last executing test programs: 12.810094094s ago: executing program 4 (id=65): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200002, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 11.886283077s ago: executing program 4 (id=78): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty}}, 0x0, 0x0, 0x3f, 0x0, "ee080e650926a96ecc136e7fb980e989db9e8bf9b93129488f65178de213eb94cd46e19d9c65a018444a131f4000000065569607462029add09240005c6776267517308a3d40aa1c788df600"}, 0xd8) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 11.661146556s ago: executing program 4 (id=81): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0xa, 0x300) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000120, &(0x7f0000000780)=ANY=[@ANYRESHEX=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='global_dirty_state\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x140}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0000000057f30200"/24], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe5e}, {0x0}, {0x0}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) ioctl$PTP_ENABLE_PPS(r10, 0x40043d04, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 10.518337892s ago: executing program 4 (id=91): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0xcf7c, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r0}, 0x10) socketpair(0x3, 0xa, 0x0, &(0x7f0000000040)) 10.340628054s ago: executing program 4 (id=94): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0xffffffffffffff2b) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000080)=""/43, 0x39) 10.294283868s ago: executing program 3 (id=95): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d010000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r2}, 0x18) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x10) pipe(&(0x7f0000000340)) socket(0x2, 0x80805, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x6c2, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) 7.378322137s ago: executing program 4 (id=115): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1fb}, 0x94) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000380)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000300)='asymmetric\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.179202333s ago: executing program 0 (id=116): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x800) 5.320050893s ago: executing program 2 (id=121): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) 5.271460208s ago: executing program 3 (id=122): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r2, r1, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[], 0x0) 4.739397472s ago: executing program 0 (id=123): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 4.45094975s ago: executing program 1 (id=124): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0x6) 4.098498926s ago: executing program 0 (id=125): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') syz_emit_ethernet(0xae, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRESHEX], 0x0) 3.281497758s ago: executing program 2 (id=126): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x2000c000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f640094000500", 0x2c}], 0x1) 3.225209912s ago: executing program 3 (id=127): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES8], 0x20}, 0x1, 0x0, 0x0, 0x10000841}, 0x0) 3.038486603s ago: executing program 3 (id=128): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) mkdir(0x0, 0x0) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x1, r2}}, 0x40) prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000240)=@sr0, 0x0, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r8, 0x8008551c, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) syz_clone(0x60100100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) 3.014345317s ago: executing program 2 (id=129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x200a}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "faca"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) 2.701412965s ago: executing program 2 (id=130): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x58a5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r0, &(0x7f0000000600), &(0x7f0000000580)=""/95}, 0x20) 2.542543439s ago: executing program 0 (id=131): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16b, @time={0x6fd, 0x7}, 0x0, {0x0, 0xff}, 0x0, 0x0, 0x2}) 2.33287217s ago: executing program 2 (id=132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x74, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0xffff}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x2, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x93}}]}]}, 0x74}}, 0x0) 1.950432137s ago: executing program 2 (id=133): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x800) 1.68172676s ago: executing program 3 (id=134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) add_key(&(0x7f0000000440)='dns_resolver\x00', 0x0, &(0x7f00000004c0)="a079394a04954e2d1523cd274d954f18a7b1235d2023e670955c12e7265fa97c2cfb7ba5f67d4a0f06d00c089c2dbb7034ddf203c4f50b4d19d6ab0b49d345571461f3c9bc2be016252397574e61cd9b5fc6337f92b077112e9d69d5f0d761e584bd5f7a22aa334740193d174c89a6670c", 0x71, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) pselect6(0x40, &(0x7f0000000240)={0xffffffffffff4557, 0x4, 0xfffffffffffffff7, 0x1, 0x62a, 0x1, 0x7, 0x2}, &(0x7f0000000280)={0x3, 0x3e, 0x4, 0x7, 0x3, 0x1ccc200000000, 0x1, 0x3ec4d2c1}, &(0x7f0000000300)={0x9, 0xfffffffffffffffe, 0x8, 0xb, 0xb, 0x3, 0x8000, 0x7f}, &(0x7f0000000340), &(0x7f00000003c0)={&(0x7f0000000380)={[0x5]}, 0x8}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) r7 = syz_pidfd_open(0x0, 0x0) setns(r7, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.675162433s ago: executing program 1 (id=135): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) 1.594755273s ago: executing