last executing test programs: 3.125435364s ago: executing program 0 (id=207): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000005b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005c00)={0x58, 0x2, 0x6, 0x301, 0xe4340000, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd0}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 3.039968451s ago: executing program 4 (id=208): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000300)={0x0, &(0x7f0000000340)}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000002c0)={0x0, 'dummy0\x00', 0x3}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) socket$inet6(0xa, 0x1, 0x8010000000000084) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x28942, 0x63) write$P9_RLERRORu(r3, &(0x7f0000000300)=ANY=[], 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=[0x3], 0x0, 0x0, 0x1, 0x1, r2}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0xa, 0x801, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r6 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13500}, &(0x7f0000000240), &(0x7f0000000480), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x21, &(0x7f0000000440), 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@fwd={0x6}, @func={0x10, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x0, 0x61, 0x0, 0x2e, 0x0, 0x30]}}, &(0x7f0000000100)=""/132, 0x38, 0x84, 0x0, 0x645, 0x10000}, 0x28) socket(0x2, 0x3, 0x6) 2.894359202s ago: executing program 0 (id=210): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x220081e, &(0x7f00000001c0)={[{@nodelalloc}, {@nombcache}, {@auto_da_alloc}]}, 0x1, 0x501, &(0x7f0000001100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r0, 0x0, 0x37e9, 0x2f92) 2.714766893s ago: executing program 4 (id=212): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x68}, 0x80) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0xa97, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x4, 0x0, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9fc4, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x1e8}}], 0x1, 0x0, 0x0) 2.621875511s ago: executing program 0 (id=214): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) 2.012225793s ago: executing program 4 (id=218): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x0, 0x21}}]}}]}, 0x44}}, 0x8880) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x200, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1d0, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x200}}, 0x0) 1.825861855s ago: executing program 3 (id=220): socket(0x1e, 0x5, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.628022378s ago: executing program 2 (id=222): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000300)={0x0, &(0x7f0000000340)}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000002c0)={0x0, 'dummy0\x00', 0x3}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) socket$inet6(0xa, 0x1, 0x8010000000000084) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x28942, 0x63) write$P9_RLERRORu(r3, &(0x7f0000000300)=ANY=[], 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=[0x3], 0x0, 0x0, 0x1, 0x1, r2}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0xa, 0x801, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r6 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13500}, &(0x7f0000000240), &(0x7f0000000480), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x21, &(0x7f0000000440), 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@fwd={0x6}, @func={0x10, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x0, 0x61, 0x0, 0x2e, 0x0, 0x30]}}, &(0x7f0000000100)=""/132, 0x38, 0x84, 0x0, 0x645, 0x10000}, 0x28) socket(0x2, 0x3, 0x6) 1.612363556s ago: executing program 4 (id=223): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) pwrite64(r0, 0x0, 0x0, 0xe7c) 1.469403075s ago: executing program 0 (id=225): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000080), &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000001c0), 0x0, r0) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, r0) 1.402412022s ago: executing program 3 (id=226): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0x0, 0x0) 1.262235293s ago: executing program 4 (id=227): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x4000) 1.203845425s ago: executing program 1 (id=228): mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000001080)=ANY=[@ANYBLOB='mpo']) 1.185843791s ago: executing program 0 (id=229): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000240)="f2", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x8b25714e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x24d2, &(0x7f0000000040)={0x0, 0xc8e2, 0xc000, 0xfffffffe, 0x20002f5}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.135996476s ago: executing program 3 (id=230): sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x220081e, &(0x7f00000001c0)={[{@nodelalloc}, {@nombcache}, {@auto_da_alloc}]}, 0x1, 0x501, &(0x7f0000001100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r0, 0x0, 0x37e9, 0x2f92) 1.0329707s ago: executing program 1 (id=231): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)={0x5c, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x30, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x5c}}, 0x0) 1.024669782s ago: executing program 2 (id=232): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 744.78308ms ago: executing program 2 (id=233): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200008, 0x8, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 728.27012ms ago: executing program 1 (id=234): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/e1000e/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='8086 100e ffffffff ff', 0x15) 706.073375ms ago: executing program 3 (id=235): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x5, 0x46d, 0xb012}}, 0x118) read(r0, 0x0, 0x0) write$UHID_INPUT2(r0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17", 0x2b}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 582.163787ms ago: executing