last executing test programs: 3m18.494870506s ago: executing program 0 (id=75): openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 3m16.50430509s ago: executing program 0 (id=79): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a00)={0x1c, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 3m15.689833472s ago: executing program 0 (id=82): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000800) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtfilter={0x484, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0xb}}]}}, @filter_kind_options=@f_flow={{0x9}, {0x430, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x9}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xffffffff}, @TCA_FLOW_EMATCHES={0x414, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x98, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x48, 0x2, 0x0, 0x0, {{0x7, 0x9, 0x200}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x12, 0x5, "145c8444d46935e3693072807ceb"}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x0, 0x7, 0x9}, {{0x2, 0x1}, {0x1, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x101, 0x2, 0x3}, {0x1, 0xa, 0x1, "60b4926f2ad94e616410"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x4, 0x3, 0x400}, {0x8, 0x8, 0xfffffffd, 0xe}}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xc000, 0x3, 0x9}, {0xfffffffb, 0xfffffff8, 0xffffffff, 0xc0000}}}]}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x8f}, {0x6, 0x3, 0x3, "5d23cb"}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x57, 0x1, 0xc}, {0xc, 0x0, 0x6, 0x2, 0xc, 0x0, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4800}, {{0x2, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0xd4, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x40, 0x2, 0x40}, {0xffff}}}, @TCF_EM_CONTAINER={0x38, 0x3, 0x0, 0x0, {{0x81, 0x0, 0x100}, "703b0f31ff2a6cafa4db6625fefc86f2fb3f18767eebce46b772652b96d3d99fa630e7830f5e7db319dfc9d6"}}, @TCF_EM_IPT={0x2c, 0x3, 0x0, 0x0, {{0x2a66, 0x9, 0x8}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x72}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x40, 0x7, 0x7}, {{0x3, 0x1}, {0x4, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xcc9, 0x7, 0x1}, {{0x2, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3, 0x1, 0x81}, {0x8001, 0x1b, 0x6, 0x7, 0x6, 0x0, 0x2}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x3, 0x3, 0x3}, {0x1, 0x455a, 0xffffffff, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0x134, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x18, 0x1, 0x0, 0x0, {{0x10, 0x0, 0x9}, "d6a7e54ac780db66a159"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x400}, {0x5, 0x70, 0x8, 0x206f}}}, @TCF_EM_IPT={0x80, 0x2, 0x0, 0x0, {{0x6, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_DATA={0x4b, 0x5, "659de6dcda8831fe936b8722ab2d4cca4a3fb313fb4ad54899e1b0326714d6ce83853542fd4a1818018da64925f89da90719562a1e8c9bd577b07b82ae52a71e46cd695ec5ba1b"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x8, 0x2, 0x6}, {0x0, 0x4, 0x0, "74e484e5"}}}, @TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{0x9, 0x4, 0x1000}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7b82, 0x9, 0x1}, {0x9, 0x8, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xd, 0x4, 0x2}, {0xc1e5, 0x1, 0x2}}}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x81}, {0x38, 0x6, 0xdb, 0xdea5}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xfca7, 0x7, 0x533}, {{0x0, 0x1, 0x1, 0x1}, {0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1ff, 0x7, 0x8001}, {{0x3, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x401, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xf}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x401, 0x8, 0xfffd}, {0x1, 0x4, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x3}, {0x3, 0x9, 0x6, 0x5, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0xc4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x44, 0x2, 0x0, 0x0, {{0x9f93}, "9426c9058a6ecc068883da8b9ee826ed10b0e36c47f3b273d06fff696fe2126382a4fd984ef391601764a093311532edab4ed5eafc6698"}}, @TCF_EM_CONTAINER={0x34, 0x1, 0x0, 0x0, {{0xf}, "d07d3c4df19ec28a37b542b0eb9e76d1488601726f03dfea6f44a0ebde665e861899e46f5e2b"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3c9}, {0xffffad69, 0x3, 0x9}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xdb, 0x1, 0x7}, {0x0, 0x101, 0x80, 0x2, 0x0, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x7}, {{0x3, 0x0, 0x1}, {0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}, @TCA_FLOW_XOR={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x484}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3m13.657421821s ago: executing program 0 (id=88): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES32=r1], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) 3m13.207520464s ago: executing program 0 (id=93): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4040840}, 0x20000800) recvmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 3m11.867434467s ago: executing program 0 (id=97): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000011000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001740)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0xff000000, 0x0, 0x4c62d6309aaa1bde, 0xffffff00], 'batadv0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a, 0x0, 0x3, 0x42}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xa, 0x100, 0x2, 0x8, 'pptp\x00', 'syz0\x00', {0xf}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0x0, 0xffffffff, 0xffffff00], [0x0, 0x0, 0xffffff00, 0xffffff00], 'syzkaller0\x00', 'vxcan1\x00', {}, {}, 0x3c}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xc, 0x7, 0xc}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) 2m56.67460308s ago: executing program 32 (id=97): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000011000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001740)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0xff000000, 0x0, 0x4c62d6309aaa1bde, 0xffffff00], 'batadv0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a, 0x0, 0x3, 0x42}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xa, 0x100, 0x2, 0x8, 'pptp\x00', 'syz0\x00', {0xf}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0x0, 0xffffffff, 0xffffff00], [0x0, 0x0, 0xffffff00, 0xffffff00], 'syzkaller0\x00', 'vxcan1\x00', {}, {}, 0x3c}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xc, 0x7, 0xc}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) 1m11.643251836s ago: executing program 6 (id=548): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x5}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882) write$sndseq(r5, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000046000006006600000901907864010100ac1414aa44040f110f00907808b50002"], 0x24) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c40, &(0x7f0000000000), 0xfe, 0x27a, &(0x7f0000000980)="$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") r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) 1m10.527669103s ago: executing program 6 (id=552): semtimedop(0x0, &(0x7f0000000300)=[{0x3, 0xfff7, 0x1000}], 0x1f4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x840a2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fffdffff00000000000000008500000041"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) utime(&(0x7f0000000000)='.\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) gettid() ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0x8}, {0x0, 0xc}, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40d5}, 0x0) 1m9.728836428s ago: executing program 6 (id=558): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='kfree\x00', r0, 0x0, 0x80}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000280)=0x180000, 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) r6 = syz_io_uring_setup(0x205a, &(0x7f0000000200)={0x0, 0x9bee, 0x30, 0x3, 0x330, 0x0, r5}, &(0x7f0000000340), &(0x7f0000000480)) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) io_cancel(0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5c, r6, 0x0, 0x0, 0x6, 0x0, 0x2, r5}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x4004890) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="800000", 0x3, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @broadcast}, 0x14) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) socket(0x8, 0x800, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x38, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x8e, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 1m9.240961602s ago: executing program 6 (id=559): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$kcm(0x2, 0x3, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x4, 0x8, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000006c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000440)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x9, 0x2, 0x0, @broadcast, @multicast1}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x98, 0x0, {0x5, 0x4, 0x2, 0x2a, 0x1, 0x68, 0xa, 0x64, 0x1, 0x3, @multicast1, @rand_addr=0x64010100}}}}}}, 0x0) 1m8.851704592s ago: executing program 6 (id=561): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x4, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 1m6.671933416s ago: executing program 6 (id=567): r0 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}], 0x2}}], 0x3, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4, 0x0, 0xf8}, 0x18) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = dup3(r2, r1, 0x0) recvmmsg(r5, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) 51.339217134s ago: executing program 33 (id=567): r0 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}], 0x2}}], 0x3, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4, 0x0, 0xf8}, 0x18) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = dup3(r2, r1, 0x0) recvmmsg(r5, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) 49.151400343s ago: executing program 4 (id=647): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r1 = msgget$private(0x0, 0x40) msgsnd(r1, &(0x7f0000000380)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r1, 0x0) 48.909082371s ago: executing program 4 (id=649): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f00000000c0)={0xffffffd1, 0xfffffff8, 0x2, 0x831c, 0x1, "030000000000000000049dd0ffd76d7fcb0b0e", 0x6, 0x5}) syz_emit_ethernet(0x5e, &(0x7f0000000c00)=ANY=[], 0x0) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000001200)='./file0\x00', 0x2a00410, &(0x7f0000000680)=ANY=[], 0x2a, 0x11aa, &(0x7f0000001280)="$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") sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x4000040) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40010500}, 0xc, &(0x7f0000000740)={&(0x7f00000035c0)=ANY=[], 0x1154}, 0x1, 0x0, 0x0, 0x8041}, 0x24040000) open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) mount(&(0x7f0000005440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000500)='./bus\x00', 0x0, 0xb81800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000440)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2804c044}, 0x8040081) shutdown(r2, 0x1) write(r0, &(0x7f0000000280)="64acba5130eddbbdbf23d9ebcb3c37b355e33924a18e7f21752531ef1c5f128defdcb64ace5662d1e17889fa3f4de6c5358d9b7d9c0279ef6d23309d5bd01a4b0d0dda0a883fe88293def8f1850000826109e7a5bf17abc21fcf48e96ae303cd25903fbee2", 0x65) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f00000001c0)) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000f00)='.\x00', 0x80000, &(0x7f00000008c0)=ANY=[], 0x9, 0x0, &(0x7f0000000000)) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfea7) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 47.005788861s ago: executing program 4 (id=653): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x4) sendmsg$rds(r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3, 0x3, 0x0, 0x0, 0x8001}}) 45.34170055s ago: executing program 4 (id=656): r0 = socket$igmp(0x2, 0x3, 0x2) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800002254d1327b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000005a83d97f9e20e6443552bdbadbff0fefecbf47e7af7e6084846784ee05a0282d76abca2ad402dd1332c4f76d81664645b7a31527c139"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000140), 0x4) 44.891306027s ago: executing program 4 (id=659): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000600)='kmem_cache_free\x00', r2}, 0x18) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 44.487949306s ago: executing program 4 (id=661): bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB="fdffffff03"], 0x50) 28.662530844s ago: executing program 34 (id=661): bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB="fdffffff03"], 0x50) 5.936017373s ago: executing program 5 (id=782): syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a00)=@deltaction={0x188, 0x31, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x44, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7aa4}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000000}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x42e}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4d}}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x24040040}, 0x20048054) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) 5.272296892s ago: executing program 3 (id=787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, 0x0, 0x10) 5.057537422s ago: executing program 3 (id=789): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000800) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x847b9, 0x0, 0xe, 0x0, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtfilter={0x484, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0xb}}]}}, @filter_kind_options=@f_flow={{0x9}, {0x430, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x9}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xffffffff}, @TCA_FLOW_EMATCHES={0x414, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x98, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x48, 0x2, 0x0, 0x0, {{0x7, 0x9, 0x200}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x12, 0x5, "145c8444d46935e3693072807ceb"}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x0, 0x7, 0x9}, {{0x2, 0x1}, {0x1, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x101, 0x2, 0x3}, {0x1, 0xa, 0x1, "60b4926f2ad94e616410"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x4, 0x3, 0x400}, {0x8, 0x8, 0xfffffffd, 0xe}}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xc000, 0x3, 0x9}, {0xfffffffb, 0xfffffff8, 0xffffffff, 0xc0000}}}]}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x8f}, {0x6, 0x3, 0x3, "5d23cb"}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x57, 0x1, 0xc}, {0xc, 0x0, 0x6, 0x2, 0xc, 0x0, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4800}, {{0x2, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0xd4, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x40, 0x2, 0x40}, {0xffff}}}, @TCF_EM_CONTAINER={0x38, 0x3, 0x0, 0x0, {{0x81, 0x0, 0x100}, "703b0f31ff2a6cafa4db6625fefc86f2fb3f18767eebce46b772652b96d3d99fa630e7830f5e7db319dfc9d6"}}, @TCF_EM_IPT={0x2c, 0x3, 0x0, 0x0, {{0x2a66, 0x9, 0x8}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x72}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x40, 0x7, 0x7}, {{0x3, 0x1}, {0x4, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xcc9, 0x7, 0x1}, {{0x2, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3, 0x1, 0x81}, {0x8001, 0x1b, 0x6, 0x7, 0x6, 0x0, 0x2}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x3, 0x3, 0x3}, {0x1, 0x455a, 0xffffffff, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0x134, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x18, 0x1, 0x0, 0x0, {{0x10, 0x0, 0x9}, "d6a7e54ac780db66a159"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x400}, {0x5, 0x70, 0x8, 0x206f}}}, @TCF_EM_IPT={0x80, 0x2, 0x0, 0x0, {{0x6, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_DATA={0x4b, 0x5, "659de6dcda8831fe936b8722ab2d4cca4a3fb313fb4ad54899e1b0326714d6ce83853542fd4a1818018da64925f89da90719562a1e8c9bd577b07b82ae52a71e46cd695ec5ba1b"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x8, 0x2, 0x6}, {0x0, 0x4, 0x0, "74e484e5"}}}, @TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{0x9, 0x4, 0x1000}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7b82, 0x9, 0x1}, {0x9, 0x8, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xd, 0x4, 0x2}, {0xc1e5, 0x1, 0x2}}}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x81}, {0x38, 0x6, 0xdb, 0xdea5}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xfca7, 0x7, 0x533}, {{0x0, 0x1, 0x1, 0x1}, {0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1ff, 0x7, 0x8001}, {{0x3, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x401, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xf}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x401, 0x8, 0xfffd}, {0x1, 0x4, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x3}, {0x3, 0x9, 0x6, 0x5, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0xc4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x44, 0x2, 0x0, 0x0, {{0x9f93}, "9426c9058a6ecc068883da8b9ee826ed10b0e36c47f3b273d06fff696fe2126382a4fd984ef391601764a093311532edab4ed5eafc6698"}}, @TCF_EM_CONTAINER={0x34, 0x1, 0x0, 0x0, {{0xf}, "d07d3c4df19ec28a37b542b0eb9e76d1488601726f03dfea6f44a0ebde665e861899e46f5e2b"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3c9}, {0xffffad69, 0x3, 0x9}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xdb, 0x1, 0x7}, {0x0, 0x101, 0x80, 0x2, 0x0, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x7}, {{0x3, 0x0, 0x1}, {0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}, @TCA_FLOW_XOR={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x484}, 0x1, 0x0, 0x0, 0x10}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r13, 0x1, &(0x7f0000000440)=[&(0x7f0000000d80)={0xf, 0x400000000000, 0x0, 0x1, 0x1, r2, 0x0, 0x0, 0x0, 0x0, 0x0, r2}]) 4.710150851s ago: executing program 5 (id=791): prctl$PR_SET_NAME(0xf, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0x3}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x290) 4.577610084s ago: executing program 2 (id=792): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x101}, 0x18) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 4.383873425s ago: executing program 5 (id=794): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) setns(r3, 0x24020000) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x20000009}, 0xc880) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}}, 0x24}}, 0x4000810) 4.077545246s ago: executing program 1 (id=795): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) kexec_load(0x0, 0x0, &(0x7f0000000140), 0x0) 3.496124293s ago: executing program 2 (id=796): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtfilter={0x484, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0xb}}]}}, @filter_kind_options=@f_flow={{0x9}, {0x430, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x9}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xffffffff}, @TCA_FLOW_EMATCHES={0x414, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x98, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x48, 