program 0 (id=136): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x800414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$eJzs3UFrE1sYxvGnTW+TprTJhcuFe0E96EY3oY0fQIO0IAaU2hR1IUztREPGpMyESkRsNuLWD+Gq6M6doC7ddCNu3LsrguCmC3HETNImbVrTNklj+/9BmTd5z8OcttPyptDJ2o1n9/NZL5G1ShqMGA1KFa1L8V9VzUDtOFith9WoonOj3z6duH7z1pVUOj01Y8x0avZ80hgzfurNg0cvTr8rjc69Gn8d1mr89trX5OfVf1f/W/sxey/nmZxnCsWSscx8sViy5h3bLOS8fMKYa45tebbJFTzbbepnneLiYtlYhYWx6KJre56xCmWTt8umVDQlt2ysu1auYBKJhBmL6ngbamNNZmVmxkrt2PZDHd0Rum6k1ZOum6q0bmZWerAnAADQZ3af/4NZf+f5Pz0XHNua/18+l9qb/6VOzv8DPf2C9rlK06PfzP84Elw3ZUVrP7/NmP8BAAAAAAAAAAAAAAAAAAAAAPgTrPt+zPf9WP1Y/whLikiqPz7sfaI79vn9v3BI20WHNfzjXkRyni5lljLBMeinssrJka0JxfS9ej3UBPX05fTUhKmK662zXMsvL2VCCtfzdfFW+ZN/TwZ505z/S9HG8ycV0z+tz59smR/W2TMN+YRi+nBHRTlaqF7Xm/nHk8Zcuprekh+prgMAAAAA4ChImA3bXr9X+9UFEW3vB/k9/H1gy+vrIf3fzi0qAQAAAADAgXnlh3nLcWx3H0VY0gHieyj8ga6fonNFSH2xjS3FRUl9sI1eFRFJwTNmP/EvG/G2Un4ba4YkHfTzivTw0jrs30wAAAAAOm1z6N9D6OOTLu4IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDjp937gdXXb2vVG7vEG04X0vuNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjp2fAQAA//91iCZA") sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0xfffffffe}, 0x10, 0x0}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 1.491341454s ago: executing program 1 (id=137): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r2, r1, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[], 0x0) 1.324083383s ago: executing program 1 (id=138): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES8], 0x20}, 0x1, 0x0, 0x0, 0x10000841}, 0x0) 526.26379ms ago: executing program 1 (id=139): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x2000c000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000", 0x42}], 0x1) 321.475688ms ago: executing program 1 (id=140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x200a}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "faca"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) 186.071578ms ago: executing program 0 (id=141): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) 0s ago: executing program 3 (id=142): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x58a5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r0, &(0x7f0000000600), &(0x7f0000000580)=""/95}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.197' (ED25519) to the list of known hosts. [ 83.661997][ T5810] cgroup: Unknown subsys name 'net' [ 83.757441][ T5810] cgroup: Unknown subsys name 'cpuset' [ 83.767120][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.547764][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.887024][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.893160][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.897475][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.912491][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.921510][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.921583][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.938494][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.946841][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.956117][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.969841][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.026298][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.036512][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.044867][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.054424][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.064699][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.082927][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.094544][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.104488][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.105116][ T5825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.123010][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.130998][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.141494][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.150381][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.163797][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.173193][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.631267][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 88.831732][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.839884][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.847832][ T5821] bridge_slave_0: entered allmulticast mode [ 88.855713][ T5821] bridge_slave_0: entered promiscuous mode [ 88.885003][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.892869][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.900405][ T5821] bridge_slave_1: entered allmulticast mode [ 88.907916][ T5821] bridge_slave_1: entered promiscuous mode [ 89.003624][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 89.019035][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.035305][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.171706][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 89.187079][ T5821] team0: Port device team_slave_0 added [ 89.206510][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 89.243526][ T5821] team0: Port device team_slave_1 added [ 89.415089][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.422088][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.449238][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.480060][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.487477][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.495518][ T5823] bridge_slave_0: entered allmulticast mode [ 89.503035][ T5823] bridge_slave_0: entered promiscuous mode [ 89.525460][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.532434][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.558745][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.570287][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 