=1326 audit(1733756622.828:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067457fed9 code=0x7ffc0000 [ 363.513451][ T29] audit: type=1326 audit(1733756622.828:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067457fed9 code=0x7ffc0000 [ 363.971469][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 364.358380][ T6889] ip6gretap0: entered promiscuous mode [ 364.364315][ T6889] vlan2: entered promiscuous mode [ 364.438856][ T6889] ip6gretap0: left promiscuous mode [ 365.340087][ T6904] loop4: detected capacity change from 0 to 512 [ 365.720644][ T6904] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 365.791033][ T6904] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a040c018, mo2=0002] [ 365.827777][ T6904] System zones: 0-2, 18-18, 34-35 [ 365.891829][ T6904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.905811][ T6904] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.304750][ T6913] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 367.276370][ T5778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.369277][ T6925] program syz.2.363 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 368.340513][ T29] audit: type=1326 audit(1733756627.838:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab3f7fed9 code=0x7ffc0000 [ 368.363399][ T29] audit: type=1326 audit(1733756627.878:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f3ab3f7fed9 code=0x7ffc0000 [ 368.932394][ T6932] ip6gretap0: entered promiscuous mode [ 368.938586][ T6932] vlan2: entered promiscuous mode [ 369.092487][ T6932] ip6gretap0: left promiscuous mode [ 370.174911][ T6947] loop2: detected capacity change from 0 to 128 [ 370.348178][ T6947] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 370.440968][ T6954] loop4: detected capacity change from 0 to 128 [ 370.472696][ T6947] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.538723][ T6957] program syz.3.377 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 370.568897][ T6947] EXT4-fs (loop2): shut down requested (0) [ 372.582604][ T6983] ip6gretap0: entered promiscuous mode [ 372.588791][ T6983] vlan2: entered promiscuous mode [ 372.625146][ T6983] ip6gretap0: left promiscuous mode [ 372.683511][ T6984] netlink: 40 bytes leftover after parsing attributes in process `syz.4.388'. [ 372.779378][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 373.097655][ T29] audit: type=1326 audit(1733756632.608:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab3f7fed9 code=0x7ffc0000 [ 373.104246][ T6990] program syz.3.389 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 373.181695][ T29] audit: type=1326 audit(1733756632.728:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab3f7fed9 code=0x7ffc0000 [ 375.616968][ T7016] loop4: detected capacity change from 0 to 1024 [ 375.665550][ T7016] EXT4-fs: Ignoring removed nobh option [ 375.672491][ T7016] EXT4-fs: Ignoring removed orlov option [ 375.730749][ T7020] ip6gretap0: entered promiscuous mode [ 375.736733][ T7020] vlan2: entered promiscuous mode [ 375.776435][ T7020] ip6gretap0: left promiscuous mode [ 375.842887][ T7016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.896808][ T7024] netlink: 40 bytes leftover after parsing attributes in process `syz.2.403'. [ 375.940022][ T29] audit: type=1800 audit(1733756635.488:222): pid=7016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.400" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 375.978742][ T29] audit: type=1326 audit(1733756635.528:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6716d7fed9 code=0x7ffc0000 [ 376.104607][ T29] audit: type=1326 audit(1733756635.568:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6716d7fed9 code=0x7ffc0000 [ 376.127642][ T29] audit: type=1326 audit(1733756635.578:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6716d7fed9 code=0x7ffc0000 [ 376.150459][ T29] audit: type=1326 audit(1733756635.578:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f6716d7fed9 code=0x7ffc0000 [ 376.173397][ T29] audit: type=1326 audit(1733756635.578:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6716d7fed9 code=0x7ffc0000 [ 376.200625][ T29] audit: type=1326 audit(1733756635.578:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6716d7fed9 code=0x7ffc0000 [ 376.622560][ T5778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.541414][ T7042] loop3: detected capacity change from 0 to 1024 [ 377.577805][ T7042] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 377.617701][ T7042] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 377.632180][ T7042] EXT4-fs (loop3): orphan cleanup on readonly fs [ 377.744338][ T7042] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 377.770269][ T7042] EXT4-fs (loop3): Remounting filesystem read-only [ 377.778319][ T7042] Quota error (device loop3): write_blk: dquota write failed [ 377.786348][ T7042] Quota error (device loop3): write_blk: dquota write failed [ 377.795118][ T7042] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 377.805623][ T7042] EXT4-fs (loop3): 1 orphan inode deleted [ 377.848982][ T7042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 378.530349][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.376966][ T7065] 9pnet_fd: Insufficient options for proto=fd [ 379.703294][ T7062] loop1: detected capacity change from 0 to 512 [ 379.779581][ T7062] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 379.889180][ T7070] netlink: 40 bytes leftover after parsing attributes in process `syz.0.419'. [ 380.075392][ T1841] ===================================================== [ 380.086652][ T1841] BUG: KMSAN: uninit-value in n_tty_lookahead_flow_ctrl+0x2cd/0x300 [ 380.095859][ T1841] n_tty_lookahead_flow_ctrl+0x2cd/0x300 [ 380.101918][ T1841] tty_port_default_lookahead_buf+0x144/0x210 [ 380.108409][ T1841] flush_to_ldisc+0x8ec/0xdb0 [ 380.113374][ T1841] process_scheduled_works+0xae0/0x1c40 [ 380.119514][ T1841] worker_thread+0xea7/0x14f0 [ 380.124480][ T1841] kthread+0x3e2/0x540 [ 380.129196][ T1841] ret_from_fork+0x6d/0x90 [ 380.133876][ T1841] ret_from_fork_asm+0x1a/0x30 [ 380.139966][ T1841] [ 380.142421][ T1841] Uninit was created at: [ 380.148314][ T1841] __kmalloc_noprof+0x923/0x1230 [ 380.153519][ T1841] __tty_buffer_request_room+0x36e/0x6d0 [ 380.160908][ T1841] __tty_insert_flip_string_flags+0x140/0x570 [ 380.168101][ T1841] uart_insert_char+0x39e/0xa10 [ 380.173174][ T1841] serial8250_read_char+0x1a7/0x5d0 [ 380.180513][ T1841] serial8250_handle_irq+0x970/0x1130 [ 380.189412][ T1841] serial8250_default_handle_irq+0x120/0x2b0 [ 380.195682][ T1841] serial8250_interrupt+0xc5/0x360 [ 380.202184][ T1841] __handle_irq_event_percpu+0x118/0xca0 [ 380.208287][ T1841] handle_irq_event+0xef/0x2c0 [ 380.213328][ T1841] handle_edge_irq+0x340/0xfb0 [ 380.218519][ T1841] __common_interrupt+0x97/0x1f0 [ 380.223686][ T1841] common_interrupt+0x92/0xb0 [ 380.228721][ T1841] asm_common_interrupt+0x2b/0x40 [ 380.234000][ T1841] [ 380.236499][ T1841] CPU: 1 UID: 0 PID: 1841 Comm: kworker/u8:6 Not tainted 6.13.0-rc2-syzkaller #0 [ 380.246571][ T1841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 380.257108][ T1841] Workqueue: events_unbound flush_to_ldisc [ 380.263226][ T1841] ===================================================== [ 380.270654][ T1841] Disabling lock debugging due to kernel taint [ 380.277158][ T1841] Kernel panic - not syncing: kmsan.panic set ... [ 380.283776][ T1841] CPU: 1 UID: 0 PID: 1841 Comm: kworker/u8:6 Tainted: G B 6.13.0-rc2-syzkaller #0 [ 380.294646][ T1841] Tainted: [B]=BAD_PAGE [ 380.298954][ T1841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 380.309229][ T1841] Workqueue: events_unbound flush_to_ldisc [ 380.315346][ T1841] Call Trace: [ 380.318792][ T1841] [ 380.321867][ T1841] dump_stack_lvl+0x216/0x2d0 [ 380.326816][ T1841] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 380.332875][ T1841] dump_stack+0x1e/0x24 [ 380.337301][ T1841] panic+0x4e2/0xcf0 [ 380.341544][ T1841] ? kmsan_get_metadata+0x71/0x1c0 [ 380.346898][ T1841] kmsan_report+0x2c7/0x2d0 [ 380.351622][ T1841] ? up_read+0x74/0x1e0 [ 380.356038][ T1841] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 380.362106][ T1841] ? __msan_warning+0x95/0x120 [ 380.367142][ T1841] ? n_tty_lookahead_flow_ctrl+0x2cd/0x300 [ 380.373540][ T1841] ? tty_port_default_lookahead_buf+0x144/0x210 [ 380.380080][ T1841] ? flush_to_ldisc+0x8ec/0xdb0 [ 380.385190][ T1841] ? process_scheduled_works+0xae0/0x1c40 [ 380.391200][ T1841] ? worker_thread+0xea7/0x14f0 [ 380.396340][ T1841] ? kthread+0x3e2/0x540 [ 380.400813][ T1841] ? ret_from_fork+0x6d/0x90 [ 380.405641][ T1841] ? ret_from_fork_asm+0x1a/0x30 [ 380.410893][ T1841] ? kmsan_get_metadata+0x13e/0x1c0 [ 380.416326][ T1841] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 380.422377][ T1841] ? kmsan_get_metadata+0x13e/0x1c0 [ 380.427788][ T1841] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 380.433802][ T1841] ? kmsan_get_metadata+0x13e/0x1c0 [ 380.439191][ T1841] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 380.445209][ T1841] __msan_warning+0x95/0x120 [ 380.450038][ T1841] n_tty_lookahead_flow_ctrl+0x2cd/0x300 [ 380.455913][ T1841] ? __pfx_n_tty_lookahead_flow_ctrl+0x10/0x10 [ 380.462369][ T1841] tty_port_default_lookahead_buf+0x144/0x210 [ 380.468719][ T1841] ? __pfx_tty_port_default_lookahead_buf+0x10/0x10 [ 380.475582][ T1841] flush_to_ldisc+0x8ec/0xdb0 [ 380.480506][ T1841] ? __pfx_tty_port_default_lookahead_buf+0x10/0x10 [ 380.487371][ T1841] ? __pfx_flush_to_ldisc+0x10/0x10 [ 380.492816][ T1841] process_scheduled_works+0xae0/0x1c40 [ 380.498685][ T1841] worker_thread+0xea7/0x14f0 [ 380.503634][ T1841] kthread+0x3e2/0x540 [ 380.507896][ T1841] ? __pfx_worker_thread+0x10/0x10 [ 380.513257][ T1841] ? __pfx_kthread+0x10/0x10 [ 380.518039][ T1841] ret_from_fork+0x6d/0x90 [ 380.522666][ T1841] ? __pfx_kthread+0x10/0x10 [ 380.527457][ T1841] ret_from_fork_asm+0x1a/0x30 [ 380.532484][ T1841] [ 380.535977][ T1841] Kernel Offset: disabled [ 380.540396][ T1841] Rebooting in 86400 seconds..