last executing test programs: 9.187986045s ago: executing program 3 (id=12): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) 8.992223979s ago: executing program 3 (id=13): bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)={0x118, 0x2, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_SEQ_ADJ_ORIG={0x4c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x75b}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffff5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xc}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x40}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x60}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x80000000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xff59}]}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x30b3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x80}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x48}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_NAT_DST={0x68, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x8004040}, 0x840) 8.802769292s ago: executing program 3 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x75, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) 6.959774031s ago: executing program 1 (id=29): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYBLOB="05b94d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"], 0x50) 6.656251916s ago: executing program 4 (id=33): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="06000000040000"], 0x39) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3", @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x13, &(0x7f00000008c0)=[{}], 0x8, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x50, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000700)=ANY=[@ANYRES32=r7, @ANYBLOB="82490000800005001400fc936ac0347a3931646c51e58ad04be3228c32f0640000000008ba00006cdb3ec97195d906bbbc18bd7e7e0600c3b7927589f69f49"], 0x34}, 0x1, 0x0, 0x0, 0x20000c10}, 0x8000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r9) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="01002bbd7000fddbdf230800000008000300", @ANYRES32=r12], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) vmsplice(r5, 0x0, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r13 = fsmount(r2, 0x0, 0x0) openat$cgroup_procs(r13, 0x0, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r13, 0x4018620d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setrlimit(0x40000000000008, 0x0) r14 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r14, 0x1, 0x3c, 0x0, 0x0) sendmmsg$inet(r14, 0x0, 0x0, 0x4000804) 6.615763901s ago: executing program 1 (id=34): socket$inet(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf6512", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 6.246882554s ago: executing program 2 (id=38): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 6.004165805s ago: executing program 1 (id=41): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xd72, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 6.003922473s ago: executing program 4 (id=42): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) gettid() r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read$qrtrtun(r3, 0x0, 0xeffd) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f0000000200)=[{r0, 0x8107}, {r1, 0xa1f3}, {r2, 0x4000}], 0x3, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) epoll_wait(r4, &(0x7f0000000340)=[{}], 0x1, 0x80000000) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) socket$pppl2tp(0x18, 0x1, 0x1) 5.895733812s ago: executing program 2 (id=43): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x3c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 5.834810457s ago: executing program 0 (id=44): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x30, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c001280"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 5.718612519s ago: executing program 1 (id=46): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYBLOB="05b94d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"], 0x50) 5.631905581s ago: executing program 3 (id=47): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x6c, 0xfa00, {0x2, 0x0, 0x13f, 0xd}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x18, 0x2}, &(0x7f00000004c0)=0x0) timer_settime(r2, 0x1, &(0x7f0000000500)={{0x77359400}, {0x77359400}}, &(0x7f0000000540)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x10}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x7fff, 0x0) splice(r3, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x81362000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x7c528000) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x2, 0x4, 0xe, 0xff, 0x39, 0x1, 0x6}, &(0x7f0000000040)=0x9c) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000001c0)={r7, 0x100, 0x1000, 0x4, 0x6, 0x4}, &(0x7f0000000340)=0x14) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000980)={0x18, 0x0, {0x1, @local, 'geneve1\x00'}}, 0x1e) connect$pppoe(r9, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xbe, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa49ce01b380e66caaaaaaaa08004500001400020000a5119078000000000000004e214e20009c90780100000003000000c54bfe6bddb0a35b8f1fcd3d0418dc12b949b7e5560635b5bf39b5152819a97388e8514f8160134e4b86cd3e9853ff8bb2024c88c1a600b7f9a70565e32cf58050038d629eb196dcd2c40d3753d18268577bf699b4ac2010bd21ec5099fc45596d43ee96eace82320cc38da02897d33fce331822b0bb025143bfb7664f4c76b74a261703c827481abff75b1900"], 0x0) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0xfffffffc) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) setresuid(0x0, r8, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r6, {r8, r11}}, './file0\x00'}) 5.631314422s ago: executing program 2 (id=48): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 5.495777631s ago: executing program 1 (id=49): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) 5.490135022s ago: executing program 0 (id=51): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="796100000000008000007e000000"], 0x14}}, 0x4000054) 5.259554628s ago: executing program 2 (id=52): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYBLOB="0c000180080001000300010020"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x20040884}, 0x40000) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5.232610348s ago: executing program 1 (id=53): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20004014}, 0x0) 5.075892255s ago: executing program 0 (id=55): socket$key(0xf, 0x3, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) r3 = syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100, 0x3, 0x17b}, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x4d10, 0x2, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x6b) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500), 