0x2, 0x0, 0x0, {{0x7, 0x9, 0x200}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x12, 0x5, "145c8444d46935e3693072807ceb"}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x0, 0x7, 0x9}, {{0x2, 0x1}, {0x1, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x101, 0x2, 0x3}, {0x1, 0xa, 0x1, "60b4926f2ad94e616410"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x4, 0x3, 0x400}, {0x8, 0x8, 0xfffffffd, 0xe}}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xc000, 0x3, 0x9}, {0xfffffffb, 0xfffffff8, 0xffffffff, 0xc0000}}}]}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x8f}, {0x6, 0x3, 0x3, "5d23cb"}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x57, 0x1, 0xc}, {0xc, 0x0, 0x6, 0x2, 0xc, 0x0, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4800}, {{0x2, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0xd4, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x40, 0x2, 0x40}, {0xffff}}}, @TCF_EM_CONTAINER={0x38, 0x3, 0x0, 0x0, {{0x81, 0x0, 0x100}, "703b0f31ff2a6cafa4db6625fefc86f2fb3f18767eebce46b772652b96d3d99fa630e7830f5e7db319dfc9d6"}}, @TCF_EM_IPT={0x2c, 0x3, 0x0, 0x0, {{0x2a66, 0x9, 0x8}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x72}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x40, 0x7, 0x7}, {{0x3, 0x1}, {0x4, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xcc9, 0x7, 0x1}, {{0x2, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3, 0x1, 0x81}, {0x8001, 0x1b, 0x6, 0x7, 0x6, 0x0, 0x2}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x3, 0x3, 0x3}, {0x1, 0x455a, 0xffffffff, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0x134, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x18, 0x1, 0x0, 0x0, {{0x10, 0x0, 0x9}, "d6a7e54ac780db66a159"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x400}, {0x5, 0x70, 0x8, 0x206f}}}, @TCF_EM_IPT={0x80, 0x2, 0x0, 0x0, {{0x6, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_DATA={0x4b, 0x5, "659de6dcda8831fe936b8722ab2d4cca4a3fb313fb4ad54899e1b0326714d6ce83853542fd4a1818018da64925f89da90719562a1e8c9bd577b07b82ae52a71e46cd695ec5ba1b"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x8, 0x2, 0x6}, {0x0, 0x4, 0x0, "74e484e5"}}}, @TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{0x9, 0x4, 0x1000}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7b82, 0x9, 0x1}, {0x9, 0x8, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xd, 0x4, 0x2}, {0xc1e5, 0x1, 0x2}}}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x81}, {0x38, 0x6, 0xdb, 0xdea5}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xfca7, 0x7, 0x533}, {{0x0, 0x1, 0x1, 0x1}, {0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1ff, 0x7, 0x8001}, {{0x3, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x401, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xf}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x401, 0x8, 0xfffd}, {0x1, 0x4, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x3}, {0x3, 0x9, 0x6, 0x5, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0xc4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x44, 0x2, 0x0, 0x0, {{0x9f93}, "9426c9058a6ecc068883da8b9ee826ed10b0e36c47f3b273d06fff696fe2126382a4fd984ef391601764a093311532edab4ed5eafc6698"}}, @TCF_EM_CONTAINER={0x34, 0x1, 0x0, 0x0, {{0xf}, "d07d3c4df19ec28a37b542b0eb9e76d1488601726f03dfea6f44a0ebde665e861899e46f5e2b"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3c9}, {0xffffad69, 0x3, 0x9}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xdb, 0x1, 0x7}, {0x0, 0x101, 0x80, 0x2, 0x0, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x7}, {{0x3, 0x0, 0x1}, {0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}, @TCA_FLOW_XOR={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x484}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.26890814s ago: executing program 1 (id=797): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a000000"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0) 2.986432973s ago: executing program 5 (id=798): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 2.701978262s ago: executing program 1 (id=799): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, 0x0, 0x10) 2.517373326s ago: executing program 3 (id=800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3, 0x3, 0x0, 0x0, 0x8001}}) 1.661349552s ago: executing program 5 (id=801): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x292fc31cd797d516, &(0x7f0000000040)={@private0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000200), 0x6, 0x515, &(0x7f0000000c00)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000100000000000000200009500000000000000f62967bbdde769442d01f48c60f73f8ada3bc7e9181bc7661901bcccce358004ab053156c45d992b5a7642a6fa99d7dff38ff6ad71ccb8b9d3c27f091177af80ecd097a5f4eec11bc049ffad0d9f362b85b3168f1818abbf8adbf9c4e544b68c1f867696af9e18884d75262c43f910527d48634a0c856f48edab21ed4e94ff09f056c2e039f5ccfa20d83936d2cdc4787852300620f75212bdc6a3821f4fd533e21812e6c5a6ba77b8f3fa9b9177e15a515073a2c5c15c124c04aa95af95e5c50c12931709ae182a9336f7c9bac8ab6507a4639dca3efbdaf6b5b1bb30ba1f"], &(0x7f0000000100)='GPL\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r1}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000010000000008000"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x10) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x40}}, 0x4, 0x5, 0x6, 0x5, 0x87, 0x20, 0xea}, &(0x7f00000005c0)=0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000640)={r3, 0x1c, &(0x7f0000000600)=[@in6={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}]}, &(0x7f0000000680)=0x10) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f00000004c0)={0x6f3, 0x18, '\x00', 0x1, &(0x7f0000000480)=[0x0, 0x0, 0x0]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000080009566d6f44d2ae1086ac7"], 0x0, 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) 1.574295581s ago: executing program 2 (id=802): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0, 0x0, 0x8}, 0x18) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0x70bd25, 0xfffffffe}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x40040d0) 1.535355407s ago: executing program 3 (id=803): io_uring_setup(0x1684, &(0x7f0000000080)={0x0, 0xce3d, 0x400, 0x1, 0x2}) syz_emit_ethernet(0x76, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbb"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x1b0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r4, 0x0, 0x8, 0xfffffffffffffffd) r5 = getpgid(0xffffffffffffffff) wait4(r5, &(0x7f0000000880), 0x20000000, &(0x7f00000008c0)) 1.522614073s ago: executing program 1 (id=804): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 1.112072907s ago: executing program 7 (id=637): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$kcm(0x2, 0x3, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x4, 0x8, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000006c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000440)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x9, 0x2, 0x0, @broadcast, @multicast1}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x98, 0x0, {0x5, 0x4, 0x2, 0x2a, 0x1, 0x68, 0xa, 0x64, 0x1, 0x3, @multicast1, @rand_addr=0x64010100}}}}}}, 0x0) 941.699347ms ago: executing program 2 (id=805): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000000c0)='suspend_resume\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, 0x0, 0x6048004) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000130001000000", @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x20000000000000b9, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r5}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 933.878189ms ago: executing program 3 (id=806): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000780)='netlink_extack\x00', r0, 0x0, 0xb0}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 896.382366ms ago: executing program 1 (id=807): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) kexec_load(0x0, 0x0, &(0x7f0000000140), 0x0) 762.614087ms ago: executing program 5 (id=808): r0 = socket(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x4}, 0x18) sendto$inet6(r0, &(0x7f0000000140)="7800000018002507b9409b14ff0b01000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x8050, 0x0, 0x0) 643.379632ms ago: executing program 7 (id=809): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a000000"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0) 489.491836ms ago: executing program 1 (id=810): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00'], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f004a5d30c6e7c2365d75b215ad28d201acaadee3b53b7b9a8888b6401306e42a9ae65ab6493c35ca2df15bf7b6c8c44463108207812a5b3f64342b8e1a87772b31ece45c8d8633af9ace2408c91cb003747fb64577b309c80c37a20424523b9020806d5865046ba01e6058fba159dc8a9610c2f013742284cae8b086169cacb4c8c99e8d29"], 0x0, 0x34}, 0x20) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) utimensat(r3, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) close(0xffffffffffffffff) r7 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) socket$inet_udplite(0x2, 0x2, 0x88) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x8a883, 0x2) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000080)={r8, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r8) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r12, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x40000001, 0x4, 0x0, 0x2, "0062ba7d8207000000ecf5000000f7ffffff00"}) 410.758021ms ago: executing program 2 (id=811): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x5) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e008000000008", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 293.888897ms ago: executing program 3 (id=812): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtfilter={0x484, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0xb}}]}}, @filter_kind_options=@f_flow={{0x9}, {0x430, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x9}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xffffffff}, @TCA_FLOW_EMATCHES={0x414, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x98, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x48, 0x2, 0x0, 0x0, {{0x7, 0x9, 0x200}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x12, 0x5, "145c8444d46935e3693072807ceb"}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x0, 0x7, 0x9}, {{0x2, 0x1}, {0x1, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x101, 0x2, 0x3}, {0x1, 0xa, 0x1, "60b4926f2ad94e616410"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x4, 0x3, 0x400}, {0x8, 0x8, 0xfffffffd, 0xe}}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xc000, 0x3, 0x9}, {0xfffffffb, 0xfffffff8, 0xffffffff, 0xc0000}}}]}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x8f}, {0x6, 0x3, 0x3, "5d23cb"}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x57, 0x1, 0xc}, {0xc, 0x0, 0x6, 0x2, 0xc, 0x0, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4800}, {{0x2, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0xd4, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x40, 0x2, 0x40}, {0xffff}}}, @TCF_EM_CONTAINER={0x38, 0x3, 0x0, 0x0, {{0x81, 0x0, 0x100}, "703b0f31ff2a6cafa4db6625fefc86f2fb3f18767eebce46b772652b96d3d99fa630e7830f5e7db319dfc9d6"}}, @TCF_EM_IPT={0x2c, 0x3, 0x0, 0x0, {{0x2a66, 0x9, 0x8}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x72}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x40, 0x7, 0x7}, {{0x3, 0x1}, {0x4, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xcc9, 0x7, 0x1}, {{0x2, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3, 0x1, 0x81}, {0x8001, 0x1b, 0x6, 0x7, 0x6, 0x0, 0x2}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x3, 0x3, 0x3}, {0x1, 0x455a, 0xffffffff, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0x134, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x18, 0x1, 0x0, 0x0, {{0x10, 0x0, 0x9}, "d6a7e54ac780db66a159"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x400}, {0x5, 0x70, 0x8, 0x206f}}}, @TCF_EM_IPT={0x80, 0x2, 0x0, 0x0, {{0x6, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_DATA={0x4b, 0x5, "659de6dcda8831fe936b8722ab2d4cca4a3fb313fb4ad54899e1b0326714d6ce83853542fd4a1818018da64925f89da90719562a1e8c9bd577b07b82ae52a71e46cd695ec5ba1b"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x8, 0x2, 0x6}, {0x0, 0x4, 0x0, "74e484e5"}}}, @TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{0x9, 0x4, 0x1000}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7b82, 0x9, 0x1}, {0x9, 0x8, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xd, 0x4, 0x2}, {0xc1e5, 0x1, 0x2}}}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x81}, {0x38, 0x6, 0xdb, 0xdea5}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xfca7, 0x7, 0x533}, {{0x0, 0x1, 0x1, 0x1}, {0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1ff, 0x7, 0x8001}, {{0x3, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x401, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xf}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x401, 0x8, 0xfffd}, {0x1, 0x4, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x3}, {0x3, 0x9, 0x6, 0x5, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0xc4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x44, 0x2, 0x0, 0x0, {{0x9f93}, "9426c9058a6ecc068883da8b9ee826ed10b0e36c47f3b273d06fff696fe2126382a4fd984ef391601764a093311532edab4ed5eafc6698"}}, @TCF_EM_CONTAINER={0x34, 0x1, 0x0, 0x0, {{0xf}, "d07d3c4df19ec28a37b542b0eb9e76d1488601726f03dfea6f44a0ebde665e861899e46f5e2b"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3c9}, {0xffffad69, 0x3, 0x9}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xdb, 0x1, 0x7}, {0x0, 0x101, 0x80, 0x2, 0x0, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x7}, {{0x3, 0x0, 0x1}, {0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}, @TCA_FLOW_XOR={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x484}, 0x1, 0x0, 0x0, 0x10}, 0x0) 239.629783ms ago: executing program 7 (id=813): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='kfree\x00', r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r2, 0x0, 0x6}, 0x18) nanosleep(0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3c010000100013070000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa00000000000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d533000000fe80000000000000000000000000001a07000000000000000900000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000ffffffff0200000060000000000000004c001400636d61632861657329"], 0x13c}}, 0x0) listen(r0, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) accept(r0, 0x0, 0x0) 0s ago: executing program 2 (id=814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, 0x0, 0x10) kernel console output (not intermixed with test programs): [ T3010] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.240755][ T3010] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.254306][ T5838] Bluetooth: hci1: command tx timeout [ 114.254409][ T5840] Bluetooth: hci0: command tx timeout [ 114.262061][ T5834] veth0_macvtap: entered promiscuous mode [ 114.265180][ T5846] Bluetooth: hci2: command tx timeout [ 114.276391][ T5833] Bluetooth: hci3: command tx timeout [ 114.284125][ T5843] Bluetooth: hci4: command tx timeout [ 114.292655][ T5965] Zero length message leads to an empty skb [ 114.309235][ T3010] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.327020][ T3010] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.335883][ T5843] Bluetooth: hci5: command tx timeout [ 114.349039][ T5835] veth1_vlan: entered promiscuous mode [ 114.370369][ T5834] veth1_macvtap: entered promiscuous mode [ 114.446546][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.456207][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.472174][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.512812][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.572921][ T4034] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.596302][ T4034] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.631161][ T4034] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.656870][ T4034] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.687856][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.801289][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.897639][ T5842] veth0_vlan: entered promiscuous mode [ 115.007536][ T5835] veth0_macvtap: entered promiscuous mode [ 115.037139][ T4034] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.062815][ T4034] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.091676][ T4034] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.104852][ T4034] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.165411][ T5835] veth1_macvtap: entered promiscuous mode [ 115.384902][ T5983] random: crng reseeded on system resumption [ 115.882998][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 115.944632][ T5842] veth1_vlan: entered promiscuous mode [ 115.969023][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.989677][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.997973][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.150354][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.205454][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.240617][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.250134][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.276240][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.584148][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.601648][ T286] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.620300][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.628661][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.346620][ T5994] xt_CT: No such helper "snmp_trap" [ 117.455826][ T5998] process 'syz.2.15' launched '/dev/fd/4' with NULL argv: empty string added [ 117.511067][ T5842] veth0_macvtap: entered promiscuous mode [ 117.538180][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.575821][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.699618][ T5842] veth1_macvtap: entered promiscuous mode [ 117.745681][ T6002] syz.3.17 uses obsolete (PF_INET,SOCK_PACKET) [ 117.928516][ T4034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.968788][ T4034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.037265][ T6004] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 118.137043][ T3441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.142875][ T6006] loop1: detected capacity change from 0 to 512 [ 118.153404][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.164544][ T3441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.204912][ T6006] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.229096][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.236718][ T6006] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 118.237074][ T6006] EXT4-fs (loop1): orphan cleanup on readonly fs [ 118.331498][ T6006] EXT4-fs error (device loop1): mb_free_blocks:2034: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 118.360310][ T6006] EXT4-fs (loop1): Remounting filesystem read-only [ 118.377829][ T6006] EXT4-fs (loop1): 1 truncate cleaned up [ 118.391137][ T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.404312][ T286] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 118.438755][ T60] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.458280][ T286] EXT4-fs (loop1): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 118.469446][ T286] Quota error (device loop1): write_blk: dquota write failed [ 118.479652][ T286] Quota error (device loop1): remove_free_dqentry: Can't write block (8) with free entries [ 118.483778][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.634543][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.654259][ T286] EXT4-fs (loop1): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 118.675061][ T286] Quota error (device loop1): write_blk: dquota write failed [ 118.704433][ T286] Quota error (device loop1): free_dqentry: Can't move quota data block (8) to free list [ 118.727502][ T286] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 118.772057][ T286] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 118.781179][ T286] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 118.815029][ T286] Quota error (device loop1): remove_tree: Cycle in quota tree detected: block 3 index 0 [ 118.837913][ T6009] tipc: Started in network mode [ 118.850173][ T6009] tipc: Node identity 4, cluster identity 4711 [ 118.850196][ T6009] tipc: Node number set to 4 [ 118.858389][ T6006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.940215][ T6016] loop3: detected capacity change from 0 to 512 [ 118.960057][ T6016] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 118.960079][ T6016] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 119.122150][ T6016] EXT4-fs (loop3): 1 truncate cleaned up [ 119.125864][ T6016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.171379][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.171421][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.291369][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.400950][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.400983][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.542214][ T31] audit: type=1326 audit(1766815582.931:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.2.18" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa2c58f749 code=0x0 [ 119.833685][ T6026] loop2: detected capacity change from 0 to 736 [ 119.951828][ T6030] netlink: 68 bytes leftover after parsing attributes in process `syz.4.23'. [ 120.123781][ T6030] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.345687][ T6030] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.544875][ T6030] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.556479][ T6037] xt_CT: No such helper "snmp_trap" [ 120.563000][ T31] audit: type=1326 audit(1766815583.961:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6041 comm="syz.1.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4fd8f749 code=0x7ffc0000 [ 120.697796][ T6030] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.115611][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.191228][ T6010] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.256193][ T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.330719][ T4034] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.816446][ T6055] loop5: detected capacity change from 0 to 128 [ 121.832104][ T6055] ======================================================= [ 121.832104][ T6055] WARNING: The mand mount option has been deprecated and [ 121.832104][ T6055] and is ignored by this kernel. Remove the mand [ 121.832104][ T6055] option from the mount to silence this warning. [ 121.832104][ T6055] ======================================================= [ 122.050021][ T6055] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.064980][ T6055] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 122.136984][ T6055] netlink: 14 bytes leftover after parsing attributes in process `syz.5.29'. [ 122.549037][ T5842] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.807754][ T6064] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 122.814503][ T6064] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 122.912228][ T6064] vhci_hcd vhci_hcd.0: Device attached [ 122.993628][ T6066] loop1: detected capacity change from 0 to 1024 [ 123.059071][ T6066] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 123.092285][ T6066] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 123.112135][ T5957] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 123.174708][ T6066] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 123.202646][ T5957] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 123.214152][ T6066] EXT4-fs (loop1): orphan cleanup on readonly fs [ 123.217492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 123.242680][ T6066] EXT4-fs error (device loop1): ext4_free_blocks:6727: comm syz.1.32: Freeing blocks not in datazone - block = 0, count = 4096 [ 123.314907][ T6066] EXT4-fs (loop1): Remounting filesystem read-only [ 123.352309][ T6066] EXT4-fs (loop1): 1 orphan inode deleted [ 123.390952][ T6066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 123.501650][ T6067] vhci_hcd: connection reset by peer [ 123.517647][ T6080] loop0: detected capacity change from 0 to 512 [ 123.527641][ T3763] vhci_hcd vhci_hcd.1: stop threads [ 123.541909][ T3763] vhci_hcd vhci_hcd.1: release socket [ 123.572363][ T3763] vhci_hcd vhci_hcd.1: disconnect device [ 123.694434][ T6080] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 123.801446][ T6080] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #17: comm syz.0.36: inode has both inline data and extents flags [ 123.825080][ T6080] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.36: couldn't read orphan inode 17 (err -117) [ 123.942844][ T6080] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.991504][ T6080] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm syz.0.36: bg 0: block 65: padding at end of block bitmap is not set [ 124.068714][ T6080] __quota_error: 233 callbacks suppressed [ 124.068738][ T6080] Quota error (device loop0): write_blk: dquota write failed [ 124.092652][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 124.123292][ T6080] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 124.152174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.182669][ T6080] EXT4-fs error (device loop0): ext4_acquire_dquot:6984: comm syz.0.36: Failed to acquire dquot type 0 [ 124.248202][ T6086] Quota error (device loop0): do_check_range: Getting block 144 out of range 0-5 [ 124.283374][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.436660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.692890][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.812329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 124.829523][ T6095] netlink: 36 bytes leftover after parsing attributes in process `syz.5.40'. [ 124.843934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 125.205466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 125.255220][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 125.322173][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 125.331878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 125.886579][ T6096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.681626][ T6116] loop4: detected capacity change from 0 to 128 [ 127.536835][ T6116] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.549355][ T6116] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 127.586844][ T6114] netlink: 14 bytes leftover after parsing attributes in process `syz.4.45'. [ 127.859515][ T5835] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.331847][ T5957] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 128.911221][ T6133] xt_CT: No such helper "snmp_trap" [ 128.975134][ T6138] loop2: detected capacity change from 0 to 512 [ 129.014877][ T6138] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 129.174377][ T6138] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #17: comm syz.2.53: inode has both inline data and extents flags [ 129.233221][ T6138] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.53: couldn't read orphan inode 17 (err -117) [ 129.339265][ T6138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.417188][ T6138] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.53: bg 0: block 65: padding at end of block bitmap is not set [ 129.478124][ T6138] Quota error (device loop2): write_blk: dquota write failed [ 129.527264][ T6138] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 129.538594][ T6146] Quota error (device loop2): do_check_range: Getting block 144 out of range 0-5 [ 129.821738][ T6138] EXT4-fs error (device loop2): ext4_acquire_dquot:6984: comm syz.2.53: Failed to acquire dquot type 0 [ 130.087294][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.118513][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.534984][ T6160] netlink: 36 bytes leftover after parsing attributes in process `syz.2.57'. [ 131.262673][ T6167] loop1: detected capacity change from 0 to 128 [ 131.455001][ T6167] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.472631][ T6167] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 131.532719][ T6167] netlink: 14 bytes leftover after parsing attributes in process `syz.1.60'. [ 132.180068][ T5834] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.504081][ T6180] syzkaller0: entered promiscuous mode [ 132.511612][ T6180] syzkaller0: entered allmulticast mode [ 133.073458][ T6194] xt_CT: No such helper "snmp_trap" [ 133.781937][ T6215] loop0: detected capacity change from 0 to 512 [ 135.615173][ T6215] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 135.684300][ T6215] EXT4-fs (loop0): 1 truncate cleaned up [ 135.712315][ T6215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.026923][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.183244][ T6200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.449055][ T6231] loop3: detected capacity change from 0 to 128 [ 139.229160][ T6231] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 139.251361][ T6231] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 139.290239][ T6229] netlink: 14 bytes leftover after parsing attributes in process `syz.3.76'. [ 139.373235][ T6236] netlink: 36 bytes leftover after parsing attributes in process `syz.4.78'. [ 139.602823][ T5831] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.280178][ T6249] syzkaller0: entered promiscuous mode [ 140.320498][ T6249] syzkaller0: entered allmulticast mode [ 140.358299][ T31] audit: type=1326 audit(1766815603.751:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2604f8f749 code=0x7ffc0000 [ 140.436105][ T31] audit: type=1326 audit(1766815603.781:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2604f8f749 code=0x7ffc0000 [ 140.501728][ T31] audit: type=1326 audit(1766815603.781:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2604f8f749 code=0x7ffc0000 [ 140.611964][ T31] audit: type=1326 audit(1766815603.781:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2604f8f749 code=0x7ffc0000 [ 140.881666][ T31] audit: type=1326 audit(1766815603.781:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2604f8f749 code=0x7ffc0000 [ 140.903882][ T31] audit: type=1326 audit(1766815603.791:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2604f8f749 code=0x7ffc0000 [ 140.930221][ T31] audit: type=1326 audit(1766815603.791:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2604f8f749 code=0x7ffc0000 [ 141.632199][ T31] audit: type=1326 audit(1766815603.791:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2604f8f749 code=0x7ffc0000 [ 141.657243][ T31] audit: type=1326 audit(1766815603.791:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2604f8f749 code=0x7ffc0000 [ 141.781711][ T31] audit: type=1326 audit(1766815603.791:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f2604f8f749 code=0x7ffc0000 [ 142.432381][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.438895][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.589763][ T6280] loop5: detected capacity change from 0 to 512 [ 142.791654][ T6280] EXT4-fs warning (device loop5): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 142.852824][ T6280] EXT4-fs warning (device loop5): dx_probe:848: Enable large directory feature to access it [ 142.879248][ T6280] EXT4-fs warning (device loop5): dx_probe:933: inode #2: comm syz.5.96: Corrupt directory, running e2fsck is recommended [ 142.922010][ T6280] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 143.109338][ T6280] EXT4-fs error (device loop5): ext4_iget_extra_inode:5072: inode #15: comm syz.5.96: corrupted in-inode xattr: e_name out of bounds [ 143.478924][ T6280] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.96: couldn't read orphan inode 15 (err -117) [ 143.566212][ T6280] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.730767][ T6280] EXT4-fs warning (device loop5): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 143.779299][ T6280] EXT4-fs warning (device loop5): dx_probe:848: Enable large directory feature to access it [ 143.800158][ T6280] EXT4-fs warning (device loop5): dx_probe:933: inode #2: comm syz.5.96: Corrupt directory, running e2fsck is recommended [ 143.903620][ T6289] EXT4-fs warning (device loop5): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 143.925807][ T6289] EXT4-fs warning (device loop5): dx_probe:848: Enable large directory feature to access it [ 144.007190][ T6289] EXT4-fs warning (device loop5): dx_probe:933: inode #2: comm syz.5.96: Corrupt directory, running e2fsck is recommended [ 144.165923][ T6292] EXT4-fs warning (device loop5): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 144.196963][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz.5.96'. [ 144.251033][ T6292] EXT4-fs warning (device loop5): dx_probe:848: Enable large directory feature to access it [ 144.317416][ T6292] EXT4-fs warning (device loop5): dx_probe:933: inode #2: comm syz.5.96: Corrupt directory, running e2fsck is recommended [ 144.429092][ T6296] EXT4-fs warning (device loop5): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 144.438599][ T6269] kexec: Could not allocate control_code_buffer [ 144.693490][ T6290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.052961][ T6284] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1303: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 145.645199][ T6319] loop2: detected capacity change from 0 to 128 [ 146.419879][ T6319] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.462331][ T6319] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 146.503546][ T6318] netlink: 14 bytes leftover after parsing attributes in process `syz.2.105'. [ 147.009561][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.076778][ T5836] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.661232][ T6343] netlink: 24 bytes leftover after parsing attributes in process `syz.5.111'. [ 149.732849][ T6349] netlink: 36 bytes leftover after parsing attributes in process `syz.5.113'. [ 151.476411][ T6363] loop3: detected capacity change from 0 to 512 [ 151.541774][ T6363] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 151.710395][ T6363] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #17: comm syz.3.119: inode has both inline data and extents flags [ 151.768542][ T6363] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.119: couldn't read orphan inode 17 (err -117) [ 152.077615][ T6374] loop4: detected capacity change from 0 to 128 [ 152.276367][ T6374] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.309477][ T6374] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 152.380984][ T6374] netlink: 14 bytes leftover after parsing attributes in process `syz.4.120'. [ 152.510477][ T6363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.712438][ T6363] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.119: bg 0: block 65: padding at end of block bitmap is not set [ 152.746417][ T6363] __quota_error: 1 callbacks suppressed [ 152.746439][ T6363] Quota error (device loop3): write_blk: dquota write failed [ 152.765960][ T5835] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.782689][ T6363] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 152.821689][ T6381] Quota error (device loop3): do_check_range: Getting block 144 out of range 0-5 [ 152.830930][ T6363] EXT4-fs error (device loop3): ext4_acquire_dquot:6984: comm syz.3.119: Failed to acquire dquot type 0 [ 153.325014][ T6392] netlink: 24 bytes leftover after parsing attributes in process `syz.5.125'. [ 153.930571][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.254307][ T6403] netlink: 36 bytes leftover after parsing attributes in process `syz.4.130'. [ 154.395783][ T6389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.812681][ T6427] loop2: detected capacity change from 0 to 128 [ 157.659013][ T6427] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.674510][ T6427] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 157.713670][ T6426] netlink: 14 bytes leftover after parsing attributes in process `syz.2.136'. [ 158.055076][ T5836] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 159.318028][ T6444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.144'. [ 160.457323][ T6454] netlink: 36 bytes leftover after parsing attributes in process `syz.2.146'. [ 160.466968][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 160.477025][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 160.488344][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 160.496956][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 160.507461][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 162.088955][ T6475] loop3: detected capacity change from 0 to 128 [ 162.781605][ T5840] Bluetooth: hci6: command tx timeout [ 162.888197][ T6475] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 162.902692][ T6475] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 162.943262][ T6473] netlink: 14 bytes leftover after parsing attributes in process `syz.3.151'. [ 162.959299][ T6468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.000061][ T6451] chnl_net:caif_netlink_parms(): no params data found [ 163.399531][ T5831] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.269441][ T6451] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.554004][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.630165][ T6505] netlink: 24 bytes leftover after parsing attributes in process `syz.1.158'. [ 164.844085][ T5840] Bluetooth: hci6: command tx timeout [ 165.272996][ T6451] bridge_slave_0: entered allmulticast mode [ 165.284734][ T6451] bridge_slave_0: entered promiscuous mode [ 165.412675][ T6451] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.419831][ T6451] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.437101][ T6451] bridge_slave_1: entered allmulticast mode [ 165.503972][ T6451] bridge_slave_1: entered promiscuous mode [ 166.126693][ T6451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.167271][ T6451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.290844][ T6451] team0: Port device team_slave_0 added [ 166.328085][ T6451] team0: Port device team_slave_1 added [ 166.542770][ T6451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.587668][ T6451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.871092][ T6451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.884767][ T6451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.891866][ T5840] Bluetooth: hci6: command tx timeout [ 166.901648][ T6451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.047061][ T6451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.151594][ T6525] loop4: detected capacity change from 0 to 128 [ 167.815956][ T6525] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.828432][ T6525] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 167.869681][ T6523] netlink: 14 bytes leftover after parsing attributes in process `syz.4.165'. [ 168.213618][ T6451] hsr_slave_0: entered promiscuous mode [ 168.223055][ T5835] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.281965][ T6451] hsr_slave_1: entered promiscuous mode [ 168.323986][ T6451] debugfs: 'hsr0' already exists in 'hsr' [ 168.372451][ T6451] Cannot create hsr debugfs directory [ 168.971965][ T5840] Bluetooth: hci6: command tx timeout [ 169.863894][ T6549] netlink: 24 bytes leftover after parsing attributes in process `syz.5.172'. [ 171.303198][ T6451] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 171.442105][ T6451] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 171.527171][ T6451] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 171.618560][ T6451] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 172.024120][ T6576] loop5: detected capacity change from 0 to 128 [ 172.817595][ T6576] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 172.830320][ T6576] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 172.872600][ T6568] netlink: 14 bytes leftover after parsing attributes in process `syz.5.179'. [ 173.243639][ T5842] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.394347][ T6451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.476861][ T6451] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.546121][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.553288][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.700031][ T6010] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.707234][ T6010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.286112][ T6583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.939519][ T6602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.188'. [ 176.956973][ T6451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.507514][ T6625] loop5: detected capacity change from 0 to 128 [ 177.665562][ T6625] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 177.698880][ T6625] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 177.770132][ T6625] netlink: 14 bytes leftover after parsing attributes in process `syz.5.194'. [ 178.302677][ T5842] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.110569][ T3763] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.443430][ T3763] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.993516][ T3763] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.073942][ T6652] netlink: 24 bytes leftover after parsing attributes in process `syz.3.201'. [ 180.843943][ T6451] veth0_vlan: entered promiscuous mode [ 181.169769][ T3763] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.332214][ T6451] veth1_vlan: entered promiscuous mode [ 181.538172][ T6451] veth0_macvtap: entered promiscuous mode [ 181.593279][ T6451] veth1_macvtap: entered promiscuous mode [ 182.247082][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.342871][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.378953][ T3763] bridge_slave_1: left allmulticast mode [ 182.409956][ T3763] bridge_slave_1: left promiscuous mode [ 182.427669][ T3763] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.526956][ T3763] bridge_slave_0: left allmulticast mode [ 182.545596][ T3763] bridge_slave_0: left promiscuous mode [ 182.582409][ T3763] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.179994][ T6686] loop4: detected capacity change from 0 to 128 [ 183.346963][ T6686] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 183.547890][ T6686] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 183.688459][ T6686] netlink: 14 bytes leftover after parsing attributes in process `syz.4.206'. [ 184.317585][ T3763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.372398][ T3763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.399502][ T3763] bond0 (unregistering): Released all slaves [ 184.725811][ T6696] netlink: 24 bytes leftover after parsing attributes in process `syz.5.214'. [ 185.728552][ T1117] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.768970][ T1117] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.537189][ T1117] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.573192][ T6700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.623155][ T1117] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.726410][ T5835] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.938852][ T2999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.991928][ T2999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.147414][ T3763] hsr_slave_0: left promiscuous mode [ 188.239958][ T3763] hsr_slave_1: left promiscuous mode [ 188.253318][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.270000][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.517026][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.592038][ T6738] netlink: 24 bytes leftover after parsing attributes in process `syz.2.226'. [ 188.638327][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.370028][ T3763] veth1_macvtap: left promiscuous mode [ 189.395501][ T3763] veth0_macvtap: left promiscuous mode [ 189.420999][ T3763] veth1_vlan: left promiscuous mode [ 189.441758][ T3763] veth0_vlan: left promiscuous mode [ 190.955085][ T3763] team0 (unregistering): Port device team_slave_1 removed [ 190.988940][ T3763] team0 (unregistering): Port device team_slave_0 removed [ 191.540456][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.572505][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.850704][ T6793] loop6: detected capacity change from 0 to 512 [ 192.948445][ T6793] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 193.103287][ T6793] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #17: comm syz.6.143: inode has both inline data and extents flags [ 193.148223][ T6793] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.143: couldn't read orphan inode 17 (err -117) [ 193.237807][ T6793] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.413654][ T6793] EXT4-fs error (device loop6): ext4_validate_block_bitmap:440: comm syz.6.143: bg 0: block 65: padding at end of block bitmap is not set [ 193.430623][ T6806] loop5: detected capacity change from 0 to 128 [ 193.438734][ T6793] Quota error (device loop6): write_blk: dquota write failed [ 193.988776][ T6793] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 194.074604][ T6808] Quota error (device loop6): do_check_range: Getting block 144 out of range 0-5 [ 194.112960][ T6806] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 194.253481][ T6806] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 194.298564][ T6793] EXT4-fs error (device loop6): ext4_acquire_dquot:6984: comm syz.6.143: Failed to acquire dquot type 0 [ 194.490619][ T6806] netlink: 14 bytes leftover after parsing attributes in process `syz.5.232'. [ 194.655680][ T6451] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.422545][ T6829] netlink: 28 bytes leftover after parsing attributes in process `syz.6.245'. [ 197.053943][ T5842] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 197.969589][ T6870] loop1: detected capacity change from 0 to 512 [ 198.049081][ T6870] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 198.172844][ T6870] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #17: comm syz.1.259: inode has both inline data and extents flags [ 198.308130][ T6870] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.259: couldn't read orphan inode 17 (err -117) [ 198.681130][ T6886] netlink: 28 bytes leftover after parsing attributes in process `syz.2.261'. [ 199.363042][ T6870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.512555][ T6870] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz.1.259: bg 0: block 65: padding at end of block bitmap is not set [ 199.693469][ T6870] Quota error (device loop1): write_blk: dquota write failed [ 199.775660][ T6870] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 199.922283][ T6890] Quota error (device loop1): do_check_range: Getting block 144 out of range 0-5 [ 199.943921][ T6870] EXT4-fs error (device loop1): ext4_acquire_dquot:6984: comm syz.1.259: Failed to acquire dquot type 0 [ 200.385734][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.879161][ T6932] loop3: detected capacity change from 0 to 128 [ 202.596199][ T6932] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 202.703537][ T6932] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 202.876839][ T6932] netlink: 14 bytes leftover after parsing attributes in process `syz.3.266'. [ 203.223078][ T6943] netlink: 28 bytes leftover after parsing attributes in process `syz.5.276'. [ 203.922216][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.928954][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.058286][ T6959] loop1: detected capacity change from 0 to 512 [ 205.137735][ T5831] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 205.178969][ T6959] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 205.267876][ T6959] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #17: comm syz.1.281: inode has both inline data and extents flags [ 205.299763][ T6959] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.281: couldn't read orphan inode 17 (err -117) [ 205.379795][ T6959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.444019][ T6959] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz.1.281: bg 0: block 65: padding at end of block bitmap is not set [ 205.543901][ T6959] Quota error (device loop1): write_blk: dquota write failed [ 205.592693][ T6959] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 205.701743][ T6975] Quota error (device loop1): do_check_range: Getting block 144 out of range 0-5 [ 205.762119][ T6959] EXT4-fs error (device loop1): ext4_acquire_dquot:6984: comm syz.1.281: Failed to acquire dquot type 0 [ 207.263139][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.047103][ T7041] loop2: detected capacity change from 0 to 128 [ 210.913856][ T7041] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 210.959943][ T7041] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 211.011694][ T7011] netlink: 14 bytes leftover after parsing attributes in process `syz.2.296'. [ 211.186756][ T7053] loop3: detected capacity change from 0 to 512 [ 211.248046][ T7053] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 211.384354][ T7053] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #17: comm syz.3.309: inode has both inline data and extents flags [ 211.455848][ T7053] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.309: couldn't read orphan inode 17 (err -117) [ 211.555325][ T7053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.609020][ T7053] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.309: bg 0: block 65: padding at end of block bitmap is not set [ 211.682111][ T7053] Quota error (device loop3): write_blk: dquota write failed [ 211.734527][ T7053] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 211.771820][ T7061] Quota error (device loop3): do_check_range: Getting block 144 out of range 0-5 [ 211.850760][ T7053] EXT4-fs error (device loop3): ext4_acquire_dquot:6984: comm syz.3.309: Failed to acquire dquot type 0 [ 211.890032][ T5836] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 212.114837][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.190861][ T7120] loop6: detected capacity change from 0 to 512 [ 215.225793][ T7120] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 215.327733][ T7120] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #17: comm syz.6.332: inode has both inline data and extents flags [ 215.444557][ T7120] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.332: couldn't read orphan inode 17 (err -117) [ 215.507726][ T7120] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.639531][ T7120] EXT4-fs error (device loop6): ext4_validate_block_bitmap:440: comm syz.6.332: bg 0: block 65: padding at end of block bitmap is not set [ 215.692587][ T7120] Quota error (device loop6): write_blk: dquota write failed [ 215.752824][ T7120] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 215.834832][ T7120] EXT4-fs error (device loop6): ext4_acquire_dquot:6984: comm syz.6.332: Failed to acquire dquot type 0 [ 215.872387][ T7127] Quota error (device loop6): do_check_range: Getting block 144 out of range 0-5 [ 217.245648][ T7137] loop2: detected capacity change from 0 to 128 [ 217.317189][ T6451] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.339944][ T7137] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 217.352450][ T7137] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 217.392145][ T7105] netlink: 14 bytes leftover after parsing attributes in process `syz.2.327'. [ 219.024288][ T5836] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.215855][ T7183] loop2: detected capacity change from 0 to 512 [ 220.429935][ T7183] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 221.039276][ T7183] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #17: comm syz.2.349: inode has both inline data and extents flags [ 221.144427][ T7183] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.349: couldn't read orphan inode 17 (err -117) [ 221.310506][ T7183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.380453][ T7183] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.349: bg 0: block 65: padding at end of block bitmap is not set [ 221.463411][ T7183] Quota error (device loop2): write_blk: dquota write failed [ 221.525564][ T7183] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 221.573835][ T7196] Quota error (device loop2): do_check_range: Getting block 144 out of range 0-5 [ 221.710211][ T7183] EXT4-fs error (device loop2): ext4_acquire_dquot:6984: comm syz.2.349: Failed to acquire dquot type 0 [ 222.145248][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.321515][ T7250] loop4: detected capacity change from 0 to 128 [ 224.923998][ T7250] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 224.937456][ T7250] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 224.973291][ T7212] netlink: 14 bytes leftover after parsing attributes in process `syz.4.356'. [ 225.983744][ T5835] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 226.019672][ T7266] loop5: detected capacity change from 0 to 512 [ 226.076516][ T7266] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 226.183115][ T7266] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #17: comm syz.5.371: inode has both inline data and extents flags [ 226.227739][ T7266] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.371: couldn't read orphan inode 17 (err -117) [ 226.410491][ T7266] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.513763][ T7266] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.371: bg 0: block 65: padding at end of block bitmap is not set [ 226.677624][ T7266] Quota error (device loop5): write_blk: dquota write failed [ 226.732221][ T7266] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 226.803921][ T7286] Quota error (device loop5): do_check_range: Getting block 144 out of range 0-5 [ 226.850219][ T7266] EXT4-fs error (device loop5): ext4_acquire_dquot:6984: comm syz.5.371: Failed to acquire dquot type 0 [ 227.275488][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.859059][ T7311] netlink: 40 bytes leftover after parsing attributes in process `syz.4.381'. [ 228.552561][ T7317] syzkaller0: entered promiscuous mode [ 228.620639][ T7317] syzkaller0: entered allmulticast mode [ 229.225881][ T7332] loop4: detected capacity change from 0 to 128 [ 229.402537][ T7332] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 229.432394][ T7332] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 229.694399][ T7332] netlink: 14 bytes leftover after parsing attributes in process `syz.4.386'. [ 230.820421][ T7354] loop3: detected capacity change from 0 to 512 [ 230.902776][ T7354] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 230.990025][ T7354] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #17: comm syz.3.393: inode has both inline data and extents flags [ 231.035420][ T7354] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.393: couldn't read orphan inode 17 (err -117) [ 231.051275][ T7354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.073704][ T7354] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.393: bg 0: block 65: padding at end of block bitmap is not set [ 231.106208][ T7354] Quota error (device loop3): write_blk: dquota write failed [ 231.159199][ T7354] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 231.220411][ T7354] EXT4-fs error (device loop3): ext4_acquire_dquot:6984: comm syz.3.393: Failed to acquire dquot type 0 [ 231.463672][ T7354] Quota error (device loop3): do_check_range: Getting block 144 out of range 0-5 [ 231.532072][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 231.542415][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 231.551033][ T5843] Bluetooth: hci5: command 0x0406 tx timeout [ 231.557762][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 231.563869][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 232.147523][ T7381] netlink: 40 bytes leftover after parsing attributes in process `syz.2.399'. [ 232.929113][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.138068][ T7397] syzkaller0: entered promiscuous mode [ 234.160214][ T7397] syzkaller0: entered allmulticast mode [ 234.281031][ T5835] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 235.611001][ T7422] netlink: 40 bytes leftover after parsing attributes in process `syz.3.412'. [ 236.511211][ T7427] loop4: detected capacity change from 0 to 512 [ 236.684038][ T7427] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 236.764906][ T7427] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #17: comm syz.4.415: inode has both inline data and extents flags [ 236.846138][ T7427] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.415: couldn't read orphan inode 17 (err -117) [ 236.933729][ T7427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.007447][ T7427] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.415: bg 0: block 65: padding at end of block bitmap is not set [ 237.060826][ T7427] Quota error (device loop4): write_blk: dquota write failed [ 237.089536][ T7427] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 237.129846][ T7427] EXT4-fs error (device loop4): ext4_acquire_dquot:6984: comm syz.4.415: Failed to acquire dquot type 0 [ 237.427525][ T7427] Quota error (device loop4): do_check_range: Getting block 144 out of range 0-5 [ 237.574829][ T7448] loop1: detected capacity change from 0 to 128 [ 237.698507][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.723483][ T7448] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 237.979423][ T7448] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 238.192304][ T7448] netlink: 14 bytes leftover after parsing attributes in process `syz.1.420'. [ 238.350758][ T7458] syzkaller0: entered promiscuous mode [ 238.408183][ T7458] syzkaller0: entered allmulticast mode [ 239.638139][ T31] audit: type=1326 audit(1766815703.031:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.2.