program 2 (id=236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) 473.841069ms ago: executing program 1 (id=237): r0 = socket(0x1, 0x2, 0x0) sendto$packet(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) 325.345495ms ago: executing program 3 (id=238): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40000) 286.908845ms ago: executing program 1 (id=239): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000080), &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000001c0), 0x0, r0) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, r0) 277.652709ms ago: executing program 2 (id=240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) 178.263771ms ago: executing program 4 (id=241): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180), 0x55) 169.822502ms ago: executing program 0 (id=242): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f00000002c0)) r1 = getpgrp(0x0) r2 = syz_pidfd_open(r1, 0x0) fremovexattr(r2, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00') bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) r3 = io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r3, 0x20, &(0x7f0000000100)={0x1, 0x0, 0x8, 0x0, &(0x7f0000000200)={&(0x7f0000001000)='\x00'/3930, 0xf5a}, &(0x7f0000000300)={&(0x7f0000002000)='\x00'/4096, 0x1000, 0x1}, {}, 0x0, 0x1000}, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r3, 0x24, &(0x7f0000000400), 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) ioctl$XFS_IOC_SWAPEXT(r2, 0xc0c0586d, 0x0) lremovexattr(0x0, 0x0) 96.835958ms ago: executing program 1 (id=243): r0 = socket$netlink(0x10, 0x3, 0x10) unshare(0x20000400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00"/13], 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) ppoll(&(0x7f0000000080)=[{r2, 0x1120}, {r1, 0xa0c0}], 0x2, 0x0, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0xa00, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x44, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 351.48µs ago: executing program 2 (id=244): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)={0x5c, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x30, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x5c}}, 0x0) 0s ago: executing program 3 (id=245): setns(0xc9, 0x0) r0 = socket(0x8, 0x803, 0x0) getsockname$packet(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.170' (ED25519) to the list of known hosts. [ 71.949371][ T5603] cgroup: Unknown subsys name 'net' [ 72.063568][ T5603] cgroup: Unknown subsys name 'cpuset' [ 72.072480][ T5603] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.486519][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.539379][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.549361][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.564372][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.565205][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.565653][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.566221][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.567114][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.568219][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.576693][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.576950][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.581262][ T4935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.583043][ T4935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.585331][ T4935] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.599468][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.624973][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.713242][ T4935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.716208][ T4935] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.716868][ T4935] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.719639][ T4935] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.725302][ T4935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.727341][ T4935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.738961][ T4935] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.746035][ T4935] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.768239][ T4935] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.770910][ T4935] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.421231][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.421413][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.422758][ T5625] bridge_slave_0: entered allmulticast mode [ 79.425223][ T5625] bridge_slave_0: entered promiscuous mode [ 79.477033][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.477863][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.478245][ T5625] bridge_slave_1: entered allmulticast mode [ 79.479909][ T5625] bridge_slave_1: entered promiscuous mode [ 79.526077][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.526244][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.526373][ T5620] bridge_slave_0: entered allmulticast mode [ 79.527998][ T5620] bridge_slave_0: entered promiscuous mode [ 79.576454][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.576551][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.576687][ T5620] bridge_slave_1: entered allmulticast mode [ 79.578325][ T5620] bridge_slave_1: entered promiscuous mode [ 79.597408][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.601231][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.633812][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.641338][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.641578][ T5635] bridge_slave_0: entered allmulticast mode [ 79.643703][ T5635] bridge_slave_0: entered promiscuous mode [ 79.651272][ T5630] Bluetooth: hci1: command tx timeout [ 79.651457][ T4935] Bluetooth: hci2: command tx timeout [ 79.674807][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.686039][ T5625] team0: Port device team_slave_0 added [ 79.697890][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.698048][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.698467][ T5635] bridge_slave_1: entered allmulticast mode [ 79.700756][ T5635] bridge_slave_1: entered promiscuous mode [ 79.731307][ T4935] Bluetooth: hci0: command tx timeout [ 79.732030][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.734302][ T5625] team0: Port device team_slave_1 added [ 79.766975][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.767124][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.767267][ T5633] bridge_slave_0: entered allmulticast mode [ 79.768911][ T5633] bridge_slave_0: entered promiscuous mode [ 79.798738][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.798866][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.799014][ T5619] bridge_slave_0: entered allmulticast mode [ 79.800926][ T5619] bridge_slave_0: entered promiscuous mode [ 79.814607][ T5630] Bluetooth: hci3: command tx timeout [ 79.814841][ T4935] Bluetooth: hci4: command tx timeout [ 79.822133][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.825908][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.858019][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.858175][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.858336][ T5633] bridge_slave_1: entered allmulticast mode [ 79.861773][ T5633] bridge_slave_1: entered promiscuous mode [ 79.878317][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.878332][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.878359][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.883062][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.883077][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.883099][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.883654][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.883750][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.883941][ T5619] bridge_slave_1: entered allmulticast mode [ 79.887082][ T5619] bridge_slave_1: entered promiscuous mode [ 79.922457][ T5620] team0: Port device team_slave_0 added [ 80.007094][ T5635] team0: Port device team_slave_0 added [ 80.019622][ T5620] team0: Port device team_slave_1 added [ 80.051552][ T5635] team0: Port device team_slave_1 added [ 80.055494][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.057258][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.057271][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.057291][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.063030][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.117874][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.117890][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.117912][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.166696][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.179769][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.179801][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.179848][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.182946][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.182962][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.182985][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.214438][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.236548][ T5625] hsr_slave_0: entered promiscuous mode [ 80.238224][ T5625] hsr_slave_1: entered promiscuous mode [ 80.261277][ T5633] team0: Port device team_slave_0 added [ 80.326245][ T5633] team0: Port device team_slave_1 added [ 80.339029][ T5619] team0: Port device team_slave_0 added [ 80.343036][ T5619] team0: Port device team_slave_1 added [ 80.366740][ T5620] hsr_slave_0: entered promiscuous mode [ 80.367706][ T5620] hsr_slave_1: entered promiscuous mode [ 80.368417][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 80.368523][ T5620] Cannot create hsr debugfs directory [ 80.409269][ T5635] hsr_slave_0: entered promiscuous mode [ 80.411378][ T5635] hsr_slave_1: entered promiscuous mode [ 80.412390][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 80.412408][ T5635] Cannot create hsr debugfs directory [ 80.415181][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.415195][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.415213][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.435408][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.435425][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.435445][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.463743][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.463760][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.463781][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.465830][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.465843][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.465878][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.672982][ T5619] hsr_slave_0: entered promiscuous mode [ 80.673963][ T5619] hsr_slave_1: entered promiscuous mode [ 80.674601][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 80.674618][ T5619] Cannot create hsr debugfs directory [ 80.740666][ T5633] hsr_slave_0: entered promiscuous mode [ 80.741726][ T5633] hsr_slave_1: entered promiscuous mode [ 80.742427][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 80.742445][ T5633] Cannot create hsr debugfs directory [ 81.074240][ T5625] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.085739][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.108711][ T5625] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.118786][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.121483][ T5625] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.133244][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.152423][ T5625] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.163716][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.221333][ T5620] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.232579][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.234868][ T5620] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.244832][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.249351][ T5620] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.264014][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.281675][ T5620] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.291206][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.375032][ T5635] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.387006][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.389387][ T5635] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.397138][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.412507][ T5635] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.422592][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.423385][ T5635] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.434961][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.551671][ T5619] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.562030][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.578692][ T5619] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.589089][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.605681][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.606004][ T5619] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.617154][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.618050][ T5619] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.625005][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.718870][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.730922][ T5630] Bluetooth: hci1: command tx timeout [ 81.736512][ T4935] Bluetooth: hci2: command tx timeout [ 81.746749][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.754576][ T5633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.764259][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.775976][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.776128][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.787190][ T5633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.795988][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.796871][ T5633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.805847][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.812902][ T4935] Bluetooth: hci0: command tx timeout [ 81.834026][ T5633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.845253][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.858012][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.858134][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.890580][ T5630] Bluetooth: hci3: command tx timeout [ 81.896118][ T4935] Bluetooth: hci4: command tx timeout [ 81.957319][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.989911][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.990736][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.015504][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.047564][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.047730][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.124746][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.182220][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.182406][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.206154][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.206272][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.328394][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.435220][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.446694][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.504843][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.504966][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.549617][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.549792][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.624016][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.679764][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.679897][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.742800][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.742917][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.068931][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.494665][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.565549][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.737301][ T5620] veth0_vlan: entered promiscuous mode [ 83.754729][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.808318][ T5635] veth0_vlan: entered promiscuous mode [ 83.810568][ T5630] Bluetooth: hci1: command tx timeout [ 83.810678][ T4935] Bluetooth: hci2: command tx timeout [ 83.836110][ T5620] veth1_vlan: entered promiscuous mode [ 83.892926][ T4935] Bluetooth: hci0: command tx timeout [ 83.912844][ T5635] veth1_vlan: entered promiscuous mode [ 83.961603][ T5619] veth0_vlan: entered promiscuous mode [ 83.976208][ T5630] Bluetooth: hci3: command tx timeout [ 83.976306][ T4935] Bluetooth: hci4: command tx timeout [ 83.976652][ T5625] veth0_vlan: entered promiscuous mode [ 83.985471][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.013290][ T5620] veth0_macvtap: entered promiscuous mode [ 84.024295][ T5620] veth1_macvtap: entered promiscuous mode [ 84.032886][ T5619] veth1_vlan: entered promiscuous mode [ 84.059664][ T5625] veth1_vlan: entered promiscuous mode [ 84.096596][ T5635] veth0_macvtap: entered promiscuous mode [ 84.104636][ T5633] veth0_vlan: entered promiscuous mode [ 84.115517][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.125992][ T5635] veth1_macvtap: entered promiscuous mode [ 84.166061][ T5619] veth0_macvtap: entered promiscuous mode [ 84.176054][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.178562][ T5633] veth1_vlan: entered promiscuous mode [ 84.198874][ T5625] veth0_macvtap: entered promiscuous mode [ 84.212411][ T5619] veth1_macvtap: entered promiscuous mode [ 84.225990][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.235697][ T5625] veth1_macvtap: entered promiscuous mode [ 84.263919][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.293282][ T1102] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.293487][ T1102] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.299000][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.335456][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.364896][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.409106][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.437325][ T5633] veth0_macvtap: entered promiscuous mode [ 84.464025][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.464081][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.503702][ T5633] veth1_macvtap: entered promiscuous mode [ 84.634300][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.634338][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.642130][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.679919][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.679966][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.690901][ T1102] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.690947][ T1102] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.690977][ T1102] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.691007][ T1102] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.703338][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.709624][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.709642][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.799906][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.799957][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.801500][ T159] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.801638][ T159] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.801808][ T159] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.801945][ T159] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.869685][ T5620] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.914565][ T151] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.914677][ T151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.914712][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.914725][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.914924][ T151] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.959400][ T151] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.959446][ T151] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.959473][ T151] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.960017][ T151] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.960050][ T151] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.960079][ T151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.960631][ T151] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.074976][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.075019][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.148505][ T5808] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 85.224654][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.224700][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.304363][ T5813] loop1: detected capacity change from 0 to 512 [ 85.318998][ T5813] EXT4-fs: Ignoring removed bh option [ 85.324568][ T5813] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.366325][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.376584][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.376935][ T5813] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.7: inode has both inline data and extents flags [ 85.377111][ T5813] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.390312][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 85.390337][ C1] EXT4-fs (loop1): initial error at time 1786112561: ext4_orphan_get:1399: inode 15 [ 85.390379][ C1] EXT4-fs (loop1): last error at time 1786112561: ext4_orphan_get:1399: inode 15 [ 85.395052][ T5813] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.7: couldn't read orphan inode 15 (err -117) [ 85.395217][ T5813] loop1: lost filesystem error report for type 5 error -117 [ 85.408823][ T5813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.438234][ T5813] EXT4-fs error (device loop1): htree_dirblock_to_tree:1051: inode #2: comm syz.1.7: Directory hole found for htree leaf block 0 [ 85.605175][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.628423][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.628464][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.891669][ T5630] Bluetooth: hci1: command tx timeout [ 85.897705][ T4935] Bluetooth: hci2: command tx timeout [ 85.970493][ T4935] Bluetooth: hci0: command tx timeout [ 86.048126][ T9] kernel write not supported for file /snd/seq (pid: 9 comm: kworker/0:0) [ 86.058736][ T5630] Bluetooth: hci3: command tx timeout [ 86.058781][ T4935] Bluetooth: hci4: command tx timeout [ 86.167579][ T5834] loop1: detected capacity change from 0 to 764 [ 86.229473][ T5834] Symlink component flag not implemented [ 86.229491][ T5834] Symlink component flag not implemented [ 86.262286][ T5837] loop3: detected capacity change from 0 to 128 [ 86.325937][ T30] audit: type=1326 audit(1786112562.676:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz.4.15" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb279e0d9 code=0x7ffc0000 [ 86.326039][ T30] audit: type=1326 audit(1786112562.676:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz.4.15" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb279e0d9 code=0x7ffc0000 [ 86.332965][ T5837] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 86.404075][ T30] audit: type=1326 audit(1786112562.746:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz.4.15" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb279e0d9 code=0x7ffc0000 [ 86.404143][ T30] audit: type=1326 audit(1786112562.746:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz.4.15" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb279e0d9 code=0x7ffc0000 [ 86.404172][ T30] audit: type=1326 audit(1786112562.746:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz.4.15" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f5fb279e0d9 code=0x7ffc0000 [ 86.404198][ T30] audit: type=1326 audit(1786112562.746:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz.4.15" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb279e0d9 