0x106}}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r5, @ANYBLOB="0000000200000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) r8 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r8, &(0x7f0000000540)={0x18, &(0x7f0000000400)={0x20, 0xb, 0xf, {0xf, 0xe, "b2121ab6f6992a150ba0ef1f62"}}, &(0x7f0000000440)={0x0, 0x3, 0x1a, @string={0x1a, 0x3, "6ccbdd6197d583d62645033949e561a4cb332b55901bff6d"}}, &(0x7f0000000480)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3, 0x9, 0xc0}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x64, 0x18, 0x5, 0xff, "487efc48", "49455690"}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x1, 0x1, 0xf6, 0x8, 0x69, 0x6}}}, &(0x7f0000000a80)={0x44, &(0x7f0000000580)={0x0, 0x4fc3af8ec7bc437c, 0xbb, "d4d3293cef64a822f181243b7e6df245182cefb70cd15acb7b0b72e06bd3b1c481c50fd74ab1510f9ca6338b0f69b542e257d375c028e32f81755683a51f1123aef868d17ef9bfce1e21451408bb1a90cf8c495283f5f4c21ad81ae2f8f79d1b1c21ffefcda3b3b784c9a0941cf023b8ec374de4271a2693fc7525e864c506a50b7ab7adc3f62fbb77a483a5664e6dedfe3a533355fd72a82457bd44574996c6af6e4f43302c9ecfb40a25c98e890ff237fc6b4480dfe0cbeb850b"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x1c}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x1e0, 0x11}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0xfff}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000800)={0x40, 0xb, 0x2, 'Sv'}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000880)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x17, 0x6}, &(0x7f0000000940)={0x40, 0x19, 0x2, "a27e"}, &(0x7f0000000980)={0x40, 0x1a, 0x2}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0xe6}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x2}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x600, 0x2002000, {0x0, 0x0, 0x0, r9, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r10 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r11 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r10, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) 4.994175727s ago: executing program 2 (id=56): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a1201, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYBLOB="80f5f69383b8a4b9ce22d4d6d0c94bf12969b9f2aaa593dbbe0e9ff1b25f", @ANYRESHEX=r1], 0x0, 0x804, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20006}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00'}, 0x18) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0xe00, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close(r6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000ff020000bfa3000000000000070300c034ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed000062030000c0ff00001d440000000000007a0a00fe00ffffffc3030000a1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) 4.828361044s ago: executing program 4 (id=58): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xd72, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 4.175561788s ago: executing program 4 (id=61): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="05b94d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"], 0x50) 3.940186345s ago: executing program 4 (id=62): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x75, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) 2.400927865s ago: executing program 5 (id=64): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x50}}, 0x4000008) 2.064411483s ago: executing program 5 (id=65): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20004080) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) r3 = syz_clone(0x4000, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000400)=r3, 0x12) 1.69175238s ago: executing program 0 (id=66): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigpending(0x0, 0x0) 1.406647024s ago: executing program 5 (id=67): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r2, 0x0, 0x8}, 0x18) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000600)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 1.26867163s ago: executing program 0 (id=68): socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ustat(0x9, &(0x7f0000000480)) socket$inet6_sctp(0xa, 0x1, 0x84) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 916.29915ms ago: executing program 5 (id=69): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xff, 0x0, 0x7ffc1ffb}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(0x0, 0x16f17e, 0x88) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r2, 0xee72) 754.10285ms ago: executing program 2 (id=70): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000100)) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read$qrtrtun(r3, 0x0, 0xeffd) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f0000000200)=[{r0, 0x8107}, {r1, 0xa1f3}, {r2, 0x4000}], 0x3, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) epoll_wait(r4, &(0x7f0000000340)=[{}], 0x1, 0x80000000) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) socket$pppl2tp(0x18, 0x1, 0x1) 667.72893ms ago: executing program 5 (id=71): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 638.726267ms ago: executing program 3 (id=72): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendto$inet6(r1, &(0x7f0000000100)="800037e9220ca1ce", 0x8, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x6, @mcast2, 0xf}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100100002e00090027bd70000000000004000000fa001780c4"], 0x110}, 0x1, 0x0, 0x0, 0x42845}, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0x40}, 0x50) close(0x3) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200e8ffffffff06020000f8ffffffb703000008000000b704a29a78295ccadec80000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) 368.635849ms ago: executing program 3 (id=73): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1a08700, &(0x7f0000000700)={[{@nodioread_nolock}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@usrquota}, {@journal_dev={'journal_dev', 0x3d, 0x1}}]}, 0x0, 0x470, &(0x7f0000001040)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x17, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 136.73326ms ago: executing program 5 (id=74): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="05b94d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"], 0x50) 28.397418ms ago: executing program 0 (id=75): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x30, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32, @ANYBLOB="60bc010004a701003c001280"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 0s ago: executing program 4 (id=76): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.145' (ED25519) to the list of known hosts. [ 83.693418][ T5814] cgroup: Unknown subsys name 'net' [ 83.821212][ T5814] cgroup: Unknown subsys name 'cpuset' [ 