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2c58f749 code=0x7ffc0000 [ 239.743514][ T7466] loop2: detected capacity change from 0 to 164 [ 239.749981][ T31] audit: type=1326 audit(1766815703.061:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.2.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2c58f749 code=0x7ffc0000 [ 239.783915][ T7466] ISOFS: unable to read i-node block [ 239.795187][ T31] audit: type=1326 audit(1766815703.061:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.2.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa2c58f749 code=0x7ffc0000 [ 239.825039][ T7466] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 239.882206][ T7466] IPv6: NLM_F_CREATE should be specified when creating new route [ 239.942407][ T31] audit: type=1326 audit(1766815703.061:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.2.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2c58f749 code=0x7ffc0000 [ 240.242234][ T31] audit: type=1326 audit(1766815703.061:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.2.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2c58f749 code=0x7ffc0000 [ 240.385761][ T7471] netlink: 40 bytes leftover after parsing attributes in process `syz.4.428'. [ 240.703852][ T31] audit: type=1326 audit(1766815703.061:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.2.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faa2c58df90 code=0x7ffc0000 [ 241.118753][ T31] audit: type=1326 audit(1766815703.061:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.2.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2c58f749 code=0x7ffc0000 [ 241.666485][ T7485] loop4: detected capacity change from 0 to 512 [ 241.708269][ T7485] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 241.794096][ T7485] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #17: comm syz.4.434: inode has both inline data and extents flags [ 241.820181][ T7485] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.434: couldn't read orphan inode 17 (err -117) [ 241.835202][ T7485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.889904][ T7485] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.434: bg 0: block 65: padding at end of block bitmap is not set [ 241.906587][ T7485] EXT4-fs error (device loop4): ext4_acquire_dquot:6984: comm syz.4.434: Failed to acquire dquot type 0 [ 242.169667][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.717000][ T7504] loop3: detected capacity change from 0 to 2048 [ 242.841451][ T5834] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 242.890050][ T7508] loop4: detected capacity change from 0 to 512 [ 242.936584][ T7508] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 242.947433][ T5849] Alternate GPT is invalid, using primary GPT. [ 242.994947][ T5849] loop3: p1 p2 p3 [ 242.995058][ T7508] EXT4-fs (loop4): 1 truncate cleaned up [ 242.998703][ T5849] loop3: partition table partially beyond EOD, truncated [ 243.036552][ T7508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.159951][ T7504] Alternate GPT is invalid, using primary GPT. [ 243.186829][ T7504] loop3: p1 p2 p3 [ 243.190589][ T7504] loop3: partition table partially beyond EOD, truncated [ 243.233377][ T7514] syzkaller0: entered promiscuous mode [ 243.240409][ T7514] syzkaller0: entered allmulticast mode [ 243.534571][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.632066][ T7518] netlink: 40 bytes leftover after parsing attributes in process `syz.2.445'. [ 244.588605][ T5816] udevd[5816]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 244.597355][ T5850] udevd[5850]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 244.611385][ T5849] udevd[5849]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 244.778563][ T5845] udevd[5845]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 244.835494][ T5819] udevd[5819]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 244.835712][ T5849] udevd[5849]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 245.155929][ T7531] loop5: detected capacity change from 0 to 512 [ 245.182262][ T7531] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 245.219375][ T7531] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #17: comm syz.5.451: inode has both inline data and extents flags [ 245.270648][ T7531] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.451: couldn't read orphan inode 17 (err -117) [ 245.319009][ T7531] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.483934][ T7531] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.451: bg 0: block 65: padding at end of block bitmap is not set [ 245.619964][ T7531] __quota_error: 58 callbacks suppressed [ 245.619989][ T7531] Quota error (device loop5): write_blk: dquota write failed [ 245.803897][ T7531] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 245.826930][ T7521] xt_CT: No such helper "snmp_trap" [ 245.923898][ T7537] Quota error (device loop5): do_check_range: Getting block 144 out of range 0-5 [ 246.001997][ T7531] EXT4-fs error (device loop5): ext4_acquire_dquot:6984: comm syz.5.451: Failed to acquire dquot type 0 [ 246.261577][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.056197][ T7569] xt_CT: No such helper "snmp_trap" [ 248.182495][ T7568] netlink: 40 bytes leftover after parsing attributes in process `syz.4.460'. [ 248.422635][ T7575] loop3: detected capacity change from 0 to 164 [ 248.431971][ T7575] iso9660: Unknown parameter 'g)d' [ 248.998469][ T7564] syzkaller0: entered promiscuous mode [ 249.059206][ T7564] syzkaller0: entered allmulticast mode [ 249.288990][ T7589] loop4: detected capacity change from 0 to 512 [ 249.313871][ T7589] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 249.391166][ T7589] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #17: comm syz.4.469: inode has both inline data and extents flags [ 249.432088][ T7589] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.469: couldn't read orphan inode 17 (err -117) [ 249.461466][ T7589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.489025][ T7589] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.469: bg 0: block 65: padding at end of block bitmap is not set [ 249.507733][ T7589] Quota error (device loop4): write_blk: dquota write failed [ 249.515571][ T7589] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 249.525818][ T7589] EXT4-fs error (device loop4): ext4_acquire_dquot:6984: comm syz.4.469: Failed to acquire dquot type 0 [ 249.610227][ T7589] Quota error (device loop4): do_check_range: Getting block 144 out of range 0-5 [ 249.759861][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.508104][ T7627] netlink: 'syz.2.481': attribute type 21 has an invalid length. [ 251.730007][ T7629] netlink: 96 bytes leftover after parsing attributes in process `syz.3.482'. [ 252.280004][ T7634] xt_CT: No such helper "snmp_trap" [ 252.493358][ T7639] loop2: detected capacity change from 0 to 128 [ 252.674070][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.485'. [ 253.201086][ T7639] team0 (unregistering): Port device team_slave_0 removed [ 253.269914][ T7639] team0 (unregistering): Port device team_slave_1 removed [ 253.503455][ T7659] syzkaller0: entered promiscuous mode [ 253.509020][ T7659] syzkaller0: entered allmulticast mode [ 254.232760][ T7677] netlink: 72 bytes leftover after parsing attributes in process `syz.2.496'. [ 254.326487][ T31] audit: type=1326 audit(1766815717.721:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.5.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc934f8f749 code=0x7ffc0000 [ 254.441043][ T31] audit: type=1326 audit(1766815717.761:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.5.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc934f8f749 code=0x7ffc0000 [ 254.505153][ T31] audit: type=1326 audit(1766815717.791:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.5.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc934f8f749 code=0x7ffc0000 [ 254.557704][ T31] audit: type=1326 audit(1766815717.791:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.5.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fc934f8f749 code=0x7ffc0000 [ 254.660782][ T31] audit: type=1326 audit(1766815717.791:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.5.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc934f8f749 code=0x7ffc0000 [ 254.753797][ T31] audit: type=1326 audit(1766815717.791:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.5.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc934f8f749 code=0x7ffc0000 [ 254.825278][ T31] audit: type=1326 audit(1766815717.801:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.5.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc934f8f749 code=0x7ffc0000 [ 254.905777][ T31] audit: type=1326 audit(1766815717.801:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.5.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc934f8f749 code=0x7ffc0000 [ 254.980959][ T31] audit: type=1326 audit(1766815717.801:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.5.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc934f8f749 code=0x7ffc0000 [ 255.069057][ T31] audit: type=1326 audit(1766815717.801:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.5.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fc934f8f749 code=0x7ffc0000 [ 256.391603][ T7694] xt_CT: No such helper "snmp_trap" [ 256.552580][ T7693] netlink: 20 bytes leftover after parsing attributes in process `syz.5.502'. [ 258.451876][ T7718] capability: warning: `syz.5.512' uses deprecated v2 capabilities in a way that may be insecure [ 258.686771][ T7722] loop2: detected capacity change from 0 to 512 [ 258.760001][ T7722] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 258.831057][ T7722] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #17: comm syz.2.514: inode has both inline data and extents flags [ 258.929625][ T7722] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.514: couldn't read orphan inode 17 (err -117) [ 258.979089][ T7722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.029893][ T7722] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.514: bg 0: block 65: padding at end of block bitmap is not set [ 259.159074][ T7722] EXT4-fs error (device loop2): ext4_acquire_dquot:6984: comm syz.2.514: Failed to acquire dquot type 0 [ 259.208255][ T7733] xt_CT: No such helper "snmp_trap" [ 259.646433][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.646493][ T7743] loop4: detected capacity change from 0 to 512 [ 259.680480][ T7743] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 259.704165][ T7748] random: crng reseeded on system resumption [ 259.729891][ T7743] EXT4-fs (loop4): 1 truncate cleaned up [ 259.738349][ T7743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.953931][ T7751] syzkaller0: entered promiscuous mode [ 259.959441][ T7751] syzkaller0: entered allmulticast mode [ 260.712352][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.111019][ T7773] netlink: 'syz.4.529': attribute type 29 has an invalid length. [ 261.830797][ T7782] loop4: detected capacity change from 0 to 128 [ 262.244666][ T7782] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 262.257684][ T7782] ext4 filesystem being mounted at /107/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 262.295633][ T7777] netlink: 14 bytes leftover after parsing attributes in process `syz.4.532'. [ 262.495985][ T5835] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 263.120618][ T7796] syzkaller0: entered promiscuous mode [ 263.154643][ T7796] syzkaller0: entered allmulticast mode [ 263.779063][ T7809] loop2: detected capacity change from 0 to 1024 [ 263.910514][ T7809] EXT4-fs: Ignoring removed orlov option [ 263.979598][ T60] Bluetooth: hci0: Frame reassembly failed (-84) [ 264.282707][ T7809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.399376][ T7828] loop6: detected capacity change from 0 to 128 [ 264.423450][ T7828] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 264.437917][ T7828] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 264.473763][ T7828] netlink: 14 bytes leftover after parsing attributes in process `syz.6.548'. [ 264.641996][ T7809] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.000399][ T7834] netlink: 20 bytes leftover after parsing attributes in process `syz.1.550'. [ 265.015476][ T6451] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 265.301986][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.308330][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.6.552'. [ 265.308381][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.377595][ T7840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.412717][ T7840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.449256][ T7840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.472686][ T7840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.011651][ T5833] Bluetooth: hci0: command 0x1003 tx timeout [ 266.017946][ T5846] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 266.043305][ T7853] IPv6: NLM_F_CREATE should be specified when creating new route [ 266.217330][ T7854] xt_CT: No such helper "snmp_trap" [ 266.504999][ T7861] loop5: detected capacity change from 0 to 512 [ 266.654069][ T7861] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 266.753837][ T7861] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.560: invalid indirect mapped block 4294967295 (level 1) [ 266.913705][ T7861] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.560: invalid indirect mapped block 4294967295 (level 1) [ 267.018754][ T7861] EXT4-fs (loop5): 2 truncates cleaned up [ 267.354028][ T7871] loop4: detected capacity change from 0 to 128 [ 267.378723][ T7861] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.462175][ T7873] loop1: detected capacity change from 0 to 512 [ 267.482469][ T7873] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 267.538808][ T7869] syzkaller0: entered promiscuous mode [ 267.585567][ T7869] syzkaller0: entered allmulticast mode [ 267.658024][ T7861] netlink: 4 bytes leftover after parsing attributes in process `syz.5.560'. [ 267.781341][ T7861] team0: Port device team_slave_1 removed [ 267.851719][ T7864] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 268.354078][ T7873] EXT4-fs (loop1): 1 truncate cleaned up [ 268.361896][ T7873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.380307][ T7871] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 268.394165][ T7871] ext4 filesystem being mounted at /110/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 268.434734][ T7866] netlink: 14 bytes leftover after parsing attributes in process `syz.4.564'. [ 268.672870][ T5835] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 268.863573][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.161492][ T7889] ip6_vti0 speed is unknown, defaulting to 1000 [ 269.225435][ T7889] ip6_vti0 speed is unknown, defaulting to 1000 [ 269.314808][ T7889] ip6_vti0 speed is unknown, defaulting to 1000 [ 269.486275][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.766257][ T7898] netlink: 40 bytes leftover after parsing attributes in process `syz.1.569'. [ 270.027736][ T7902] netlink: 40 bytes leftover after parsing attributes in process `syz.5.566'. [ 270.751733][ T31] kauditd_printk_skb: 33 callbacks suppressed [ 270.751758][ T31] audit: type=1326 audit(1766815734.141:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7905 comm="syz.2.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2c58f749 code=0x7ffc0000 [ 270.913172][ T31] audit: type=1326 audit(1766815734.141:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7905 comm="syz.2.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2c58f749 code=0x7ffc0000 [ 271.022992][ T31] audit: type=1326 audit(1766815734.141:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7905 comm="syz.2.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2c58f749 code=0x7ffc0000 [ 271.117320][ T31] audit: type=1326 audit(1766815734.151:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7905 comm="syz.2.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa2c58f749 code=0x7ffc0000 [ 271.231710][ T31] audit: type=1326 audit(1766815734.181:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7905 comm="syz.2.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2c58f749 code=0x7ffc0000 [ 271.427174][ T31] audit: type=1326 audit(1766815734.181:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7905 comm="syz.2.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2c58f749 code=0x7ffc0000 [ 271.501698][ T7921] netlink: 4 bytes leftover after parsing attributes in process `syz.5.578'. [ 271.513646][ T7921] netlink: 4 bytes leftover after parsing attributes in process `syz.5.578'. [ 271.563241][ T7921] netlink: 4 bytes leftover after parsing attributes in process `syz.5.578'. [ 271.571655][ T31] audit: type=1326 audit(1766815734.181:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7905 comm="syz.2.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2c58f749 code=0x7ffc0000 [ 271.678263][ T31] audit: type=1326 audit(1766815734.181:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7905 comm="syz.2.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2c58f749 code=0x7ffc0000 [ 271.742136][ T5899] ip6_vti0 speed is unknown, defaulting to 1000 [ 271.757179][ T7889] infiniband syz2: set active [ 271.782226][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.578'. [ 271.803569][ T7917] xt_CT: No such helper "snmp_trap" [ 271.817237][ T7889] infiniband syz2: added ip6_vti0 [ 271.849817][ T31] audit: type=1326 audit(1766815734.201:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7905 comm="syz.2.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa2c58f749 code=0x7ffc0000 [ 271.876565][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.578'. [ 271.908072][ T7889] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 271.918547][ T7889] infiniband syz2: Couldn't open port 1 [ 271.944365][ T7926] loop2: detected capacity change from 0 to 128 [ 271.998266][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.578'. [ 272.027305][ T31] audit: type=1326 audit(1766815734.201:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7905 comm="syz.2.