89.589915][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.597338][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.605137][ T5823] bridge_slave_1: entered allmulticast mode [ 89.613048][ T5823] bridge_slave_1: entered promiscuous mode [ 89.725396][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.732814][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.740612][ T5830] bridge_slave_0: entered allmulticast mode [ 89.748287][ T5830] bridge_slave_0: entered promiscuous mode [ 89.782103][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.832663][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.840302][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.848567][ T5830] bridge_slave_1: entered allmulticast mode [ 89.856084][ T5830] bridge_slave_1: entered promiscuous mode [ 89.871208][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.881266][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.888553][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.895829][ T5832] bridge_slave_0: entered allmulticast mode [ 89.903159][ T5832] bridge_slave_0: entered promiscuous mode [ 89.916434][ T5821] hsr_slave_0: entered promiscuous mode [ 89.923120][ T5821] hsr_slave_1: entered promiscuous mode [ 89.979025][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.986421][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.994781][ T5832] bridge_slave_1: entered allmulticast mode [ 90.002605][ T5832] bridge_slave_1: entered promiscuous mode [ 90.009571][ T5144] Bluetooth: hci0: command tx timeout [ 90.015782][ T5837] Bluetooth: hci1: command tx timeout [ 90.017630][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.083953][ T5144] Bluetooth: hci2: command tx timeout [ 90.098373][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.139459][ T5823] team0: Port device team_slave_0 added [ 90.163511][ T5144] Bluetooth: hci3: command tx timeout [ 90.188705][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.196074][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.203260][ T5834] bridge_slave_0: entered allmulticast mode [ 90.211235][ T5834] bridge_slave_0: entered promiscuous mode [ 90.222051][ T5823] team0: Port device team_slave_1 added [ 90.231193][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.243783][ T5144] Bluetooth: hci4: command tx timeout [ 90.252354][ T5830] team0: Port device team_slave_0 added [ 90.258563][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.266671][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.274365][ T5834] bridge_slave_1: entered allmulticast mode [ 90.281915][ T5834] bridge_slave_1: entered promiscuous mode [ 90.305855][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.324242][ T5830] team0: Port device team_slave_1 added [ 90.405348][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.412389][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.438640][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.485686][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.492696][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.519751][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.534917][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.545226][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.552201][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.579445][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.593122][ T5832] team0: Port device team_slave_0 added [ 90.607335][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.614709][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.640767][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.655301][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.673278][ T5832] team0: Port device team_slave_1 added [ 90.800475][ T5834] team0: Port device team_slave_0 added [ 90.807912][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.815309][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.841629][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.855215][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.862388][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.888721][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.920012][ T5834] team0: Port device team_slave_1 added [ 90.971496][ T5823] hsr_slave_0: entered promiscuous mode [ 90.982876][ T5823] hsr_slave_1: entered promiscuous mode [ 90.989536][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 90.996044][ T5823] Cannot create hsr debugfs directory [ 91.037545][ T5830] hsr_slave_0: entered promiscuous mode [ 91.044440][ T5830] hsr_slave_1: entered promiscuous mode [ 91.050762][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 91.056572][ T5830] Cannot create hsr debugfs directory [ 91.079730][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.086988][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.113276][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.126775][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.134426][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.160538][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.306886][ T5832] hsr_slave_0: entered promiscuous mode [ 91.314150][ T5832] hsr_slave_1: entered promiscuous mode [ 91.320536][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 91.326410][ T5832] Cannot create hsr debugfs directory [ 91.388577][ T5834] hsr_slave_0: entered promiscuous mode [ 91.395299][ T5834] hsr_slave_1: entered promiscuous mode [ 91.401725][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 91.407609][ T5834] Cannot create hsr debugfs directory [ 91.560485][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.606752][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.652646][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.689376][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.946235][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.961878][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.975031][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.998701][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.072300][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.084041][ T5144] Bluetooth: hci0: command tx timeout [ 92.084294][ T5837] Bluetooth: hci1: command tx timeout [ 92.116283][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.127974][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.140266][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.163715][ T5837] Bluetooth: hci2: command tx timeout [ 92.244380][ T5837] Bluetooth: hci3: command tx timeout [ 92.260176][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.312647][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.323566][ T5837] Bluetooth: hci4: command tx timeout [ 92.352933][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.368409][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.381484][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.398113][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.449024][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.456456][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.511576][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.519114][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.549721][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.559563][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.593412][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.605729][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.632297][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.658074][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.698610][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.706283][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.732954][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.772076][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.779365][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.818482][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.942070][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.949327][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.962725][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.970015][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.117261][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.140158][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.263015][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.333411][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.340631][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.352632][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.359944][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.446750][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.482264][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.494405][ T5821] veth0_vlan: entered promiscuous mode [ 93.562251][ T5821] veth1_vlan: entered promiscuous mode [ 93.580602][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.631790][ T5823] veth0_vlan: entered promiscuous mode [ 93.642206][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.649462][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.666497][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.699857][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.707175][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.749127][ T5823] veth1_vlan: entered promiscuous mode [ 93.788267][ T5821] veth0_macvtap: entered promiscuous mode [ 93.810918][ T5821] veth1_macvtap: entered promiscuous mode [ 93.941474][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.960431][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.000420][ T5823] veth0_macvtap: entered promiscuous mode [ 94.026687][ T5823] veth1_macvtap: entered promiscuous mode [ 94.043325][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.062013][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.098039][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.109216][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.123955][ T5830] veth0_vlan: entered promiscuous mode [ 94.137581][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.164758][ T5837] Bluetooth: hci0: command tx timeout [ 94.168439][ T5144] Bluetooth: hci1: command tx timeout [ 94.216199][ T5830] veth1_vlan: entered promiscuous mode [ 94.245523][ T5144] Bluetooth: hci2: command tx timeout [ 94.282494][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.298314][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.324183][ T5144] Bluetooth: hci3: command tx timeout [ 94.371718][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.381389][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.396448][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.404812][ T5144] Bluetooth: hci4: command tx timeout [ 94.415277][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.444615][ T5832] veth0_vlan: entered promiscuous mode [ 94.450600][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.462294][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.481915][ T5830] veth0_macvtap: entered promiscuous mode [ 94.528434][ T5832] veth1_vlan: entered promiscuous mode [ 94.546405][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.547679][ T5830] veth1_macvtap: entered promiscuous mode [ 94.562352][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.572883][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.747104][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.764615][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.774230][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.815048][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.898467][ T5832] veth0_macvtap: entered promiscuous mode [ 94.917852][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.930069][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.938409][ T5832] veth1_macvtap: entered promiscuous mode [ 94.956007][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.970616][ T30] audit: type=1326 audit(1762605043.472:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5238f6c9 code=0x7ffc0000 [ 94.999595][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.008560][ T30] audit: type=1326 audit(1762605043.472:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc5238f6c9 code=0x7ffc0000 [ 95.008619][ T30] audit: type=1326 audit(1762605043.472:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5238f6c9 code=0x7ffc0000 [ 95.008666][ T30] audit: type=1326 audit(1762605043.472:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdc5238f6c9 code=0x7ffc0000 [ 95.008711][ T30] audit: type=1326 audit(1762605043.472:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5238f6c9 code=0x7ffc0000 [ 95.008755][ T30] audit: type=1326 audit(1762605043.472:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc5238f6c9 code=0x7ffc0000 [ 95.086915][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.143186][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.173486][ T30] audit: type=1326 audit(1762605043.472:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5238f6c9 code=0x7ffc0000 [ 95.223733][ T30] audit: type=1326 audit(1762605043.472:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc5238f6c9 code=0x7ffc0000 [ 95.227473][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.266347][ T30] audit: type=1326 audit(1762605043.472:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5238f6c9 code=0x7ffc0000 [ 95.308225][ T5939] loop1: detected capacity change from 0 to 512 [ 95.322595][ T5939] EXT4-fs: Ignoring removed oldalloc option [ 95.329665][ T30] audit: type=1326 audit(1762605043.472:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5238f6c9 code=0x7ffc0000 [ 95.347960][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.378624][ T5939] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.430302][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.453742][ T5939] EXT4-fs (loop1): too many log groups per flexible block group [ 95.462308][ T5939] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 95.518899][ T5939] EXT4-fs (loop1): mount failed [ 95.560401][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.589391][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.613271][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.615845][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.659609][ T5948] loop0: detected capacity change from 0 to 1764 [ 95.664323][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.674461][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.807427][ T5834] veth0_vlan: entered promiscuous mode [ 95.857959][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.880289][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.889814][ T5950] netlink: 'syz.1.7': attribute type 10 has an invalid length. [ 95.937826][ T5950] team0: Failed to send options change via netlink (err -105) [ 95.946138][ T5950] team0: Port device dummy0 added [ 95.952715][ T5951] netlink: 'syz.1.7': attribute type 10 has an invalid length. [ 95.963285][ T5834] veth1_vlan: entered promiscuous mode [ 95.988775][ T5951] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 96.001434][ T5951] team0: Failed to send options change via netlink (err -105) [ 96.011422][ T5951] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 96.025342][ T5951] team0: Port device dummy0 removed [ 96.041833][ T5951] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 96.124105][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.132439][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.244821][ T5144] Bluetooth: hci0: command tx timeout [ 96.259908][ T5144] Bluetooth: hci1: command tx timeout [ 96.327611][ T5834] veth0_macvtap: entered promiscuous mode [ 96.334317][ T5144] Bluetooth: hci2: command tx timeout [ 96.337383][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.364100][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 96.384532][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.404046][ T5144] Bluetooth: hci3: command tx timeout [ 96.405431][ T5956] netlink: 'syz.3.4': attribute type 21 has an invalid length. [ 96.422206][ T5834] veth1_macvtap: entered promiscuous mode [ 96.482153][ T5956] loop3: detected capacity change from 0 to 512 [ 96.496903][ T5144] Bluetooth: hci4: command tx timeout [ 96.560917][ T5956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.609190][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.621494][ T5956] ext4 filesystem being mounted at /0/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.672338][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.728030][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.790518][ T5969] loop1: detected capacity change from 0 to 1024 [ 96.813912][ T5972] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 96.831915][ T5969] ======================================================= [ 96.831915][ T5969] WARNING: The mand mount option has been deprecated and [ 96.831915][ T5969] and is ignored by this kernel. Remove the mand [ 96.831915][ T5969] option from the mount to silence this warning. [ 96.831915][ T5969] ======================================================= [ 96.887287][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.978542][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.128142][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.373323][ T43] cfg80211: failed to load regulatory.db [ 97.926187][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.942966][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.086277][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.109233][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.637748][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 