83.830511][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.374170][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.296950][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.317224][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.324969][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.332798][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.346255][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.353506][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.369572][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.377898][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.387143][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.387159][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.401833][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.410050][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.411661][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.424837][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.427298][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.433025][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.447368][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.454854][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.457589][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.462281][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.476652][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.487085][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.487821][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.496031][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.502258][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.510760][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.526864][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.540068][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.570831][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.578600][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.348751][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 89.513098][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 89.531784][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 89.662774][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 89.761130][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 89.834494][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 89.855068][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.862983][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.871039][ T5827] bridge_slave_0: entered allmulticast mode [ 89.879505][ T5827] bridge_slave_0: entered promiscuous mode [ 89.960561][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.967915][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.975277][ T5827] bridge_slave_1: entered allmulticast mode [ 89.983492][ T5827] bridge_slave_1: entered promiscuous mode [ 90.034062][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.041901][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.050277][ T5832] bridge_slave_0: entered allmulticast mode [ 90.058425][ T5832] bridge_slave_0: entered promiscuous mode [ 90.067560][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.074781][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.082964][ T5832] bridge_slave_1: entered allmulticast mode [ 90.091031][ T5832] bridge_slave_1: entered promiscuous mode [ 90.213221][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.220955][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.228373][ T5835] bridge_slave_0: entered allmulticast mode [ 90.236447][ T5835] bridge_slave_0: entered promiscuous mode [ 90.273115][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.280892][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.289164][ T5826] bridge_slave_0: entered allmulticast mode [ 90.297007][ T5826] bridge_slave_0: entered promiscuous mode [ 90.310138][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.320215][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.327635][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.334850][ T5835] bridge_slave_1: entered allmulticast mode [ 90.343310][ T5835] bridge_slave_1: entered promiscuous mode [ 90.366287][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.375720][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.383029][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.390580][ T5826] bridge_slave_1: entered allmulticast mode [ 90.398546][ T5826] bridge_slave_1: entered promiscuous mode [ 90.409231][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.456229][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.582003][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.591363][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.599181][ T5839] Bluetooth: hci5: command tx timeout [ 90.599308][ T5839] Bluetooth: hci2: command tx timeout [ 90.599397][ T5839] Bluetooth: hci1: command tx timeout [ 90.599474][ T5839] Bluetooth: hci0: command tx timeout [ 90.607203][ T5845] Bluetooth: hci3: command tx timeout [ 90.611336][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.634619][ T5825] bridge_slave_0: entered allmulticast mode [ 90.643556][ T5825] bridge_slave_0: entered promiscuous mode [ 90.676222][ T5845] Bluetooth: hci4: command tx timeout [ 90.690697][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.702764][ T5827] team0: Port device team_slave_0 added [ 90.711884][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.737598][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.744733][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.752997][ T5825] bridge_slave_1: entered allmulticast mode [ 90.760814][ T5825] bridge_slave_1: entered promiscuous mode [ 90.767979][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.775095][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.782511][ T5831] bridge_slave_0: entered allmulticast mode [ 90.790101][ T5831] bridge_slave_0: entered promiscuous mode [ 90.799880][ T5832] team0: Port device team_slave_0 added [ 90.809251][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.820345][ T5827] team0: Port device team_slave_1 added [ 90.871270][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.878534][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.887071][ T5831] bridge_slave_1: entered allmulticast mode [ 90.894869][ T5831] bridge_slave_1: entered promiscuous mode [ 90.903684][ T5832] team0: Port device team_slave_1 added [ 90.941668][ T5835] team0: Port device team_slave_0 added [ 91.009238][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.016264][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.042479][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.056600][ T5835] team0: Port device team_slave_1 added [ 91.065741][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.106959][ T5826] team0: Port device team_slave_0 added [ 91.113686][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.120730][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.147579][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.159813][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.167115][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.193730][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.220645][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.248367][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.259953][ T5826] team0: Port device team_slave_1 added [ 91.281752][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.289359][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.315373][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.366437][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.398910][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.406000][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.432652][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.445581][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.452618][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.479583][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.507841][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.514985][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.541366][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.555424][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.562649][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.589250][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.603474][ T5825] team0: Port device team_slave_0 added [ 91.640522][ T5831] team0: Port device team_slave_0 added [ 91.650068][ T5831] team0: Port device team_slave_1 added [ 91.665303][ T5825] team0: Port device team_slave_1 added [ 91.768813][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.779228][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.806079][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.877910][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.884980][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.911862][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.948089][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.955076][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.981486][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.000342][ T5827] hsr_slave_0: entered promiscuous mode [ 92.007627][ T5827] hsr_slave_1: entered promiscuous mode [ 92.036717][ T5826] hsr_slave_0: entered promiscuous mode [ 92.043503][ T5826] hsr_slave_1: entered promiscuous mode [ 92.049910][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 92.055692][ T5826] Cannot create hsr debugfs directory [ 92.081863][ T5832] hsr_slave_0: entered promiscuous mode [ 92.089555][ T5832] hsr_slave_1: entered promiscuous mode [ 92.096046][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 92.101871][ T5832] Cannot create hsr debugfs directory [ 92.108885][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.116480][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.142614][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.210694][ T5835] hsr_slave_0: entered promiscuous mode [ 92.217755][ T5835] hsr_slave_1: entered promiscuous mode [ 92.224032][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 92.229931][ T5835] Cannot create hsr debugfs directory [ 92.260726][ T5831] hsr_slave_0: entered promiscuous mode [ 92.267529][ T5831] hsr_slave_1: entered promiscuous mode [ 92.273876][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 92.280721][ T5831] Cannot create hsr debugfs directory [ 92.455424][ T5825] hsr_slave_0: entered promiscuous mode [ 92.462669][ T5825] hsr_slave_1: entered promiscuous mode [ 92.469161][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 92.474896][ T5825] Cannot create hsr debugfs directory [ 92.676536][ T5845] Bluetooth: hci3: command tx timeout [ 92.681995][ T5845] Bluetooth: hci0: command tx timeout [ 92.688309][ T5839] Bluetooth: hci1: command tx timeout [ 92.688348][ T5846] Bluetooth: hci2: command tx timeout [ 92.693728][ T5839] Bluetooth: hci5: command tx timeout [ 92.766025][ T5839] Bluetooth: hci4: command tx timeout [ 93.131360][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.143543][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.154998][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.177920][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.233378][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.249287][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.278522][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.290030][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.362030][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.379455][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.391723][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.423268][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.529191][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.540767][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.553566][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.566278][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.651362][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.677868][ T5831] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 93.694723][ T5831] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 93.707258][ T5831] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.728123][ T5831] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 93.803067][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.864921][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.885049][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.892618][ T3518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.905055][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.912535][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.931645][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.948439][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.963704][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.981327][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.099517][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.128966][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.136202][ T3504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.171212][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.178399][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.198244][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.239253][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.294148][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.355021][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.367182][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.381112][ T3580] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.388322][ T3580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.435677][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.472892][ T3580] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.480122][ T3580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.495784][ T3580] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.503097][ T3580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.521424][ T3580] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.528695][ T3580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.556995][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.603721][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.630187][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.637572][ T3518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.682053][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.695674][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.702886][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.761219][ T5839] Bluetooth: hci5: command tx timeout [ 94.766414][ T5845] Bluetooth: hci0: command tx timeout [ 94.766745][ T5839] Bluetooth: hci2: command tx timeout [ 94.772117][ T5845] Bluetooth: hci1: command tx timeout [ 94.778068][ T5846] Bluetooth: hci3: command tx timeout [ 94.837587][ T5839] Bluetooth: hci4: command tx timeout [ 94.928207][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.997235][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.004558][ T3518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.015314][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.022600][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.092944][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.194933][ T5826] veth0_vlan: entered promiscuous mode [ 95.343458][ T5826] veth1_vlan: entered promiscuous mode [ 95.398887][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.427310][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.519644][ T5827] veth0_vlan: entered promiscuous mode [ 95.563284][ T5826] veth0_macvtap: entered promiscuous mode [ 95.592176][ T5827] veth1_vlan: entered promiscuous mode [ 95.600744][ T5826] veth1_macvtap: entered promiscuous mode [ 95.643650][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.692988][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.738791][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.780327][ T3580] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.791407][ T3580] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.836639][ T3580] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.848617][ T5827] veth0_macvtap: entered promiscuous mode [ 95.884595][ T5832] veth0_vlan: entered promiscuous mode [ 95.917926][ T3580] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.933648][ T5832] veth1_vlan: entered promiscuous mode [ 95.950626][ T5827] veth1_macvtap: entered promiscuous mode [ 95.981734][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.079104][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.139323][ T3531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.169641][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.177580][ T3531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.193483][ T5832] veth0_macvtap: entered promiscuous mode [ 96.221131][ T3580] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.232158][ T3580] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.259918][ T5832] veth1_macvtap: entered promiscuous mode [ 96.281146][ T5835] veth0_vlan: entered promiscuous mode [ 96.287321][ T3580] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.296557][ T3580] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.346365][ T5835] veth1_vlan: entered promiscuous mode [ 96.359662][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.381188][ T3547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.389749][ T3547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.403195][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.439226][ T978] cfg80211: failed to load regulatory.db [ 96.498522][ T5825] veth0_vlan: entered promiscuous mode [ 96.523391][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.528296][ T5831] veth0_vlan: entered promiscuous mode [ 96.544202][ T3512] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.553781][ T3512] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.595972][ T3512] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.604918][ T3512] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.621430][ T3531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.637278][ T5835] veth0_macvtap: entered promiscuous mode [ 96.647908][ T3531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.684007][ T5831] veth1_vlan: entered promiscuous mode [ 96.722143][ T5825] veth1_vlan: entered promiscuous mode [ 96.758452][ T5835] veth1_macvtap: entered promiscuous mode [ 96.838125][ T5839] Bluetooth: hci2: command tx timeout [ 96.843901][ T5846] Bluetooth: hci3: command tx timeout [ 96.843942][ T5848] Bluetooth: hci0: command tx timeout [ 96.850042][ T5846] Bluetooth: hci5: command tx timeout [ 96.856607][ T5845] Bluetooth: hci1: command tx timeout [ 96.904776][ T3512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.916349][ T5845] Bluetooth: hci4: command tx timeout [ 96.946323][ T3512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.989270][ T3531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.001035][ T3531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.023442][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.054578][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.073743][ T5831] veth0_macvtap: entered promiscuous mode [ 97.132450][ T3580] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.164083][ T3518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.174143][ T3580] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.189069][ T3518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.198812][ T3580] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.215728][ T5831] veth1_macvtap: entered promiscuous mode [ 97.227874][ T5825] veth0_macvtap: entered promiscuous mode [ 97.243051][ T3580] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.269256][ T5825] veth1_macvtap: entered promiscuous mode [ 97.351873][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.371132][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.422616][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.452076][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.524557][ T3512] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.548939][ T5992] pimreg: entered allmulticast mode [ 