code=0x7ffc0000 [ 86.404227][ T30] audit: type=1326 audit(1786112562.756:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz.4.15" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5fb279e0d9 code=0x7ffc0000 [ 86.404260][ T30] audit: type=1326 audit(1786112562.756:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz.4.15" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5fb279e0d9 code=0x7ffc0000 [ 86.410062][ T5842] loop0: detected capacity change from 0 to 1024 [ 86.425537][ T5842] EXT4-fs: Ignoring removed bh option [ 86.434088][ T5837] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.439329][ T5837] ext2 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.486776][ T30] audit: type=1326 audit(1786112562.836:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5844 comm="syz.1.17" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c17b9e0d9 code=0x7ffc0000 [ 86.486820][ T30] audit: type=1326 audit(1786112562.836:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5844 comm="syz.1.17" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c17b9e0d9 code=0x7ffc0000 [ 86.595659][ T5842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.862957][ T5619] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.974317][ T5633] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.998918][ T25] cfg80211: failed to load regulatory.db [ 87.176265][ T5855] Illegal XDP return value 4294967274 on prog (id 3) dev syz_tun, expect packet loss! [ 87.817989][ T5873] loop2: detected capacity change from 0 to 1024 [ 87.918752][ T5873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.189597][ T5635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.839653][ T5902] loop4: detected capacity change from 0 to 1024 [ 88.911131][ T5902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.927650][ T5907] loop3: detected capacity change from 0 to 256 [ 88.943710][ T5907] ======================================================= [ 88.943710][ T5907] WARNING: The mand mount option has been deprecated and [ 88.943710][ T5907] and is ignored by this kernel. Remove the mand [ 88.943710][ T5907] option from the mount to silence this warning. [ 88.943710][ T5907] ======================================================= [ 88.999773][ T5908] netlink: 'syz.0.40': attribute type 4 has an invalid length. [ 89.006529][ T5908] netlink: 'syz.0.40': attribute type 4 has an invalid length. [ 89.143909][ T5907] syz.3.42: attempt to access beyond end of device [ 89.143909][ T5907] loop3: rw=8912896, sector=1768, nr_sectors = 4 limit=256 [ 89.161273][ T5907] syz.3.42: attempt to access beyond end of device [ 89.161273][ T5907] loop3: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 89.207669][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.264884][ T5912] netlink: 120 bytes leftover after parsing attributes in process `syz.2.43'. [ 90.520711][ T5943] netlink: 16 bytes leftover after parsing attributes in process `syz.0.56'. [ 90.672451][ T5944] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 92.080610][ T5981] netlink: 'syz.3.67': attribute type 4 has an invalid length. [ 92.138074][ T5981] netlink: 'syz.3.67': attribute type 4 has an invalid length. [ 92.186125][ T5984] loop0: detected capacity change from 0 to 1024 [ 92.235099][ T5981] netlink: 'syz.3.67': attribute type 4 has an invalid length. [ 92.359471][ T5984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.448343][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 92.448394][ T30] audit: type=1800 audit(1786112568.796:26): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.68" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 92.679265][ T5633] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.068060][ T6017] vlan2: entered promiscuous mode [ 94.068110][ T6017] bond0: entered promiscuous mode [ 94.075183][ T6017] bond_slave_0: entered promiscuous mode [ 94.075393][ T6017] bond_slave_1: entered promiscuous mode [ 94.095965][ T30] audit: type=1800 audit(1786112570.446:27): pid=6019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.79" name="file1" dev="tmpfs" ino=126 res=0 errno=0 [ 94.440572][ T5846] Set syz1 is full, maxelem 65536 reached [ 94.748728][ T6044] loop1: detected capacity change from 0 to 512 [ 94.840741][ T6041] fuse: Bad value for 'fd' [ 94.882172][ T6044] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 94.949163][ T6044] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 1024: comm syz.1.89: invalid block [ 94.963903][ T6044] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 95.010362][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 95.010398][ C1] EXT4-fs (loop1): initial error at time 1786112571: ext4_get_branch:178: inode 13: block 1024 [ 95.010442][ C1] EXT4-fs (loop1): last error at time 1786112571: ext4_get_branch:178: inode 13: block 1024 [ 95.071422][ T6044] EXT4-fs (loop1): Remounting filesystem read-only [ 95.086278][ T6044] EXT4-fs (loop1): 1 truncate cleaned up [ 95.102802][ T6044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.169320][ T6044] EXT4-fs (loop1): shut down requested (2) [ 95.267970][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.338459][ T6060] loop1: detected capacity change from 0 to 128 [ 95.774254][ T6075] Zero length message leads to an empty skb [ 96.887378][ T6110] netlink: 'syz.1.110': attribute type 4 has an invalid length. [ 96.944782][ T6115] netlink: 'syz.1.110': attribute type 4 has an invalid length. [ 96.996497][ T6110] netlink: 'syz.1.110': attribute type 4 has an invalid length. [ 97.427948][ T6131] overlayfs: missing 'lowerdir' [ 97.858044][ T6156] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 98.623408][ T6166] loop3: detected capacity change from 0 to 512 [ 98.671281][ T6166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.671424][ T6166] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.756031][ T6173] fuse: fd is not a fuse device [ 98.765489][ T6173] overlayfs: missing 