98.716100][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.734799][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 101.202715][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.36'. [ 101.726841][ T6056] loop4: detected capacity change from 0 to 164 [ 101.801023][ T6056] ISOFS: unable to read i-node block [ 101.812070][ T6055] netlink: 'syz.1.42': attribute type 1 has an invalid length. [ 101.820294][ T6056] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 102.224224][ T6063] loop1: detected capacity change from 0 to 512 [ 102.263427][ T6063] EXT4-fs (loop1): failed to initialize system zone (-117) [ 102.304948][ T6063] EXT4-fs (loop1): mount failed [ 103.015924][ T6078] loop4: detected capacity change from 0 to 8192 [ 103.035748][ T6087] veth1_macvtap: left promiscuous mode [ 103.041456][ T6087] macsec0: entered promiscuous mode [ 103.050148][ T6088] loop1: detected capacity change from 0 to 128 [ 103.158606][ T6088] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 103.342210][ T6100] syz.1.56: attempt to access beyond end of device [ 103.342210][ T6100] loop1: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 103.413714][ T6097] loop0: detected capacity change from 0 to 2048 [ 103.441404][ T6097] journal_path: Lookup failure for './file1' [ 103.444287][ T6100] syz.1.56: attempt to access beyond end of device [ 103.444287][ T6100] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 103.473846][ T6097] EXT4-fs: error: could not find journal device path [ 103.559167][ T6100] syz.1.56: attempt to access beyond end of device [ 103.559167][ T6100] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 103.585091][ T6103] random: crng reseeded on system resumption [ 103.615785][ T6088] syz.1.56: attempt to access beyond end of device [ 103.615785][ T6088] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 103.636622][ T6100] syz.1.56: attempt to access beyond end of device [ 103.636622][ T6100] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 103.791176][ T6107] mmap: syz.0.64 (6107) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.818888][ T3562] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 104.215566][ T6119] syzkaller0: entered promiscuous mode [ 104.221555][ T6119] syzkaller0: entered allmulticast mode [ 104.368237][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 104.368257][ T30] audit: type=1326 audit(1762605052.872:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.0.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402b38f6c9 code=0x7ffc0000 [ 104.469879][ T30] audit: type=1326 audit(1762605052.902:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.0.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402b38f6c9 code=0x7ffc0000 [ 104.531116][ T6133] IPv6: Can't replace route, no match found [ 104.545655][ T30] audit: type=1326 audit(1762605052.902:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.0.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f402b38f6c9 code=0x7ffc0000 [ 104.592749][ T6134] tipc: Started in network mode [ 104.594931][ T30] audit: type=1326 audit(1762605052.902:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.0.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f402b38f703 code=0x7ffc0000 [ 104.598063][ T6134] tipc: Node identity ac14140f, cluster identity 4711 [ 104.652761][ T30] audit: type=1326 audit(1762605052.902:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.0.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f402b38f703 code=0x7ffc0000 [ 104.692538][ T6134] tipc: New replicast peer: 255.255.255.255 [ 104.740369][ T6134] tipc: Enabled bearer , priority 10 [ 104.756274][ T30] audit: type=1326 audit(1762605052.902:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.0.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402b38f6c9 code=0x7ffc0000 [ 104.815939][ T30] audit: type=1326 audit(1762605052.902:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.0.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402b38f6c9 code=0x7ffc0000 [ 104.881052][ T30] audit: type=1326 audit(1762605052.932:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.0.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402b38f6c9 code=0x7ffc0000 [ 104.922714][ T30] audit: type=1326 audit(1762605052.932:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.0.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402b38f6c9 code=0x7ffc0000 [ 105.019537][ T30] audit: type=1326 audit(1762605052.932:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.0.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402b38f6c9 code=0x7ffc0000 [ 105.854698][ T5815] tipc: Node number set to 2886997007 [ 105.948751][ T6177] netlink: 16 bytes leftover after parsing attributes in process `syz.2.86'. [ 106.440103][ T6197] xt_hashlimit: size too large, truncated to 1048576 [ 107.173055][ T6210] loop1: detected capacity change from 0 to 128 [ 107.205377][ T6210] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 107.369093][ T6214] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.710962][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.103'. [ 107.743473][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.103'. [ 107.776360][ T6218] 9p: Bad value for 'wfdno' [ 108.098258][ T6228] loop1: detected capacity change from 0 to 128 [ 108.128907][ T6230] loop0: detected capacity change from 0 to 128 [ 108.194929][ T6230] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 108.570861][ T3562] kworker/u8:8: attempt to access beyond end of device [ 108.570861][ T3562] loop0: rw=1, sector=137, nr_sectors = 8 limit=128 [ 108.585391][ T3562] kworker/u8:8: attempt to access beyond end of device [ 108.585391][ T3562] loop0: rw=1, sector=153, nr_sectors = 8 limit=128 [ 108.623647][ T3562] kworker/u8:8: attempt to access beyond end of device [ 108.623647][ T3562] loop0: rw=1, sector=169, nr_sectors = 8 limit=128 [ 108.657662][ T3562] kworker/u8:8: attempt to access beyond end of device [ 108.657662][ T3562] loop0: rw=1, sector=185, nr_sectors = 8 limit=128 [ 108.695495][ T3562] kworker/u8:8: attempt to access beyond end of device [ 108.695495][ T3562] loop0: rw=1, sector=201, nr_sectors = 8 limit=128 [ 108.736518][ T3562] kworker/u8:8: attempt to access beyond end of device [ 108.736518][ T3562] loop0: rw=1, sector=217, nr_sectors = 8 limit=128 [ 108.783673][ T3562] kworker/u8:8: attempt to access beyond end of device [ 108.783673][ T3562] loop0: rw=1, sector=233, nr_sectors = 8 limit=128 [ 108.820332][ T3562] kworker/u8:8: attempt to access beyond end of device [ 108.820332][ T3562] loop0: rw=1, sector=249, nr_sectors = 8 limit=128 [ 108.863722][ T3562] kworker/u8:8: attempt to access beyond end of device [ 108.863722][ T3562] loop0: rw=1, sector=265, nr_sectors = 8 limit=128 [ 108.911218][ T3562] kworker/u8:8: attempt to access beyond end of device [ 108.911218][ T3562] loop0: rw=1, sector=281, nr_sectors = 8 limit=128 [ 108.981030][ T3562] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 109.270301][ T6243] loop2: detected capacity change from 0 to 1024 [ 109.365729][ T6243] ext4: Bad value for 'max_dir_size_kb' [ 109.635852][ T6249] loop0: detected capacity change from 0 to 1024 [ 109.726071][ T6249] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 109.787426][ T6249] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.020123][ T6249] EXT4-fs error (device loop0): ext4_map_blocks:819: inode #15: block 3: comm syz.0.116: lblock 3 mapped to illegal pblock 3 (length 3) [ 110.090475][ T6249] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 110.338565][ T6249] EXT4-fs (loop0): This should not happen!! Data will be lost [ 110.338565][ T6249] [ 110.422217][ T6255] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.116: lblock 3 mapped to illegal pblock 3 (length 1) [ 110.553647][ T6247] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 4: comm syz.0.116: lblock 4 mapped to illegal pblock 4 (length 2) [ 110.578296][ T6255] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.116: lblock 3 mapped to illegal pblock 3 (length 1) [ 110.673829][ T6255] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.116: lblock 3 mapped to illegal pblock 3 (length 1) [ 110.723755][ T6247] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 4: comm syz.0.116: lblock 4 mapped to illegal pblock 4 (length 2) [ 110.736124][ T6255] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.116: lblock 3 mapped to illegal pblock 3 (length 1) [ 110.828743][ T6247] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 4: comm syz.0.116: lblock 4 mapped to illegal pblock 4 (length 2) [ 110.833069][ T6255] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.116: lblock 3 mapped to illegal pblock 3 (length 1) [ 110.912520][ T6247] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 4: comm syz.0.116: lblock 4 mapped to illegal pblock 4 (length 2) [ 112.127474][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 112.151533][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 112.151533][ T12] [ 112.193194][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 114.960310][ T6313] loop2: detected capacity change from 0 to 1024 [ 115.252198][ T6313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 115.343075][ T6313] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.983875][ T6326] loop0: detected capacity change from 0 to 128 [ 115.998239][ T6313] EXT4-fs error (device loop2): ext4_map_blocks:819: inode #15: block 3: comm syz.2.133: lblock 3 mapped to illegal pblock 3 (length 3) [ 116.086683][ T6326] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 116.116495][ T6313] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 116.133601][ T6313] EXT4-fs (loop2): This should not happen!! Data will be lost [ 116.133601][ T6313] [ 116.151443][ T6326] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 116.191351][ T6312] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 4: comm syz.2.133: lblock 4 mapped to illegal pblock 4 (length 2) [ 116.265612][ T6330] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.133: lblock 3 mapped to illegal pblock 3 (length 1) [ 116.356984][ T6312] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 4: comm syz.2.133: lblock 4 mapped to illegal pblock 4 (length 2) [ 116.362307][ T6330] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.133: lblock 3 mapped to illegal pblock 3 (length 1) [ 116.377576][ T6312] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 4: comm syz.2.133: lblock 4 mapped to illegal pblock 4 (length 2) [ 116.474227][ T6312] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 4: comm syz.2.133: lblock 4 mapped to illegal pblock 4 (length 2) [ 116.532926][ T6330] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.133: lblock 3 mapped to illegal pblock 3 (length 1) [ 116.593695][ T6312] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 4: comm syz.2.133: lblock 4 mapped to illegal pblock 4 (length 2) [ 116.624347][ C1] ------------[ cut here ]------------ [ 116.630105][ C1] WARNING: ./include/linux/ns_common.h:255 at delayed_free_pidns+0x118/0x150, CPU#1: ksoftirqd/1/23 [ 116.641021][ C1] Modules linked in: [ 116.645759][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 116.650615][ T6330] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.133: lblock 3 mapped to illegal pblock 3 (length 1) [ 116.655136][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 116.655172][ C1] RIP: 0010:delayed_free_pidns+0x118/0x150 [ 116.655208][ C1] Code: 85 ed 7e 2b e8 99 9f 03 00 48 83 c3 a8 48 8b 3d 5e be c7 17 48 89 de 5b 41 5c 41 5e 41 5f 5d e9 1e 1e 5f 00 e8 79 9f 03 00 90 <0f> 0b 90 eb b4 e8 6e 9f 03 00 4c 89 ff be 03 00 00 00 e8 01 fb d2 [ 116.655228][ C1] RSP: 0018:ffffc900001d7890 EFLAGS: 00010246 [ 116.655260][ C1] RAX: ffffffff81bde0b7 RBX: ffff888025a4cdc8 RCX: ffff88801cee5b80 [ 116.655277][ C1] RDX: 0000000000000100 RSI: 0000000000000002 RDI: 0000000000000000 [ 116.655294][ C1] RBP: 0000000000000002 R08: ffff88805a1c05bb R09: 1ffff1100b4380b7 [ 116.736950][ C1] R10: dffffc0000000000 R11: ffffed100b4380b8 R12: dffffc0000000000 [ 116.745732][ C1] R13: ffffffff81a903d7 R14: ffff88805a1c0428 R15: ffff88805a1c05b8 [ 116.753894][ C1] FS: 0000000000000000(0000) GS:ffff888125fc2000(0000) knlGS:0000000000000000 [ 116.762867][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.769555][ C1] CR2: 0000200000e63030 CR3: 000000007820a000 CR4: 00000000003526f0 [ 116.777627][ C1] Call Trace: [ 116.781037][ C1] [ 116.784072][ C1] ? __pfx_delayed_free_pidns+0x10/0x10 [ 116.789666][ C1] rcu_core+0xcab/0x1770 [ 116.794031][ C1] ? __pfx_rcu_core+0x10/0x10 [ 116.798948][ C1] ? rcu_qs+0xc4/0x170 [ 116.803251][ C1] ? __pfx_rcu_qs+0x10/0x10 [ 116.807858][ C1] ? sched_clock_cpu+0x74/0x430 [ 116.812771][ C1] ? rcu_softirq_qs+0xf2/0x350 [ 116.817726][ C1] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 116.823037][ C1] handle_softirqs+0x286/0x870 [ 116.827914][ C1] ? run_ksoftirqd+0x9b/0x100 [ 116.832739][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 116.838178][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 116.843464][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 116.848548][ C1] run_ksoftirqd+0x9b/0x100 [ 116.853116][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 116.858380][ C1] smpboot_thread_fn+0x542/0xa60 [ 116.863421][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 116.868606][ C1] kthread+0x711/0x8a0 [ 116.872726][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 116.878330][ C1] ? __pfx_kthread+0x10/0x10 [ 116.883140][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 116.888478][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.893773][ C1] ? __pfx_kthread+0x10/0x10 [ 116.898420][ C1] ret_from_fork+0x599/0xb30 [ 116.903149][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 116.908415][ C1] ? __switch_to_asm+0x39/0x70 [ 116.913248][ C1] ? __switch_to_asm+0x33/0x70 [ 116.918130][ C1] ? __pfx_kthread+0x10/0x10 [ 116.922778][ C1] ret_from_fork_asm+0x1a/0x30 [ 116.927676][ C1] [ 116.930741][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 116.938058][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 116.947703][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 116.957775][ C1] Call Trace: [ 116.961067][ C1] [ 116.964031][ C1] dump_stack_lvl+0x99/0x250 [ 116.968647][ C1] ? __asan_memcpy+0x40/0x70 [ 116.973258][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.978479][ C1] ? __pfx__printk+0x10/0x10 [ 116.983090][ C1] vpanic+0x237/0x6d0 [ 116.987080][ C1] ? __pfx_vpanic+0x10/0x10 [ 116.991629][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 116.996846][ C1] panic+0xb9/0xc0 [ 117.000588][ C1] ? __pfx_panic+0x10/0x10 [ 117.005051][ C1] __warn+0x334/0x4c0 [ 117.009042][ C1] ? delayed_free_pidns+0x118/0x150 [ 117.014656][ C1] ? delayed_free_pidns+0x118/0x150 [ 117.020094][ C1] report_bug+0x2be/0x4f0 [ 117.024585][ C1] ? delayed_free_pidns+0x118/0x150 [ 117.029853][ C1] ? delayed_free_pidns+0x118/0x150 [ 117.035166][ C1] ? delayed_free_pidns+0x11a/0x150 [ 117.040500][ C1] handle_bug+0x84/0x160 [ 117.044784][ C1] exc_invalid_op+0x1a/0x50 [ 117.049326][ C1] asm_exc_invalid_op+0x1a/0x20 [ 117.054192][ C1] RIP: 0010:delayed_free_pidns+0x118/0x150 [ 117.060018][ C1] Code: 85 ed 7e 2b e8 99 9f 03 00 48 83 c3 a8 48 8b 3d 5e be c7 17 48 89 de 5b 41 5c 41 5e 41 5f 5d e9 1e 1e 5f 00 e8 79 9f 03 00 90 <0f> 0b 90 eb b4 e8 6e 9f 03 00 4c 89 ff be 03 00 00 00 e8 01 fb d2 [ 117.080252][ C1] RSP: 0018:ffffc900001d7890 EFLAGS: 00010246 [ 117.086333][ C1] RAX: ffffffff81bde0b7 RBX: ffff888025a4cdc8 RCX: ffff88801cee5b80 [ 117.094534][ C1] RDX: 0000000000000100 RSI: 0000000000000002 RDI: 0000000000000000 [ 117.102718][ C1] RBP: 0000000000000002 R08: ffff88805a1c05bb R09: 1ffff1100b4380b7 [ 117.110814][ C1] R10: dffffc0000000000 R11: ffffed100b4380b8 R12: dffffc0000000000 [ 117.118887][ C1] R13: ffffffff81a903d7 R14: ffff88805a1c0428 R15: ffff88805a1c05b8 [ 117.127776][ C1] ? rcu_core+0xc37/0x1770 [ 117.132327][ C1] ? delayed_free_pidns+0x117/0x150 [ 117.137621][ C1] ? __pfx_delayed_free_pidns+0x10/0x10 [ 117.143233][ C1] rcu_core+0xcab/0x1770 [ 117.147741][ C1] ? __pfx_rcu_core+0x10/0x10 [ 117.152464][ C1] ? rcu_qs+0xc4/0x170 [ 117.156550][ C1] ? __pfx_rcu_qs+0x10/0x10 [ 117.161070][ C1] ? sched_clock_cpu+0x74/0x430 [ 117.165975][ C1] ? rcu_softirq_qs+0xf2/0x350 [ 117.170841][ C1] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 117.176150][ C1] handle_softirqs+0x286/0x870 [ 117.180953][ C1] ? run_ksoftirqd+0x9b/0x100 [ 117.185661][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 117.190967][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 117.196010][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 117.201056][ C1] run_ksoftirqd+0x9b/0x100 [ 117.205604][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 117.210765][ C1] smpboot_thread_fn+0x542/0xa60 [ 117.215726][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 117.220781][ C1] kthread+0x711/0x8a0 [ 117.224869][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 117.230353][ C1] ? __pfx_kthread+0x10/0x10 [ 117.234957][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 117.240180][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.245395][ C1] ? __pfx_kthread+0x10/0x10 [ 117.250002][ C1] ret_from_fork+0x599/0xb30 [ 117.254611][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 117.259772][ C1] ? __switch_to_asm+0x39/0x70 [ 117.264546][ C1] ? __switch_to_asm+0x33/0x70 [ 117.269402][ C1] ? __pfx_kthread+0x10/0x10 [ 117.274015][ C1] ret_from_fork_asm+0x1a/0x30 [ 117.278890][ C1] [ 117.282286][ C1] Kernel Offset: disabled [ 117.286631][ C1] Rebooting in 86400 seconds..