97.566707][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.574578][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.583528][ T3512] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.609306][ T3512] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.655737][ T5990] pimreg: left allmulticast mode [ 97.730875][ T3512] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.747081][ T3512] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.807376][ T3512] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.891005][ T3512] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.900900][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.921887][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.951481][ T3512] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.254861][ T6007] syz.1.17 uses obsolete (PF_INET,SOCK_PACKET) [ 98.384082][ T3580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.418551][ T3580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.739211][ T3580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.770098][ T3580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.791456][ T6020] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19'. [ 98.862589][ T3512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.897771][ T3512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.014189][ T3512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.031006][ T3512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.635652][ T6042] Driver unsupported XDP return value 0 on prog (id 12) dev N/A, expect packet loss! [ 99.760657][ T6044] tipc: Started in network mode [ 99.784914][ T6044] tipc: Node identity ac14140f, cluster identity 4711 [ 99.805779][ T6044] tipc: New replicast peer: 255.255.255.83 [ 99.839520][ T6044] tipc: Enabled bearer , priority 10 [ 100.010947][ T6048] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 100.203650][ T6056] netlink: 28 bytes leftover after parsing attributes in process `syz.5.32'. [ 100.380934][ T30] audit: type=1326 audit(1761351310.703:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe42d8efc9 code=0x7ffc0000 [ 100.485718][ T30] audit: type=1326 audit(1761351310.703:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe42d8efc9 code=0x7ffc0000 [ 100.595172][ T30] audit: type=1326 audit(1761351310.733:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7efe42d8efc9 code=0x7ffc0000 [ 100.706179][ T30] audit: type=1326 audit(1761351310.733:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe42d8efc9 code=0x7ffc0000 [ 100.966886][ T44] tipc: Node number set to 2886997007 [ 101.158239][ T6085] netlink: 44 bytes leftover after parsing attributes in process `syz.0.44'. [ 101.389630][ T6094] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 101.442701][ T6099] netlink: 28 bytes leftover after parsing attributes in process `syz.1.49'. [ 101.449932][ T30] audit: type=1326 audit(1761351311.773:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.5.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc2b8efc9 code=0x7ffc0000 [ 101.525988][ T30] audit: type=1326 audit(1761351311.803:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.5.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc2b8efc9 code=0x7ffc0000 [ 101.642525][ T30] audit: type=1326 audit(1761351311.813:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.5.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fadc2b8efc9 code=0x7ffc0000 [ 101.675596][ T6102] syz.0.51 (6102) used greatest stack depth: 17832 bytes left [ 101.712586][ T6104] Zero length message leads to an empty skb [ 101.732831][ T30] audit: type=1326 audit(1761351311.813:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.5.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc2b8efc9 code=0x7ffc0000 [ 101.926877][ T6114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.55'. [ 102.226545][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.361526][ T30] audit: type=1326 audit(1761351312.683:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6122 comm="syz.5.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc2b8efc9 code=0x7ffc0000 [ 102.418147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.446271][ T30] audit: type=1326 audit(1761351312.713:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6122 comm="syz.5.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fadc2b8efc9 code=0x7ffc0000 [ 102.476193][ T5941] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.703552][ T5941] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 102.875855][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.971961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.220088][ T5941] usb 1-1: Product: syz [ 103.224353][ T5941] usb 1-1: Manufacturer: syz [ 103.336421][ T5941] usb 1-1: SerialNumber: syz [ 103.824740][ T6114] autofs: Unknown parameter '0x0000000000000000' [ 103.935870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 103.956138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 104.015933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 104.815909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 104.914465][ T5941] rtl8150 1-1:1.0: couldn't reset the device [ 104.944886][ T5941] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 105.056380][ T5941] usb 1-1: USB disconnect, device number 2 [ 105.526378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.533218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 106.060761][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 106.060785][ T30] audit: type=1326 audit(1761351316.373:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz.5.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc2b8efc9 code=0x7ffc0000 [ 106.183710][ T30] audit: type=1326 audit(1761351316.383:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz.5.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc2b8efc9 code=0x7ffc0000 [ 106.282200][ T30] audit: type=1326 audit(1761351316.383:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz.5.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fadc2b8efc9 code=0x7ffc0000 [ 106.305671][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.5.71'. [ 106.354932][ T30] audit: type=1326 audit(1761351316.383:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz.5.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc2b8efc9 code=0x7ffc0000 [ 106.363478][ T6162] netlink: 12 bytes leftover after parsing attributes in process `syz.5.71'. [ 106.428445][ T30] audit: type=1326 audit(1761351316.383:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz.5.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc2b8efc9 code=0x7ffc0000 [ 106.491705][ T3580] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.506584][ T3518] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.523048][ T3518] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.537426][ T30] audit: type=1326 audit(1761351316.383:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz.5.