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2c58f749 code=0x7ffc0000 [ 272.043767][ T7926] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 272.062832][ T7926] ext4 filesystem being mounted at /109/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 272.110749][ T7889] RDS/IB: syz2: added [ 272.115256][ T7889] smc: adding ib device syz2 with port count 1 [ 272.121667][ T7889] smc: ib device syz2 port 1 has no pnetid [ 272.166084][ T88] ip6_vti0 speed is unknown, defaulting to 1000 [ 272.195433][ T7889] ip6_vti0 speed is unknown, defaulting to 1000 [ 272.523272][ T5836] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 273.108789][ T7950] __nla_validate_parse: 1 callbacks suppressed [ 273.108814][ T7950] netlink: 24 bytes leftover after parsing attributes in process `syz.2.584'. [ 275.178177][ T7969] loop1: detected capacity change from 0 to 2048 [ 275.214401][ T7889] ip6_vti0 speed is unknown, defaulting to 1000 [ 275.247120][ T7969] loop1: p1 < > p4 [ 275.282879][ T7969] loop1: p4 size 8388608 extends beyond EOD, truncated [ 275.786057][ T7972] netlink: 20 bytes leftover after parsing attributes in process `syz.4.593'. [ 276.916093][ T7982] xt_CT: No such helper "snmp_trap" [ 277.014331][ T7987] loop1: detected capacity change from 0 to 128 [ 277.119410][ T7987] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 277.133569][ T7987] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 277.168968][ T7987] netlink: 14 bytes leftover after parsing attributes in process `syz.1.597'. [ 277.388660][ T7994] netlink: 24 bytes leftover after parsing attributes in process `syz.5.602'. [ 277.557349][ T5834] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 277.741404][ T7889] ip6_vti0 speed is unknown, defaulting to 1000 [ 277.877106][ T8002] loop1: detected capacity change from 0 to 2048 [ 277.962579][ T8002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.977783][ T8002] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.092413][ T7985] random: crng reseeded on system resumption [ 278.959224][ T7889] ip6_vti0 speed is unknown, defaulting to 1000 [ 279.307676][ T6507] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm kworker/u8:23: bg 0: block 345: padding at end of block bitmap is not set [ 279.678515][ T6507] EXT4-fs (loop1): Remounting filesystem read-only [ 279.715921][ T6345] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4980: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 280.187480][ T8031] xt_CT: No such helper "snmp_trap" [ 280.249845][ T8035] loop3: detected capacity change from 0 to 128 [ 280.312622][ T8035] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 280.325823][ T8035] ext4 filesystem being mounted at /95/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 280.361285][ T8035] netlink: 14 bytes leftover after parsing attributes in process `syz.3.615'. [ 280.772659][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.924692][ T5831] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 281.249990][ T8048] loop3: detected capacity change from 0 to 1024 [ 281.303339][ T7889] ip6_vti0 speed is unknown, defaulting to 1000 [ 281.329431][ T8048] EXT4-fs: Ignoring removed nomblk_io_submit option [ 281.410050][ T8048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.504968][ T8048] netlink: 56 bytes leftover after parsing attributes in process `syz.3.619'. [ 281.790103][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.185328][ T8059] netlink: 'syz.3.622': attribute type 1 has an invalid length. [ 282.448125][ T8059] 8021q: adding VLAN 0 to HW filter on device bond1 [ 282.603382][ T8063] bond1: (slave veth3): Enslaving as an active interface with a down link [ 282.632601][ T8067] random: crng reseeded on system resumption [ 282.693391][ T8066] vlan2: entered allmulticast mode [ 282.713366][ T8066] veth0_to_bond: entered allmulticast mode [ 282.734412][ T5846] Bluetooth: hci6: command 0x0406 tx timeout [ 282.754608][ T8066] veth0_to_bond: entered promiscuous mode [ 282.777763][ T8066] veth0_to_bond: left promiscuous mode [ 282.803452][ T8069] loop5: detected capacity change from 0 to 512 [ 282.816463][ T8069] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 282.829316][ T8066] bond1: (slave vlan2): making interface the new active one [ 282.845520][ T8069] EXT4-fs (loop5): 1 truncate cleaned up [ 282.860511][ T8069] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.925388][ T8066] veth0_to_bond: entered promiscuous mode [ 282.938409][ T8066] vlan2: entered promiscuous mode [ 282.965336][ T8066] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 282.994672][ T8075] netlink: 20 bytes leftover after parsing attributes in process `syz.2.627'. [ 283.173431][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.268710][ T7889] ip6_vti0 speed is unknown, defaulting to 1000 [ 283.481085][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 283.481109][ T31] audit: type=1326 audit(1766815746.871:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4fd8f749 code=0x7ffc0000 [ 283.601806][ T31] audit: type=1326 audit(1766815746.891:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f1c4fd8f749 code=0x7ffc0000 [ 283.693750][ T31] audit: type=1326 audit(1766815746.891:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4fd8f749 code=0x7ffc0000 [ 283.765108][ T31] audit: type=1326 audit(1766815746.891:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4fd8f749 code=0x7ffc0000 [ 283.821936][ T31] audit: type=1326 audit(1766815746.961:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.4.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2604f8f749 code=0x7ffc0000 [ 283.899901][ T8095] tipc: New replicast peer: 255.255.255.255 [ 283.915504][ T31] audit: type=1326 audit(1766815746.961:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.4.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2604f8f749 code=0x7ffc0000 [ 283.979389][ T8095] tipc: Enabled bearer , priority 10 [ 284.047274][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.634'. [ 284.052586][ T31] audit: type=1326 audit(1766815746.971:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.4.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2604f8f749 code=0x7ffc0000 [ 284.080288][ T31] audit: type=1326 audit(1766815746.971:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.4.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2604f8f749 code=0x7ffc0000 [ 284.102532][ T31] audit: type=1326 audit(1766815746.981:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.4.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2604f8f749 code=0x7ffc0000 [ 284.126355][ T31] audit: type=1326 audit(1766815746.981:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.4.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2604f8f749 code=0x7ffc0000 [ 284.164460][ T8092] tipc: Disabling bearer [ 285.247652][ T8101] ip6_vti0 speed is unknown, defaulting to 1000 [ 285.562091][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 285.589661][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 285.599033][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 285.608483][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 285.617915][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.939014][ T8116] loop1: detected capacity change from 0 to 512 [ 285.947927][ T8116] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 285.978135][ T8116] EXT4-fs (loop1): 1 truncate cleaned up [ 285.989900][ T8116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.039720][ T8111] ip6_vti0 speed is unknown, defaulting to 1000 [ 286.219811][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.048692][ T8136] loop4: detected capacity change from 0 to 8192 [ 287.364067][ T8145] netlink: 24 bytes leftover after parsing attributes in process `syz.3.651'. [ 287.692458][ T5833] Bluetooth: hci0: command tx timeout [ 288.031936][ T5833] Bluetooth: hci7: command 0x1003 tx timeout [ 288.032012][ T5846] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 288.411327][ T49] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.862264][ T5846] Bluetooth: hci0: command tx timeout [ 289.864870][ T49] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.382142][ T49] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.668913][ T49] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.103691][ T8175] capability: warning: `syz.5.660' uses 32-bit capabilities (legacy support in use) [ 291.167363][ T49] bridge_slave_1: left allmulticast mode [ 291.188962][ T49] bridge_slave_1: left promiscuous mode [ 291.212514][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.261483][ T49] bridge_slave_0: left allmulticast mode [ 291.280799][ T49] bridge_slave_0: left promiscuous mode [ 291.305904][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.747683][ T8183] loop1: detected capacity change from 0 to 512 [ 291.783266][ T8183] EXT4-fs: Ignoring removed orlov option [ 291.835901][ T8183] ext2: Unknown parameter 'measure' [ 291.931833][ T5846] Bluetooth: hci0: command tx timeout [ 292.023249][ T8185] netlink: 24 bytes leftover after parsing attributes in process `syz.3.663'. [ 292.613689][ T6118] smc: removing ib device syz2 [ 293.282604][ T8192] loop1: detected capacity change from 0 to 2048 [ 293.390915][ T5849] Alternate GPT is invalid, using primary GPT. [ 293.430968][ T5849] loop1: p2 p3 p7 [ 294.011873][ T5846] Bluetooth: hci0: command tx timeout [ 294.084477][ T5850] udevd[5850]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 294.109050][ T5849] udevd[5849]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 294.142302][ T8125] udevd[8125]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 294.188387][ T8200] xt_CT: No such helper "snmp_trap" [ 294.448020][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.567692][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.577084][ T8207] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 294.637239][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 294.637262][ T31] audit: type=1326 audit(1766815758.031:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8206 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2c58f749 code=0x7ffc0000 [ 294.717301][ T31] audit: type=1326 audit(1766815758.071:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8206 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2c58f749 code=0x7ffc0000 [ 294.751771][ T49] bond0 (unregistering): Released all slaves [ 294.857206][ T31] audit: type=1326 audit(1766815758.071:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8206 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2c58f749 code=0x7ffc0000 [ 294.920358][ T8111] chnl_net:caif_netlink_parms(): no params data found [ 294.939691][ T31] audit: type=1326 audit(1766815758.071:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8206 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7faa2c58f749 code=0x7ffc0000 [ 295.046538][ T31] audit: type=1326 audit(1766815758.071:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8206 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faa2c58f783 code=0x7ffc0000 [ 295.131662][ T31] audit: type=1326 audit(1766815758.071:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8206 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faa2c58e1ff code=0x7ffc0000 [ 295.255262][ T5913] ip6_vti0 speed is unknown, defaulting to 1000 [ 295.266559][ T5913] syz2: Port: 1 Link DOWN [ 295.285895][ T31] audit: type=1326 audit(1766815758.071:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8206 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7faa2c58f7d7 code=0x7ffc0000 [ 295.311768][ T31] audit: type=1326 audit(1766815758.071:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8206 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faa2c58df90 code=0x7ffc0000 [ 295.411672][ T31] audit: type=1326 audit(1766815758.081:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8206 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7faa2c58e3aa code=0x7ffc0000 [ 295.473736][ T31] audit: type=1326 audit(1766815758.081:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8206 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2c58f749 code=0x7ffc0000 [ 295.515454][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.5.671'. [ 295.577389][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.673'. [ 295.697373][ T8220] syz.2.673 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 295.721709][ T8207] bridge_slave_1: left allmulticast mode [ 295.727380][ T8207] bridge_slave_1: left promiscuous mode [ 295.746425][ T8207] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.875535][ T8207] bridge_slave_0: left allmulticast mode [ 295.950079][ T8207] bridge_slave_0: left promiscuous mode [ 295.988154][ T8207] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.274793][ T8246] loop5: detected capacity change from 0 to 1024 [ 297.306475][ T8246] EXT4-fs: Ignoring removed oldalloc option [ 297.362737][ T8111] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.371318][ T8246] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 297.409028][ T8111] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.416535][ T8111] bridge_slave_0: entered allmulticast mode [ 297.433811][ T8111] bridge_slave_0: entered promiscuous mode [ 297.457052][ T8246] System zones: 0-1, 3-12 [ 297.483587][ T8111] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.559903][ T8111] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.624398][ T8111] bridge_slave_1: entered allmulticast mode [ 297.704070][ T8246] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.721836][ T8111] bridge_slave_1: entered promiscuous mode [ 297.773093][ T8256] netlink: 20 bytes leftover after parsing attributes in process `syz.1.683'. [ 298.530228][ T8260] xt_CT: No such helper "snmp_trap" [ 298.783580][ T8254] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 299.042527][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.043990][ T8111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.349603][ T8272] netlink: 56 bytes leftover after parsing attributes in process `syz.5.687'. [ 299.416634][ T8111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.434679][ T8275] netlink: 56 bytes leftover after parsing attributes in process `syz.5.687'. [ 299.511962][ T8276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.686'. [ 299.700009][ T31] kauditd_printk_skb: 154 callbacks suppressed [ 299.700056][ T31] audit: type=1326 audit(1766815763.051:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27b18f749 code=0x7ffc0000 [ 300.079828][ T31] audit: type=1326 audit(1766815763.171:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27b18f749 code=0x7ffc0000 [ 300.111622][ T31] audit: type=1326 audit(1766815763.431:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27b18f749 code=0x7ffc0000 [ 300.133904][ T31] audit: type=1326 audit(1766815763.431:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc27b18f783 code=0x7ffc0000 [ 300.157520][ T31] audit: type=1326 audit(1766815763.431:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc27b18f807 code=0x7ffc0000 [ 300.184605][ T31] audit: type=1326 audit(1766815763.431:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc27b146bdd code=0x7ffc0000 [ 300.206826][ T31] audit: type=1326 audit(1766815763.431:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fc27b1c3e89 code=0x7ffc0000 [ 300.229126][ T31] audit: type=1326 audit(1766815763.451:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc27b146c47 code=0x7ffc0000 [ 300.281657][ T31] audit: type=1326 audit(1766815763.451:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27b18f749 code=0x7ffc0000 [ 300.321837][ T31] audit: type=1326 audit(1766815763.451:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27b18f749 code=0x7ffc0000 [ 301.174196][ T8111] team0: Port device team_slave_0 added [ 301.208650][ T1150] vlan2: left promiscuous mode [ 301.238327][ T8111] team0: Port device team_slave_1 added [ 301.355123][ T8300] netlink: 128 bytes leftover after parsing attributes in process `syz.2.694'. [ 301.397994][ T8306] loop3: detected capacity change from 0 to 1024 [ 301.414338][ T8300] netlink: 16 bytes leftover after parsing attributes in process `syz.2.694'. [ 301.426115][ T8306] EXT4-fs: Ignoring removed bh option [ 301.526435][ T8306] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.756624][ T8111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.790010][ T8111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.869148][ T8111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.883683][ T8314] netlink: 20 bytes leftover after parsing attributes in process `syz.1.697'. [ 301.923632][ T8111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.945748][ T8111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.062037][ T8111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.500871][ T49] hsr_slave_0: left promiscuous mode [ 302.506966][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.521806][ T8329] sd 0:0:1:0: device reset [ 302.531632][ T49] hsr_slave_1: left promiscuous mode [ 302.577761][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.5.702'. [ 302.609140][ T49] veth1_macvtap: left promiscuous mode [ 302.655378][ T49] veth0_macvtap: left promiscuous mode [ 302.661073][ T49] veth1_vlan: left promiscuous mode [ 302.707094][ T49] veth0_vlan: left promiscuous mode [ 303.862092][ T8343] netlink: 24 bytes leftover after parsing attributes in process `syz.2.706'. [ 305.829441][ T49] team0 (unregistering): Port device team_slave_1 removed [ 305.901509][ T49] team0 (unregistering): Port device team_slave_0 removed [ 306.383859][ T8332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.391278][ T8332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.414655][ T8332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.425283][ T8332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.555644][ T8342] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 306.565041][ T8342] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 306.574754][ T8342] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 306.712111][ T31] kauditd_printk_skb: 115 callbacks suppressed [ 306.712135][ T31] audit: type=1800 audit(1766815769.951:671): pid=8342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.705" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 306.765219][ T8111] hsr_slave_0: entered promiscuous mode [ 306.815016][ T8111] hsr_slave_1: entered promiscuous mode [ 306.834596][ T8111] debugfs: 'hsr0' already exists in 'hsr' [ 306.840355][ T8111] Cannot create hsr debugfs directory [ 307.057367][ T31] audit: type=1326 audit(1766815770.441:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8359 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2c58f749 code=0x7ffc0000 [ 307.387804][ T31] audit: type=1326 audit(1766815770.481:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8359 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7faa2c58f749 