'lowerdir' [ 98.800700][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.253243][ T6192] netlink: 120 bytes leftover after parsing attributes in process `syz.0.139'. [ 99.457059][ T6198] netlink: 'syz.2.141': attribute type 4 has an invalid length. [ 99.500956][ T6198] netlink: 'syz.2.141': attribute type 4 has an invalid length. [ 99.515862][ T6198] netlink: 'syz.2.141': attribute type 4 has an invalid length. [ 100.111461][ T6222] loop1: detected capacity change from 0 to 512 [ 100.207887][ T6222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.207999][ T6222] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.379517][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.601661][ T6237] netlink: 24 bytes leftover after parsing attributes in process `syz.0.159'. [ 100.663542][ T6241] MTRR 1 not used [ 101.931825][ T6262] netlink: 28 bytes leftover after parsing attributes in process `syz.4.171'. [ 102.332591][ T5728] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.504164][ T5728] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 102.516465][ T5728] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.516518][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.725730][ T5728] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 102.879229][ T6288] loop1: detected capacity change from 0 to 512 [ 102.960161][ T6288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.972203][ T6297] syz.2.183 uses obsolete (PF_INET,SOCK_PACKET) [ 102.981096][ T6288] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.076844][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.669951][ T6328] loop2: detected capacity change from 0 to 1024 [ 103.705342][ T6328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.799302][ T5635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.922112][ T6341] loop2: detected capacity change from 0 to 128 [ 104.149040][ T6341] syz.2.197: attempt to access beyond end of device [ 104.149040][ T6341] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 104.184349][ T6340] syz.2.197: attempt to access beyond end of device [ 104.184349][ T6340] loop2: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 104.611766][ T5736] usb 1-1: USB disconnect, device number 2 [ 105.029637][ T6375] loop0: detected capacity change from 0 to 512 [ 105.062814][ T6375] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.085747][ T6375] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.134191][ T6377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.134228][ T6377] IPv6: NLM_F_CREATE should be set when creating new route [ 105.247600][ T5633] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.471006][ T6395] capability: warning: `syz.3.215' uses 32-bit capabilities (legacy support in use) [ 105.482258][ T6395] program syz.3.215 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.545480][ T6377] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.547161][ T6377] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.774271][ T6377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.792665][ T6377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.183556][ T6421] netlink: 'syz.1.221': attribute type 4 has an invalid length. [ 106.245637][ T151] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.248609][ T151] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.248649][ T151] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.248678][ T151] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.258428][ T6418] netlink: 'syz.1.221': attribute type 4 has an invalid length. [ 106.737627][ T6448] tmpfs: Unknown parameter 'mpo' [ 106.872651][ T6453] loop3: detected capacity change from 0 to 512 [ 106.940955][ T6453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.957228][ T6453] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.157422][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.362648][ T6474] netlink: 'syz.3.235': attribute type 4 has an invalid length. [ 107.422465][ T6474] netlink: 'syz.3.235': attribute type 4 has an invalid length. [ 107.797395][ T6493] ------------[ cut here ]------------ [ 107.797440][ T6493] refcount_t: decrement hit 0; leaking memory. [ 107.798068][ T6493] WARNING: lib/refcount.c:31 at refcount_warn_saturate+0x70/0x110, CPU#1: syz.0.242/6493 [ 107.819884][ T6493] Modules linked in: [ 107.826147][ T6493] CPU: 1 UID: 0 PID: 6493 Comm: syz.0.242 Not tainted syzkaller #0 PREEMPT(full) [ 107.835564][ T6493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.846856][ T6493] RIP: 0010:refcount_warn_saturate+0x70/0x110 [ 107.853257][ T6493] Code: c6 c0 fe 36 8f e8 90 e5 ee fc 83 fb 01 7e 22 83 fb 02 74 39 83 fb 03 74 47 83 fb 04 75 68 e8 f7 df ee fc 48 8d 3d b0 16 8b 0b <67> 48 0f b9 3a eb 66 85 db 74 3e 83 fb 01 75 4c e8 db df ee fc 48 [ 107.874601][ T6493] RSP: 0018:ffffc9000cd9f8c8 EFLAGS: 00010287 [ 107.881159][ T6493] RAX: ffffffff84d8a429 RBX: 0000000000000004 RCX: 0000000000080000 [ 107.889170][ T6493] RDX: ffffc90004789000 RSI: 000000000000015f RDI: ffffffff9063bae0 [ 107.897569][ T6493] RBP: ffffc9000cd9fa10 R08: ffff888027ae9f40 R09: 0000000000000005 [ 107.905894][ T6493] R10: 0000000000000004 R11: 0000000000000002 R12: ffff888033a0e700 [ 107.914048][ T6493] R13: dffffc0000000000 R14: ffff888033a0e744 R15: 0000000000000001 [ 107.922091][ T6493] FS: 00007fec2274b6c0(0000) GS:ffff888125012000(0000) knlGS:0000000000000000 [ 107.931101][ T6493] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.937704][ T6493] CR2: 0000200000002020 CR3: 0000000077a66000 CR4: 00000000003526f0 [ 107.945839][ T6493] Call Trace: [ 107.949153][ T6493] [ 107.952149][ T6493] ref_tracker_free+0x706/0x830 [ 107.957038][ T6493] ? __pfx_ref_tracker_free+0x10/0x10 [ 107.962512][ T6493] ? __mutex_unlock_slowpath+0x731/0x900 [ 107.968187][ T6493] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 107.974325][ T6493] ? zcrx_unregister_user+0x11e/0x430 [ 107.980088][ T6493] ? __local_bh_enable_ip+0xd0/0x130 [ 107.985824][ T6493] zcrx_unregister_user+0x2d8/0x430 [ 107.991158][ T6493] ? __pfx_zcrx_unregister_user+0x10/0x10 [ 107.996932][ T6493] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 108.003000][ T6493] ? _raw_spin_unlock+0x28/0x50 [ 108.007886][ T6493] ? xa_erase+0xc6/0xf0 [ 108.012120][ T6493] io_register_zcrx+0x875/0xc00 [ 108.017046][ T6493] ? __pfx_io_register_zcrx+0x10/0x10 [ 108.022550][ T6493] ? __mutex_lock+0x30d/0x1550 [ 108.027376][ T6493] ? __pfx___mutex_lock+0x10/0x10 [ 108.032490][ T6493] ? __fget_files+0x3a2/0x420 [ 108.037210][ T6493] ? __fget_files+0x2a/0x420 [ 108.041895][ T6493] __se_sys_io_uring_register+0xc23/0x1ab0 [ 108.047747][ T6493] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 108.054537][ T6493] ? rcu_is_watching+0x15/0xb0 [ 108.059363][ T6493] do_syscall_64+0x166/0x510 [ 108.064029][ T6493] ? trace_irq_disable+0x3b/0x140 [ 108.069083][ T6493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.075229][ T6493] ? clear_bhb_loop+0x40/0x90 [ 108.079942][ T6493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.086239][ T6493] RIP: 0033:0x7fec2179e0d9 [ 108.091015][ T6493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.110714][ T6493] RSP: 002b:00007fec2274b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 108.119157][ T6493] RAX: ffffffffffffffda RBX: 00007fec21a25fa0 RCX: 00007fec2179e0d9 [ 108.127219][ T6493] RDX: 0000200000000100 RSI: 0000000000000020 RDI: 0000000000000005 [ 108.135521][ T6493] RBP: 00007fec21835024 R08: 0000000000000000 R09: 0000000000000000 [ 108.144051][ T6493] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 108.152098][ T6493] R13: 00007fec21a26038 R14: 00007fec21a25fa0 R15: 00007ffeea277808 [ 108.160168][ T6493] [ 108.163221][ T6493] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 108.170517][ T6493] CPU: 1 UID: 0 PID: 6493 Comm: syz.0.242 Not tainted syzkaller #0 PREEMPT(full) [ 108.179737][ T6493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.189819][ T6493] Call Trace: [ 108.193124][ T6493] [ 108.196077][ T6493] vpanic+0x56c/0xa60 [ 108.200073][ T6493] ? __pfx__printk+0x10/0x10 [ 108.204684][ T6493] ? __pfx_vpanic+0x10/0x10 [ 108.209215][ T6493] ? is_bpf_text_address+0x292/0x2b0 [ 108.214581][ T6493] ? is_bpf_text_address+0x26/0x2b0 [ 108.219813][ T6493] panic+0xc5/0xd0 [ 108.223569][ T6493] ? __pfx_panic+0x10/0x10 [ 108.228061][ T6493] __warn+0x315/0x4c0 [ 108.232061][ T6493] ? refcount_warn_saturate+0x70/0x110 [ 108.237543][ T6493] ? refcount_warn_saturate+0x70/0x110 [ 108.243029][ T6493] __report_bug+0x276/0x570 [ 108.247565][ T6493] ? refcount_warn_saturate+0x70/0x110 [ 108.253054][ T6493] ? __pfx___report_bug+0x10/0x10 [ 108.258123][ T6493] report_bug_entry+0x19a/0x290 [ 108.263008][ T6493] ? refcount_warn_saturate+0x70/0x110 [ 108.268494][ T6493] ? refcount_warn_saturate+0x75/0x110 [ 108.273981][ T6493] handle_bug+0xce/0x200 [ 108.278253][ T6493] exc_invalid_op+0x1a/0x50 [ 108.282830][ T6493] asm_exc_invalid_op+0x1a/0x20 [ 108.287734][ T6493] RIP: 0010:refcount_warn_saturate+0x70/0x110 [ 108.293826][ T6493] Code: c6 c0 fe 36 8f e8 90 e5 ee fc 83 fb 01 7e 22 83 fb 02 74 39 83 fb 03 74 47 83 fb 04 75 68 e8 f7 df ee fc 48 8d 3d b0 16 8b 0b <67> 48 0f b9 3a eb 66 85 db 74 3e 83 fb 01 75 4c e8 db df ee fc 48 [ 108.313580][ T6493] RSP: 0018:ffffc9000cd9f8c8 EFLAGS: 00010287 [ 108.319666][ T6493] RAX: ffffffff84d8a429 RBX: 0000000000000004 RCX: 0000000000080000 [ 108.327654][ T6493] RDX: ffffc90004789000 RSI: 000000000000015f RDI: ffffffff9063bae0 [ 108.335650][ T6493] RBP: ffffc9000cd9fa10 R08: ffff888027ae9f40 R09: 0000000000000005 [ 108.343644][ T6493] R10: 0000000000000004 R11: 0000000000000002 R12: ffff888033a0e700 [ 108.351629][ T6493] R13: dffffc0000000000 R14: ffff888033a0e744 R15: 0000000000000001 [ 108.359641][ T6493] ? refcount_warn_saturate+0x69/0x110 [ 108.365154][ T6493] ? refcount_warn_saturate+0x69/0x110 [ 108.370637][ T6493] ref_tracker_free+0x706/0x830 [ 108.375507][ T6493] ? __pfx_ref_tracker_free+0x10/0x10 [ 108.380878][ T6493] ? __mutex_unlock_slowpath+0x731/0x900 [ 108.386521][ T6493] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 108.392508][ T6493] ? zcrx_unregister_user+0x11e/0x430 [ 108.397885][ T6493] ? __local_bh_enable_ip+0xd0/0x130 [ 108.403447][ T6493] zcrx_unregister_user+0x2d8/0x430 [ 108.408652][ T6493] ? __pfx_zcrx_unregister_user+0x10/0x10 [ 108.414372][ T6493] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 108.420381][ T6493] ? _raw_spin_unlock+0x28/0x50 [ 108.425230][ T6493] ? xa_erase+0xc6/0xf0 [ 108.429408][ T6493] io_register_zcrx+0x875/0xc00 [ 108.434287][ T6493] ? __pfx_io_register_zcrx+0x10/0x10 [ 108.439680][ T6493] ? __mutex_lock+0x30d/0x1550 [ 108.444470][ T6493] ? __pfx___mutex_lock+0x10/0x10 [ 108.449526][ T6493] ? __fget_files+0x3a2/0x420 [ 108.454217][ T6493] ? __fget_files+0x2a/0x420 [ 108.458824][ T6493] __se_sys_io_uring_register+0xc23/0x1ab0 [ 108.464667][ T6493] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 108.470951][ T6493] ? rcu_is_watching+0x15/0xb0 [ 108.475755][ T6493] do_syscall_64+0x166/0x510 [ 108.480368][ T6493] ? trace_irq_disable+0x3b/0x140 [ 108.485389][ T6493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.491453][ T6493] ? clear_bhb_loop+0x40/0x90 [ 108.496147][ T6493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.502073][ T6493] RIP: 0033:0x7fec2179e0d9 [ 108.506499][ T6493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.526107][ T6493] RSP: 002b:00007fec2274b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 108.534531][ T6493] RAX: ffffffffffffffda RBX: 00007fec21a25fa0 RCX: 00007fec2179e0d9 [ 108.542497][ T6493] RDX: 0000200000000100 RSI: 0000000000000020 RDI: 0000000000000005 [ 108.550489][ T6493] RBP: 00007fec21835024 R08: 0000000000000000 R09: 0000000000000000 [ 108.558457][ T6493] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 108.566419][ T6493] R13: 00007fec21a26038 R14: 00007fec21a25fa0 R15: 00007ffeea277808 [ 108.574402][ T6493] [ 108.577701][ T6493] Kernel Offset: disabled [ 108.582025][ T6493] Rebooting in 86400 seconds..