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fadc2b8efc9 code=0x7ffc0000 [ 106.562408][ T3504] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.575111][ T6167] loop3: detected capacity change from 0 to 512 [ 106.711714][ T30] audit: type=1326 audit(1761351316.383:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz.5.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc2b8efc9 code=0x7ffc0000 [ 106.733862][ T30] audit: type=1326 audit(1761351316.383:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz.5.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc2b8efc9 code=0x7ffc0000 [ 106.799777][ T30] audit: type=1326 audit(1761351316.383:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz.5.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadc2b8efc9 code=0x7ffc0000 [ 106.824862][ T6167] ------------[ cut here ]------------ [ 106.831852][ T6167] EA inode 11 i_nlink=2 [ 106.837222][ T6171] netlink: 44 bytes leftover after parsing attributes in process `syz.0.75'. [ 106.852450][ T6167] WARNING: CPU: 0 PID: 6167 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 106.865125][ T6167] Modules linked in: [ 106.869508][ T6167] CPU: 0 UID: 0 PID: 6167 Comm: syz.3.73 Not tainted syzkaller #0 PREEMPT(full) [ 106.878761][ T6167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 106.888922][ T6167] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 106.892195][ T30] audit: type=1326 audit(1761351316.383:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz.5.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc2b8efc9 code=0x7ffc0000 [ 106.895702][ T6167] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 00 0e 80 8b 4c 89 e6 e8 f7 b7 f9 fe 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 43 a8 bc 08 44 89 f9 [ 106.938771][ T6167] RSP: 0018:ffffc9000abd7100 EFLAGS: 00010246 [ 106.944949][ T6167] RAX: be5fa49517cd1100 RBX: 0000000000000001 RCX: 0000000000080000 [ 106.953565][ T6167] RDX: ffffc9000c6eb000 RSI: 000000000000a13e RDI: 000000000000a13f [ 106.962464][ T6167] RBP: ffffc9000abd71f8 R08: ffff8880b8824293 R09: 1ffff11017104852 [ 106.972591][ T6167] R10: dffffc0000000000 R11: ffffed1017104853 R12: 000000000000000b [ 106.982321][ T6167] R13: ffff888056444660 R14: 1ffff1100ac888ba R15: ffff8880564445d0 [ 106.990659][ T6167] FS: 00007f6e29b796c0(0000) GS:ffff88812613e000(0000) knlGS:0000000000000000 [ 107.000158][ T6167] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.006821][ T6167] CR2: 00007f98307909c0 CR3: 000000002df24000 CR4: 0000000000350ef0 [ 107.014815][ T6167] Call Trace: [ 107.018196][ T6167] [ 107.021137][ T6167] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 107.027060][ T6167] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 107.033416][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.039139][ T6167] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 107.044630][ T6167] ext4_xattr_set_entry+0xabb/0x1e20 [ 107.050119][ T6167] ext4_xattr_ibody_set+0x254/0x6a0 [ 107.055356][ T6167] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 107.061432][ T6167] __ext4_expand_extra_isize+0x30d/0x400 [ 107.069195][ T6167] __ext4_mark_inode_dirty+0x46c/0x700 [ 107.076086][ T6167] ext4_evict_inode+0x80d/0xee0 [ 107.081075][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.087090][ T6167] ? __pfx_ext4_evict_inode+0x10/0x10 [ 107.092575][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.098299][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.103320][ T6174] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.103954][ T6167] ? do_raw_spin_unlock+0x122/0x240 [ 107.120955][ T6167] ? __pfx_ext4_evict_inode+0x10/0x10 [ 107.126413][ T6167] evict+0x504/0x9c0 [ 107.130343][ T6167] ? __pfx_evict+0x10/0x10 [ 107.134790][ T6167] ? do_raw_spin_unlock+0x122/0x240 [ 107.140058][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.145711][ T6167] ? _raw_spin_unlock+0x28/0x50 [ 107.150651][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.156432][ T6167] ? iput+0x946/0xc50 [ 107.160665][ T6167] ext4_orphan_cleanup+0xc20/0x1460 [ 107.165981][ T6167] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 107.173126][ T6167] ? ext4_register_li_request+0x640/0x720 [ 107.180124][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.186335][ T6167] ? errseq_check_and_advance+0x66/0x120 [ 107.192100][ T6167] ext4_fill_super+0x5920/0x61e0 [ 107.197157][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.202881][ T6167] ? __pfx_ext4_fill_super+0x10/0x10 [ 107.208371][ T6167] ? snprintf+0xda/0x120 [ 107.212643][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.218447][ T6167] ? set_blocksize+0x21e/0x500 [ 107.223336][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.229324][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.234981][ T6167] ? sb_set_blocksize+0x104/0x180 [ 107.240299][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.246076][ T6167] ? setup_bdev_super+0x4c1/0x5b0 [ 107.251136][ T6167] get_tree_bdev_flags+0x40e/0x4d0 [ 107.256390][ T6167] ? __pfx_ext4_fill_super+0x10/0x10 [ 107.261697][ T6167] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 107.267445][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.274591][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.281613][ T6167] vfs_get_tree+0x92/0x2b0 [ 107.286136][ T6167] do_new_mount+0x302/0xa10 [ 107.290671][ T6167] ? apparmor_capable+0x137/0x1b0 [ 107.295722][ T6167] ? __pfx_do_new_mount+0x10/0x10 [ 107.300837][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.306535][ T6167] ? ns_capable+0x8a/0xf0 [ 107.310875][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.328394][ T6167] ? kmem_cache_free+0x19b/0x690 [ 107.333619][ T6167] __se_sys_mount+0x313/0x410 [ 107.338422][ T6167] ? __pfx___se_sys_mount+0x10/0x10 [ 107.343649][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.349566][ T6167] ? __x64_sys_mount+0x20/0xc0 [ 107.354362][ T6167] do_syscall_64+0xfa/0xfa0 [ 107.358954][ T6167] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.364354][ T6167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.370508][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.377697][ T6167] ? exc_page_fault+0xab/0x100 [ 107.382576][ T6167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.389866][ T6167] RIP: 0033:0x7f6e28d9076a [ 107.394301][ T6167] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.414408][ T6167] RSP: 002b:00007f6e29b78e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 107.422929][ T6167] RAX: ffffffffffffffda RBX: 00007f6e29b78ef0 RCX: 00007f6e28d9076a [ 107.431105][ T6167] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f6e29b78eb0 [ 107.439163][ T6167] RBP: 0000200000000180 R08: 00007f6e29b78ef0 R09: 0000000001a08700 [ 107.447225][ T6167] R10: 0000000001a08700 R11: 0000000000000246 R12: 00002000000001c0 [ 107.455316][ T6167] R13: 00007f6e29b78eb0 R14: 0000000000000470 R15: 0000200000000700 [ 107.463618][ T6167] [ 107.466718][ T6167] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 107.474002][ T6167] CPU: 0 UID: 0 PID: 6167 Comm: syz.3.73 Not tainted syzkaller #0 PREEMPT(full) [ 107.483114][ T6167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.493175][ T6167] Call Trace: [ 107.496466][ T6167] [ 107.499390][ T6167] dump_stack_lvl+0x99/0x250 [ 107.504084][ T6167] ? __asan_memcpy+0x40/0x70 [ 107.508711][ T6167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.513923][ T6167] ? __pfx__printk+0x10/0x10 [ 107.518520][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.524155][ T6167] vpanic+0x237/0x6d0 [ 107.528201][ T6167] ? __pfx_vpanic+0x10/0x10 [ 107.532720][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.538452][ T6167] panic+0xb9/0xc0 [ 107.542186][ T6167] ? __pfx_panic+0x10/0x10 [ 107.546630][ T6167] __warn+0x31b/0x4b0 [ 107.550621][ T6167] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 107.556609][ T6167] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 107.562597][ T6167] report_bug+0x2be/0x4f0 [ 107.566944][ T6167] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 107.572924][ T6167] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 107.578907][ T6167] ? ext4_xattr_inode_update_ref+0x51c/0x5b0 [ 107.584898][ T6167] handle_bug+0x84/0x160 [ 107.589341][ T6167] exc_invalid_op+0x1a/0x50 [ 107.593864][ T6167] asm_exc_invalid_op+0x1a/0x20 [ 107.598731][ T6167] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 107.605420][ T6167] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 00 0e 80 8b 4c 89 e6 e8 f7 b7 f9 fe 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 43 a8 bc 08 44 89 f9 [ 107.625209][ T6167] RSP: 0018:ffffc9000abd7100 EFLAGS: 00010246 [ 107.631373][ T6167] RAX: be5fa49517cd1100 RBX: 0000000000000001 RCX: 0000000000080000 [ 107.639345][ T6167] RDX: ffffc9000c6eb000 RSI: 000000000000a13e RDI: 000000000000a13f [ 107.647312][ T6167] RBP: ffffc9000abd71f8 R08: ffff8880b8824293 R09: 1ffff11017104852 [ 107.655277][ T6167] R10: dffffc0000000000 R11: ffffed1017104853 R12: 000000000000000b [ 107.663246][ T6167] R13: ffff888056444660 R14: 1ffff1100ac888ba R15: ffff8880564445d0 [ 107.671243][ T6167] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 107.677094][ T6167] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 107.683443][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.689173][ T6167] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 107.694653][ T6167] ext4_xattr_set_entry+0xabb/0x1e20 [ 107.700001][ T6167] ext4_xattr_ibody_set+0x254/0x6a0 [ 107.705207][ T6167] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 107.711232][ T6167] __ext4_expand_extra_isize+0x30d/0x400 [ 107.717317][ T6167] __ext4_mark_inode_dirty+0x46c/0x700 [ 107.722807][ T6167] ext4_evict_inode+0x80d/0xee0 [ 107.727755][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.733488][ T6167] ? __pfx_ext4_evict_inode+0x10/0x10 [ 107.738864][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.744502][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.750136][ T6167] ? do_raw_spin_unlock+0x122/0x240 [ 107.755348][ T6167] ? __pfx_ext4_evict_inode+0x10/0x10 [ 107.760876][ T6167] evict+0x504/0x9c0 [ 107.764793][ T6167] ? __pfx_evict+0x10/0x10 [ 107.769211][ T6167] ? do_raw_spin_unlock+0x122/0x240 [ 107.774421][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.780062][ T6167] ? _raw_spin_unlock+0x28/0x50 [ 107.784921][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.790652][ T6167] ? iput+0x946/0xc50 [ 107.794677][ T6167] ext4_orphan_cleanup+0xc20/0x1460 [ 107.799915][ T6167] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 107.805569][ T6167] ? ext4_register_li_request+0x640/0x720 [ 107.811547][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.817246][ T6167] ? errseq_check_and_advance+0x66/0x120 [ 107.822911][ T6167] ext4_fill_super+0x5920/0x61e0 [ 107.827979][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.833661][ T6167] ? __pfx_ext4_fill_super+0x10/0x10 [ 107.838957][ T6167] ? snprintf+0xda/0x120 [ 107.843305][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.848950][ T6167] ? set_blocksize+0x21e/0x500 [ 107.853816][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.859465][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.865100][ T6167] ? sb_set_blocksize+0x104/0x180 [ 107.870667][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.876299][ T6167] ? setup_bdev_super+0x4c1/0x5b0 [ 107.881344][ T6167] get_tree_bdev_flags+0x40e/0x4d0 [ 107.886651][ T6167] ? __pfx_ext4_fill_super+0x10/0x10 [ 107.892051][ T6167] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 107.898143][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.903790][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.909535][ T6167] vfs_get_tree+0x92/0x2b0 [ 107.913978][ T6167] do_new_mount+0x302/0xa10 [ 107.918497][ T6167] ? apparmor_capable+0x137/0x1b0 [ 107.923531][ T6167] ? __pfx_do_new_mount+0x10/0x10 [ 107.928757][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.934393][ T6167] ? ns_capable+0x8a/0xf0 [ 107.938734][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.944638][ T6167] ? kmem_cache_free+0x19b/0x690 [ 107.949611][ T6167] __se_sys_mount+0x313/0x410 [ 107.954545][ T6167] ? __pfx___se_sys_mount+0x10/0x10 [ 107.959797][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.965454][ T6167] ? __x64_sys_mount+0x20/0xc0 [ 107.970238][ T6167] do_syscall_64+0xfa/0xfa0 [ 107.974864][ T6167] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.980261][ T6167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.986443][ T6167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.992093][ T6167] ? exc_page_fault+0xab/0x100 [ 107.996881][ T6167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.002785][ T6167] RIP: 0033:0x7f6e28d9076a [ 108.007645][ T6167] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.027267][ T6167] RSP: 002b:00007f6e29b78e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 108.035751][ T6167] RAX: ffffffffffffffda RBX: 00007f6e29b78ef0 RCX: 00007f6e28d9076a [ 108.043823][ T6167] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f6e29b78eb0 [ 108.051974][ T6167] RBP: 0000200000000180 R08: 00007f6e29b78ef0 R09: 0000000001a08700 [ 108.059945][ T6167] R10: 0000000001a08700 R11: 0000000000000246 R12: 00002000000001c0 [ 108.067925][ T6167] R13: 00007f6e29b78eb0 R14: 0000000000000470 R15: 0000200000000700 [ 108.076097][ T6167] [ 108.079563][ T6167] Kernel Offset: disabled [ 108.083903][ T6167] Rebooting in 86400 seconds..