code=0x7ffc0000 [ 307.421056][ T31] audit: type=1326 audit(1766815770.481:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8359 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2c58f749 code=0x7ffc0000 [ 307.530876][ T31] audit: type=1326 audit(1766815770.501:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8359 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2c58f749 code=0x7ffc0000 [ 307.621703][ T31] audit: type=1326 audit(1766815770.501:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8359 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2c58f749 code=0x7ffc0000 [ 307.676178][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 307.685274][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 307.693591][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 307.702027][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 307.710436][ T8375] loop5: detected capacity change from 0 to 512 [ 307.711137][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 307.813350][ T31] audit: type=1326 audit(1766815770.501:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8359 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7faa2c58f749 code=0x7ffc0000 [ 307.838770][ T31] audit: type=1326 audit(1766815770.501:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8359 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2c58f749 code=0x7ffc0000 [ 307.861231][ T31] audit: type=1326 audit(1766815770.501:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8359 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2c58f749 code=0x7ffc0000 [ 307.883691][ T31] audit: type=1326 audit(1766815770.501:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8359 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2c58f749 code=0x7ffc0000 [ 307.964654][ T8375] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 308.049763][ T8379] netlink: 20 bytes leftover after parsing attributes in process `syz.3.713'. [ 308.098186][ T8375] EXT4-fs (loop5): 1 truncate cleaned up [ 308.220562][ T8375] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.859051][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.718'. [ 309.314240][ T8403] xt_CT: No such helper "snmp_trap" [ 309.465736][ T8111] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 309.556196][ T8111] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 309.784186][ T5833] Bluetooth: hci6: command tx timeout [ 309.984920][ T8111] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 310.117602][ T8419] netlink: 24 bytes leftover after parsing attributes in process `syz.2.722'. [ 310.684465][ T8111] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 310.749358][ T6212] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.124387][ T6212] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.400070][ T8442] loop3: detected capacity change from 0 to 128 [ 311.427425][ T8442] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 311.461784][ T8442] ext4 filesystem being mounted at /120/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 311.669463][ T6212] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.726829][ T31] kauditd_printk_skb: 78 callbacks suppressed [ 311.726854][ T31] audit: type=1326 audit(1766815775.121:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8440 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27b18f749 code=0x7ffc0000 [ 311.847818][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.726'. [ 311.861965][ T5833] Bluetooth: hci6: command tx timeout [ 311.891626][ T31] audit: type=1326 audit(1766815775.151:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8440 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27b18f749 code=0x7ffc0000 [ 312.011939][ T31] audit: type=1326 audit(1766815775.151:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8440 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc27b18f749 code=0x7ffc0000 [ 312.060101][ T6212] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.124145][ T31] audit: type=1326 audit(1766815775.151:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8440 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27b18f749 code=0x7ffc0000 [ 312.155014][ T8442] bridge_slave_1: left allmulticast mode [ 312.160694][ T8442] bridge_slave_1: left promiscuous mode [ 312.193600][ T8442] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.229150][ T31] audit: type=1326 audit(1766815775.151:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8440 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27b18f749 code=0x7ffc0000 [ 312.268990][ T8442] bridge_slave_0: left allmulticast mode [ 312.298950][ T8456] loop1: detected capacity change from 0 to 256 [ 312.317645][ T8442] bridge_slave_0: left promiscuous mode [ 312.327390][ T31] audit: type=1326 audit(1766815775.191:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8440 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27b18f749 code=0x7ffc0000 [ 312.341953][ T8442] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.425989][ T31] audit: type=1326 audit(1766815775.191:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8440 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27b18f749 code=0x7ffc0000 [ 312.536052][ T31] audit: type=1326 audit(1766815775.191:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8440 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc27b18f749 code=0x7ffc0000 [ 312.661897][ T31] audit: type=1326 audit(1766815775.191:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8440 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27b18f749 code=0x7ffc0000 [ 312.692210][ T31] audit: type=1326 audit(1766815775.191:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8440 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27b18f749 code=0x7ffc0000 [ 312.841374][ T8465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.731'. [ 312.888956][ T8376] chnl_net:caif_netlink_parms(): no params data found [ 313.063408][ T5831] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 313.713430][ T8476] netlink: 24 bytes leftover after parsing attributes in process `syz.2.734'. [ 313.932371][ T5833] Bluetooth: hci6: command tx timeout [ 314.033639][ T8474] xt_CT: No such helper "snmp_trap" [ 314.756507][ T8111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.105859][ T8376] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.132185][ T8376] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.163599][ T8376] bridge_slave_0: entered allmulticast mode [ 315.192262][ T8376] bridge_slave_0: entered promiscuous mode [ 315.219590][ T6212] bridge_slave_1: left allmulticast mode [ 315.251664][ T6212] bridge_slave_1: left promiscuous mode [ 315.265034][ T6212] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.332805][ T6212] bridge_slave_0: left allmulticast mode [ 315.360302][ T6212] bridge_slave_0: left promiscuous mode [ 315.366417][ T6212] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.551181][ T6213] Bluetooth: hci2: Frame reassembly failed (-84) [ 315.574512][ T6213] Bluetooth: hci2: Frame reassembly failed (-84) [ 316.011610][ T5846] Bluetooth: hci6: command tx timeout [ 316.401717][ T6212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.432176][ T6212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.465356][ T6212] bond0 (unregistering): Released all slaves [ 316.551444][ T8376] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.591696][ T8376] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.623363][ T8376] bridge_slave_1: entered allmulticast mode [ 316.631407][ T8376] bridge_slave_1: entered promiscuous mode [ 316.671011][ T8111] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.722656][ T6212] tipc: Left network mode [ 316.969211][ T8376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.007436][ T8376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.058987][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.066179][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.180874][ T8516] netlink: 56 bytes leftover after parsing attributes in process `syz.1.741'. [ 317.275345][ T8376] team0: Port device team_slave_0 added [ 317.309294][ T8376] team0: Port device team_slave_1 added [ 317.408805][ T4034] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.416032][ T4034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.466412][ T8518] loop1: detected capacity change from 0 to 512 [ 317.507426][ T8518] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 317.552606][ T8518] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #17: comm syz.1.742: inode has both inline data and extents flags [ 317.576955][ T6212] hsr_slave_0: left promiscuous mode [ 317.585589][ T8518] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.742: couldn't read orphan inode 17 (err -117) [ 317.602302][ T6212] hsr_slave_1: left promiscuous mode [ 317.608534][ T6212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.614422][ T5846] Bluetooth: hci2: command 0x1003 tx timeout [ 317.616813][ T5833] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 317.639396][ T8518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.671817][ T6212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.711305][ T6212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.717805][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.724689][ T6212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.731905][ T8518] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz.1.742: bg 0: block 65: padding at end of block bitmap is not set [ 317.778670][ T8518] __quota_error: 62 callbacks suppressed [ 317.778695][ T8518] Quota error (device loop1): write_blk: dquota write failed [ 317.780968][ T6212] veth1_macvtap: left promiscuous mode [ 317.823731][ T8518] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 317.824892][ T6212] veth0_macvtap: left promiscuous mode [ 317.839617][ T8522] Quota error (device loop1): do_check_range: Getting block 144 out of range 0-5 [ 317.869469][ T8518] EXT4-fs error (device loop1): ext4_acquire_dquot:6984: comm syz.1.742: Failed to acquire dquot type 0 [ 317.900871][ T6212] veth1_vlan: left promiscuous mode [ 317.909902][ T6212] veth0_vlan: left promiscuous mode [ 318.005123][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.284009][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.744'. [ 318.528987][ T8531] xt_CT: No such helper "snmp_trap" [ 319.166598][ T8538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.746'. [ 320.029469][ T6212] team0 (unregistering): Port device team_slave_1 removed [ 320.135321][ T6212] team0 (unregistering): Port device team_slave_0 removed [ 320.893999][ T8376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.925155][ T8376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.967261][ T8559] netlink: 56 bytes leftover after parsing attributes in process `syz.3.752'. [ 320.994520][ T8376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.012060][ T8376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.019098][ T8376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.071407][ T8376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.703429][ T8376] hsr_slave_0: entered promiscuous mode [ 321.721212][ T8376] hsr_slave_1: entered promiscuous mode [ 321.767622][ T8376] debugfs: 'hsr0' already exists in 'hsr' [ 321.827199][ T8572] random: crng reseeded on system resumption [ 322.089186][ T8376] Cannot create hsr debugfs directory [ 323.315490][ T8602] netlink: 56 bytes leftover after parsing attributes in process `syz.3.763'. [ 323.688766][ T8609] loop5: detected capacity change from 0 to 512 [ 323.772265][ T8612] netlink: 24 bytes leftover after parsing attributes in process `syz.1.764'. [ 324.328899][ T8609] EXT4-fs error (device loop5): ext4_xattr_inode_iget:444: comm syz.5.765: error while reading EA inode 32 err=-116 [ 324.678847][ T8609] EXT4-fs (loop5): Remounting filesystem read-only [ 324.721709][ T8609] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 325.170818][ T8609] EXT4-fs warning (device loop5): ext4_evict_inode:255: couldn't mark inode dirty (err -30) [ 325.431911][ T8609] EXT4-fs (loop5): 1 orphan inode deleted [ 325.500471][ T8609] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.589509][ T8609] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.637029][ T8111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.738993][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.745365][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.990273][ T8376] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 327.115165][ T8645] random: crng reseeded on system resumption [ 327.700622][ T8376] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 327.779923][ T8376] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 327.830075][ T8376] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 328.317760][ T8669] loop1: detected capacity change from 0 to 128 [ 328.377487][ T8669] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 328.384575][ T8376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.605806][ T8669] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 328.691976][ T8376] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.797590][ T8682] netlink: 24 bytes leftover after parsing attributes in process `syz.3.778'. [ 328.914692][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.921914][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.343520][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.350735][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.537949][ T8376] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 329.587845][ T8376] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.604064][ T5834] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 329.928592][ T8695] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 329.937923][ T8695] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 329.988189][ T8695] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 330.228050][ T8111] veth0_vlan: entered promiscuous mode [ 330.267826][ T8111] veth1_vlan: entered promiscuous mode [ 330.389011][ T8111] veth0_macvtap: entered promiscuous mode [ 330.488733][ T8111] veth1_macvtap: entered promiscuous mode [ 330.576776][ T8111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.628100][ T8111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.834743][ T3763] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.894437][ T3763] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.952139][ T3763] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.971086][ T3763] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.063597][ T8376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.240272][ T31] audit: type=1326 audit(1766815794.631:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.1.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4fd8f749 code=0x7ffc0000 [ 331.323723][ T31] audit: type=1326 audit(1766815794.681:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.1.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c4fd8f749 code=0x7ffc0000 [ 331.392822][ T31] audit: type=1326 audit(1766815794.681:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.1.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4fd8f749 code=0x7ffc0000 [ 331.483783][ T31] audit: type=1326 audit(1766815794.681:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.1.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4fd8f749 code=0x7ffc0000 [ 331.666656][ T8744] netlink: 24 bytes leftover after parsing attributes in process `syz.5.794'. [ 332.242120][ T31] audit: type=1326 audit(1766815794.681:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.1.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c4fd8f749 code=0x7ffc0000 [ 332.291638][ T31] audit: type=1326 audit(1766815794.681:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.1.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4fd8f749 code=0x7ffc0000 [ 332.316012][ T31] audit: type=1326 audit(1766815794.681:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.1.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4fd8f749 code=0x7ffc0000 [ 332.338878][ T31] audit: type=1326 audit(1766815794.681:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.1.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c4fd8f749 code=0x7ffc0000 [ 332.517531][ T31] audit: type=1326 audit(1766815794.681:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.1.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4fd8f749 code=0x7ffc0000 [ 332.539959][ T31] audit: type=1326 audit(1766815794.681:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.1.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4fd8f749 code=0x7ffc0000 [ 332.641356][ T6507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.701881][ T6507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.907574][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.946596][ T8771] loop5: detected capacity change from 0 to 512 [ 333.983525][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.032250][ T8771] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 334.141520][ T8771] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #17: comm syz.5.801: inode has both inline data and extents flags [ 334.166859][ T8771] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.801: couldn't read orphan inode 17 (err -117) [ 334.274187][ T8771] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.332953][ T8376] veth0_vlan: entered promiscuous mode [ 334.440163][ T8376] veth1_vlan: entered promiscuous mode [ 334.631311][ T8376] veth0_macvtap: entered promiscuous mode [ 334.711789][ T8376] veth1_macvtap: entered promiscuous mode [ 334.748926][ T8793] netlink: 20 bytes leftover after parsing attributes in process `syz.2.805'. [ 334.779497][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.832135][ T8376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.900476][ T8797] netlink: 20 bytes leftover after parsing attributes in process `syz.3.806'. [ 334.921483][ T8376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.050687][ T8802] netlink: 16 bytes leftover after parsing attributes in process `syz.5.808'. [ 335.247743][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.811'. [ 335.351950][ T6213] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.395886][ T6213] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.408009][ T8808] loop7: detected capacity change from 0 to 7 [ 335.418071][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 335.427891][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 335.441623][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 335.451354][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 335.468111][ T6213] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.470171][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 335.486456][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 335.514734][ T6213] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.527847][ T8813] [ 335.530192][ T8813] ====================================================== [ 335.537208][ T8813] WARNING: possible circular locking dependency detected [ 335.544229][ T8813] syzkaller #0 Not tainted [ 335.548646][ T8813] ------------------------------------------------------ [ 335.555662][ T8813] syz.1.810/8813 is trying to acquire lock: [ 335.561554][ T8813] ffff888140460220 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 335.571787][ T8813] [ 335.571787][ T8813] but task is already holding lock: [ 335.579143][ T8813] ffff888025802680 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 335.590417][ T8813] [ 335.590417][ T8813] which lock already depends on the new lock. [ 335.590417][ T8813] [ 335.600811][ T8813] [ 335.600811][ T8813] the existing dependency chain (in reverse order) is: [ 335.609813][ T8813] [ 335.609813][ T8813] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 335.618448][ T8813] blk_alloc_queue+0x610/0x750 [ 335.623742][ T8813] blk_mq_alloc_queue+0x172/0x280 [ 335.629306][ T8813] __blk_mq_alloc_disk+0x29/0x120 [ 335.634864][ T8813] loop_add+0x490/0xb70 [ 335.639561][ T8813] loop_init+0x164/0x270 [ 335.644334][ T8813] do_one_initcall+0x123/0x680 [ 335.649641][ T8813] kernel_init_freeable+0x5c8/0x920 [ 335.655365][ T8813] kernel_init+0x1c/0x2b0 [ 335.660224][ T8813] ret_from_fork+0x983/0xb10 [ 335.665339][ T8813] ret_from_fork_asm+0x1a/0x30 [ 335.670647][ T8813] [ 335.670647][ T8813] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 335.677874][ T8813] fs_reclaim_acquire+0x102/0x150 [ 335.683436][ T8813] kmem_cache_alloc_noprof+0x5b/0x770 [ 335.689352][ T8813] __kernfs_iattrs+0x124/0x3e0 [ 335.694641][ T8813] __kernfs_setattr+0x4d/0x3c0 [ 335.699929][ T8813] kernfs_iop_setattr+0xda/0x120 [ 335.705390][ T8813] notify_change+0x6d2/0x1290 [ 335.710591][ T8813] do_truncate+0x1d7/0x230 [ 335.715536][ T8813] path_openat+0x2a1a/0x3140 [ 335.720659][ T8813] do_filp_open+0x20b/0x470 [ 335.725696][ T8813] do_sys_openat2+0x121/0x290 [ 335.730915][ T8813] __x64_sys_openat+0x174/0x210 [ 335.736307][ T8813] do_syscall_64+0xcd/0xf80 [ 335.741355][ T8813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.747774][ T8813] [ 335.747774][ T8813] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 335.756308][ T8813] __lock_acquire+0x1669/0x2890 [ 335.761692][ T8813] lock_acquire+0x179/0x330 [ 335.766725][ T8813] down_read+0x9b/0x460 [ 335.771497][ T8813] kernfs_iop_getattr+0x9c/0xf0 [ 335.776873][ T8813] vfs_getattr_nosec+0x2ac/0x430 [ 335.782346][ T8813] vfs_getattr+0x4a/0x60 [ 335.787123][ T8813] loop_query_min_dio_size.isra.0+0x117/0x250 [ 335.793771][ T8813] lo_ioctl+0x1439/0x1cb0 [ 335.798622][ T8813] blkdev_ioctl+0x5b0/0x6e0 [ 335.803654][ T8813] __x64_sys_ioctl+0x18e/0x210 [ 335.808943][ T8813] do_syscall_64+0xcd/0xf80 [ 335.813992][ T8813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.820415][ T8813] [ 335.820415][ T8813] other info that might help us debug this: [ 335.820415][ T8813] [ 335.830632][ T8813] Chain exists of: [ 335.830632][ T8813] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 335.830632][ T8813] [ 335.845102][ T8813] Possible unsafe locking scenario: [ 335.845102][ T8813] [ 335.852539][ T8813] CPU0 CPU1 [ 335.857891][ T8813] ---- ---- [ 335.863242][ T8813] lock(&q->q_usage_counter(io)#24); [ 335.868631][ T8813] lock(fs_reclaim); [ 335.875137][ T8813] lock(&q->q_usage_counter(io)#24); [ 335.883045][ T8813] rlock(&root->kernfs_iattr_rwsem); [ 335.888420][ T8813] [ 335.888420][ T8813] *** DEADLOCK *** [ 335.888420][ T8813] [ 335.896547][ T8813] 3 locks held by syz.1.810/8813: [ 335.901563][ T8813] #0: ffff8880258e8448 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 335.911802][ T8813] #1: ffff888025802680 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 335.923518][ T8813] #2: ffff8880258026b8 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 335.935421][ T8813] [ 335.935421][ T8813] stack backtrace: [ 335.941301][ T8813] CPU: 0 UID: 0 PID: 8813 Comm: syz.1.810 Not tainted syzkaller #0 PREEMPT(full) [ 335.941341][ T8813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 335.941361][ T8813] Call Trace: [ 335.941373][ T8813] [ 335.941386][ T8813] dump_stack_lvl+0x116/0x1f0 [ 335.941441][ T8813] print_circular_bug+0x275/0x340 [ 335.941483][ T8813] check_noncircular+0x146/0x160 [ 335.941527][ T8813] __lock_acquire+0x1669/0x2890 [ 335.941581][ T8813] lock_acquire+0x179/0x330 [ 335.941620][ T8813] ? kernfs_iop_getattr+0x9c/0xf0 [ 335.941654][ T8813] ? __pfx___might_resched+0x10/0x10 [ 335.941690][ T8813] down_read+0x9b/0x460 [ 335.941722][ T8813] ? kernfs_iop_getattr+0x9c/0xf0 [ 335.941753][ T8813] ? find_held_lock+0x2b/0x80 [ 335.941804][ T8813] ? __pfx_down_read+0x10/0x10 [ 335.941837][ T8813] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.941886][ T8813] kernfs_iop_getattr+0x9c/0xf0 [ 335.941920][ T8813] vfs_getattr_nosec+0x2ac/0x430 [ 335.941966][ T8813] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 335.942001][ T8813] vfs_getattr+0x4a/0x60 [ 335.942051][ T8813] loop_query_min_dio_size.isra.0+0x117/0x250 [ 335.942109][ T8813] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 335.942164][ T8813] ? mark_held_locks+0x49/0x80 [ 335.942218][ T8813] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.942258][ T8813] ? blk_freeze_queue_start+0xec/0x140 [ 335.942299][ T8813] lo_ioctl+0x1439/0x1cb0 [ 335.942333][ T8813] ? __pfx_lo_ioctl+0x10/0x10 [ 335.942361][ T8813] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.942403][ T8813] ? kasan_quarantine_put+0x10a/0x240 [ 335.942435][ T8813] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.942475][ T8813] ? lockdep_hardirqs_on+0x7c/0x110 [ 335.942527][ T8813] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.942568][ T8813] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.942608][ T8813] ? blk_get_meta_cap+0xbc/0x700 [ 335.942647][ T8813] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.942688][ T8813] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 335.942728][ T8813] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.942774][ T8813] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.942814][ T8813] ? blkdev_common_ioctl+0x190/0x2b80 [ 335.942858][ T8813] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 335.942904][ T8813] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.942945][ T8813] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 335.942984][ T8813] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.943030][ T8813] ? do_vfs_ioctl+0x128/0x14f0 [ 335.943062][ T8813] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 335.943100][ T8813] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.943141][ T8813] ? find_held_lock+0x2b/0x80 [ 335.943191][ T8813] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.943233][ T8813] ? __pfx_lo_ioctl+0x10/0x10 [ 335.943264][ T8813] blkdev_ioctl+0x5b0/0x6e0 [ 335.943302][ T8813] ? __pfx_blkdev_ioctl+0x10/0x10 [ 335.943345][ T8813] ? __pfx_blkdev_ioctl+0x10/0x10 [ 335.943385][ T8813] __x64_sys_ioctl+0x18e/0x210 [ 335.943418][ T8813] do_syscall_64+0xcd/0xf80 [ 335.943472][ T8813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.943506][ T8813] RIP: 0033:0x7f1c4fd8f749 [ 335.943532][ T8813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.943566][ T8813] RSP: 002b:00007f1c50bcb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 335.943597][ T8813] RAX: ffffffffffffffda RBX: 00007f1c4ffe6090 RCX: 00007f1c4fd8f749 [ 335.943620][ T8813] RDX: 000000000000000b RSI: 0000000000004c06 RDI: 0000000000000009 [ 335.943640][ T8813] RBP: 00007f1c4fe13f91 R08: 0000000000000000 R09: 0000000000000000 [ 335.943662][ T8813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.943682][ T8813] R13: 00007f1c4ffe6128 R14: 00007f1c4ffe6090 R15: 00007ffd8b1c0da8 [ 335.943718][ T8813] [ 336.414653][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 336.424274][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 336.465658][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 336.475296][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 336.483393][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 336.492991][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 336.529511][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 336.539156][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 336.547148][ T8808] ldm_validate_partition_table(): Disk read failed. [ 336.554973][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 336.564579][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 336.599574][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 336.609218][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 336.634515][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 336.644114][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 336.667570][ T8808] Dev loop7: unable to read RDB block 0 [ 336.674031][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 336.674053][ T31] audit: type=1326 audit(1766815800.071:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8826 comm="syz.5.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc934f8f749 code=0x7ffc0000 [ 336.720831][ T8808] loop7: unable to read partition table [ 336.746855][ T8808] loop7: partition table beyond EOD, truncated [ 336.756236][ T31] audit: type=1326 audit(1766815800.101:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8826 comm="syz.5.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc934f8f749 code=0x7ffc0000 [ 336.789282][ T8808] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 336.820049][ T8125] ldm_validate_partition_table(): Disk read failed. [ 336.841621][ T31] audit: type=1326 audit(1766815800.101:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8826 comm="syz.5.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc934f8f749 code=0x7ffc0000 [ 336.863253][ T8125] Dev loop7: unable to read RDB block 0 [ 336.870360][ T8125] loop7: unable to read partition table [ 336.901946][ T8125] loop7: partition table beyond EOD, truncated [ 336.909764][ T8813] ldm_validate_partition_table(): Disk read failed. [ 336.941860][ T8813] Dev loop7: unable to read RDB block 0 [ 336.949640][ T8813] loop7: unable to read partition table [ 336.973858][ T8813] loop7: partition table beyond EOD, truncated [ 336.980049][ T8813] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 337.651289][ T6046] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.664496][ T6046] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.825354][ T6046] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.836419][ T6046] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.929899][ T6046] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.953233][ T6046] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.021380][ T6046] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.051863][ T6046] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.272901][ T6046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.283203][ T6046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.293347][ T6046] bond0 (unregistering): Released all slaves [ 338.517096][ T6046] hsr_slave_0: left promiscuous mode [ 338.526405][ T6046] hsr_slave_1: left promiscuous mode [ 338.535951][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.543789][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.555907][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.563769][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.577250][ T6046] veth1_macvtap: left promiscuous mode [ 338.584117][ T6046] veth0_macvtap: left promiscuous mode [ 338.589694][ T6046] veth1_vlan: left promiscuous mode [ 338.597534][ T6046] veth0_vlan: left promiscuous mode [ 339.177786][ T6046] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.236969][ T6046] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.290460][ T6046] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.354924][ T6046] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.465589][ T6046] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.530797][ T6046] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.627489][ T6046] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.687888][ T6046] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.777505][ T6046] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.818167][ T6046] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.877866][ T6046] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.927249][ T6046] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.041153][ T6046] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.093949][ T6046] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.140833][ T6046] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.207569][ T6046] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.306884][ T6046] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.362155][ T6046] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.440175][ T6046] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.479211][ T6046] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.580191][ T6046] bridge_slave_1: left allmulticast mode [ 340.586762][ T6046] bridge_slave_1: left promiscuous mode [ 340.593060][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.603835][ T6046] bridge_slave_0: left allmulticast mode [ 340.609472][ T6046] bridge_slave_0: left promiscuous mode [ 340.615318][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.624895][ T6046] bridge_slave_1: left allmulticast mode [ 340.630517][ T6046] bridge_slave_1: left promiscuous mode [ 340.636394][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.644746][ T6046] bridge_slave_0: left allmulticast mode [ 340.650376][ T6046] bridge_slave_0: left promiscuous mode [ 340.656242][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.669134][ T6046] bridge_slave_1: left allmulticast mode [ 340.674886][ T6046] bridge_slave_1: left promiscuous mode [ 340.680629][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.691492][ T6046] bridge_slave_0: left allmulticast mode [ 340.697242][ T6046] bridge_slave_0: left promiscuous mode [ 340.704047][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.713636][ T6046] bridge_slave_1: left allmulticast mode [ 340.719257][ T6046] bridge_slave_1: left promiscuous mode [ 340.725080][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.733484][ T6046] bridge_slave_0: left allmulticast mode [ 340.739109][ T6046] bridge_slave_0: left promiscuous mode [ 340.744875][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.946897][ T6046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.960123][ T6046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.969757][ T6046] bond0 (unregistering): Released all slaves [ 341.217914][ T6046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.227928][ T6046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.237660][ T6046] bond0 (unregistering): Released all slaves [ 341.366023][ T6046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.379167][ T6046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.388885][ T6046] bond0 (unregistering): Released all slaves [ 341.402746][ T6046] bond1 (unregistering): (slave veth3): Releasing active interface [ 341.410639][ T6046] vlan2: entered promiscuous mode [ 341.417485][ T6046] bond1 (unregistering): (slave vlan2): Releasing active interface [ 341.427620][ T6046] bond1 (unregistering): Released all slaves [ 341.496459][ T6046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.506473][ T6046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.516639][ T6046] bond0 (unregistering): Released all slaves [ 341.600438][ T6046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.610434][ T6046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.620424][ T6046] bond0 (unregistering): Released all slaves [ 342.209189][ T6046] hsr_slave_0: left promiscuous mode [ 342.220579][ T6046] hsr_slave_1: left promiscuous mode [ 342.234483][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.247205][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.258280][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.265785][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.311128][ T6046] hsr_slave_0: left promiscuous mode [ 342.317986][ T6046] hsr_slave_1: left promiscuous mode [ 342.323818][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.331197][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.341749][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.349162][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.360307][ T6046] hsr_slave_0: left promiscuous mode [ 342.366307][ T6046] hsr_slave_1: left promiscuous mode [ 342.373458][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.380837][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.388544][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.396519][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.405405][ T6046] hsr_slave_0: left promiscuous mode [ 342.411322][ T6046] hsr_slave_1: left promiscuous mode [ 342.420497][ T6046] hsr_slave_0: left promiscuous mode [ 342.426497][ T6046] hsr_slave_1: left promiscuous mode [ 342.432655][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.440033][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.452859][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.461632][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.491076][ T6046] veth1_macvtap: left promiscuous mode [ 342.500863][ T6046] veth0_macvtap: left promiscuous mode [ 342.506501][ T6046] veth1_vlan: left promiscuous mode [ 342.512246][ T6046] veth0_vlan: left promiscuous mode [ 342.518309][ T6046] veth1_macvtap: left promiscuous mode [ 342.524983][ T6046] veth0_macvtap: left promiscuous mode [ 342.530567][ T6046] veth1_vlan: left promiscuous mode [ 342.535965][ T6046] veth0_vlan: left promiscuous mode [ 342.542410][ T6046] veth1_macvtap: left promiscuous mode [ 342.547918][ T6046] veth0_macvtap: left promiscuous mode [ 342.553557][ T6046] veth1_vlan: left promiscuous mode [ 342.558835][ T6046] veth0_vlan: left promiscuous mode [ 342.565427][ T6046] veth1_macvtap: left promiscuous mode [ 342.570907][ T6046] veth0_macvtap: left promiscuous mode [ 342.583231][ T6046] veth1_macvtap: left promiscuous mode [ 342.588711][ T6046] veth0_macvtap: left promiscuous mode [ 342.594447][ T6046] veth1_vlan: left promiscuous mode [ 342.599699][ T6046] veth0_vlan: left promiscuous mode [ 342.918679][ T6046] team0 (unregistering): Port device team_slave_1 removed [ 342.938182][ T6046] team0 (unregistering): Port device team_slave_0 removed [ 343.109676][ T6046] team0 (unregistering): Port device team_slave_1 removed [ 343.124267][ T6046] team0 (unregistering): Port device team_slave_0 removed [ 343.325527][ T6046] team0 (unregistering): Port device team_slave_1 removed [ 343.346383][ T6046] team0 (unregistering): Port device team_slave_0 removed [ 343.505566][ T6046] team0 (unregistering): Port device team_slave_0 removed [ 343.642236][ T6046] team0 (unregistering): Port device team_slave_1 removed [ 343.663021][ T6046] team0 (unregistering): Port device team_slave_0 removed