last executing test programs: 10.457202959s ago: executing program 2 (id=105): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 9.971328456s ago: executing program 2 (id=111): socket$inet6(0xa, 0x4, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, 0x0, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) 8.922817154s ago: executing program 3 (id=116): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52e, &(0x7f0000000e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x85, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) listen(r3, 0xfff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@remote, 0x0, 0x0, 0xfffc}}}, 0x50}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 8.36672099s ago: executing program 0 (id=118): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendto$inet(r1, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @empty}, 0x10) listen(r1, 0xda90) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x34, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$inet6(0xa, 0x3, 0x3ff) unshare(0x6a040000) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r6, @ANYBLOB="00080300000000000000330000000e0001006e657464657673696d0000000f0002006e657064657673696d30000008008e0000000000"], 0x3c}}, 0x20000040) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, 0x0, 0x20048010) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) socketpair(0x1a, 0x1, 0x11, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}}}, 0x32) 5.799461565s ago: executing program 3 (id=122): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000600)=""/73, 0x49}, {&(0x7f0000000700)=""/252, 0xfc}], 0x2}}], 0x1, 0x10000, 0x0) 5.72124303s ago: executing program 2 (id=123): socket$kcm(0xa, 0x5, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5.619950599s ago: executing program 2 (id=125): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 5.610964214s ago: executing program 3 (id=126): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x5}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0xf}], 0x74) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, 0x0, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) 5.514724769s ago: executing program 0 (id=127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000022c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797ad000000000140000"], 0x7c}}, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r4, &(0x7f0000000100), 0x9) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00', @ANYRES64, @ANYRES16], 0x4c}}, 0x4000804) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}}, 0x0) 5.15849064s ago: executing program 0 (id=129): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52e, &(0x7f0000000e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x85, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) listen(r4, 0xfff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@remote, 0x0, 0x0, 0xfffc}}}, 0x50}}, 0x0) 5.157614805s ago: executing program 2 (id=130): socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) unshare(0x26020480) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, 0x0, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000007c0)=0xeb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) 5.007937551s ago: executing program 1 (id=131): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) 3.685703957s ago: executing program 1 (id=132): syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xffffffffffffffa3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r0, 0xfffffffd) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) syz_io_uring_setup(0x4b93, 0x0, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000480)={0x1, 0x0, 0x0, &(0x7f0000001740)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="1b709c3cd9a8442f1d60a43c4ad74f23ba879d3bd9a25380da455a979185e7ad67abf4a1d445540798309c4a752169f72c5d200c52f816402a167f39e3c32dfe5185edc1f4396fc9a9c2c079e348cb588e4898d89a39ea24f694a48ce59cb1c6be89d46d482f88d9"], 0x7) 3.329598665s ago: executing program 3 (id=133): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52e, &(0x7f0000000e00)="$eJzs3c1vHGcZAPBnxrvBaVzsAodSqR+iQUkF2Y1r2loc2iIQt0qgcg+WvbGsrLORd93GVoUc8QcgIQSVOHHigsSNCxLqn4CQKtE7AgRCkMKBAzBoZmdTZztrO+p+JPbvJ72777yzO8/zbryz73xkJoAz67mIeD0i5iLihYhYLNvTssRBv+Sv+/DuO+t5yZvf/HsSSdkWUVTvuVC+bb7/VKm7t39jrd1u7ZTTzd72rWZ3b//K1vbaZmuzdXNlZfnl1VdWX1q9OpZ+5v169Rt//vEPfv7NV3/z5bf/cO2vl7+XJ/31cv6gX+NTfHrxQfFYzz+Le2oRsTPeYDMzV/anPutEAAA4kXyU+pmI+EIx/l+MuWI0Vxge0s1PPzsAAABgHLLXFuI/SUQGAAAAnFqvRcRCJGmjPBdgIdK00eifw/u5eCxtd7q9L13v7N7cyOdFLEU9vb7Vbl0tz6ldinqSTy8X9Y+mXxyaXomIJyLiR4vni+nGeqe9MeudHwAAAHBGXBja/v/XYn/7HwAAADhllmadAAAAADBxo7b/kynnAQAAAEyO4/8AAABwqn3rjTfykg3uf73x1t7ujc5bVzZa3RuN7d31xnpn51Zjs9PZLK7Zt33UsuoR0e50bn0lYvd2s9fq9prdvf1r253dm71rW+4fCAAAALPyxLPvfZBExMFXzxcldy5/mBvxBucKwKmRPsiL/zS5PIDpG/UzfwLnxpkHMH21WScAzM7BrBMAZu2+S31UDAoOn7xz3z6D304uJwAAYLwufb76+H+tPJ//CPb/wyPu8La8YwFwtnyC4//AI85vPpxd9QcaAdyZYCbArBx3q4+RF++oOv5fuWcwy45dFgAAMFELRXk2bZTHAhciTRuNiMeL/+pfT65vtVtXI+LTEfH7xfqn8unl4p2J2wMCAAAAAAAAAAAAAAAAAAAAAAAAwAllWRIZAAAAcKpFpH9Jyvt/XVq8uDC8f+Bc8u/FKG/p9fZP3/zJ7bVeb2c5b//Hvfbeu2X7i7PYgwEAAABnUe3IuYPt9MF2PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM04d331kflGnG/dvXImKpKn4t5ovn+ahHxGP/TKJ26H1JRMyNIf7BnYh4sip+kqcVS2UWw/HTiDg/nfhPZ1lWGf/CGOLDWfZevv55ver7l8ZzxXP1979Wlk/qvvXfuV8dmpPeW//NjVj/PX7CGE+9/8vmyPh3Ip6qVa9/BvGTEfGfr1pgxYfy3e/s73+ssb/wyH4Wcany9ye5L1azt32r2d3bv7K1vbbZ2mzdXFlZfnn1ldWXVq82r2+1W+VjZR9/+PSv/zfU9N+sr+h/jIi/dEz/L+aV+qHGbDhMGez923c/26/WhxZRxL/8fPXf35NHxM//Jr5Y/g7k8y8N6gf9+mHP/OJ3z1QmVsbfGNH/4/79L49a6JAXvv39P57wpQDAFHT39m+stdutnYlX3s2ybFqxTl6J9KQvLoaLU/3EplsZjO4mFmL+YenplCsXH440HqQyjj1bAADAw+ajQf+sMwEAAAAAAAAAAAAAAAAAAICzq7sX6aQvJzYc82A2XQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONL/AwAA///zaNkr") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x85, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) listen(r3, 0xfff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@remote, 0x0, 0x0, 0xfffc}}}, 0x50}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 2.988908953s ago: executing program 2 (id=134): socket$inet6(0xa, 0x4, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, 0x0, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) 2.288542628s ago: executing program 0 (id=136): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000600)=""/73, 0x49}], 0x1}}], 0x1, 0x10000, 0x0) 2.107971325s ago: executing program 1 (id=137): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.873136173s ago: executing program 0 (id=138): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendto$inet(r1, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @empty}, 0x10) listen(r1, 0xda90) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x34, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$inet6(0xa, 0x3, 0x3ff) unshare(0x6a040000) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00080300000000000000330000000e0001006e657464657673696d0000000f0002006e657064657673696d30000008008e0000000000"], 0x3c}}, 0x20000040) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, 0x0, 0x20048010) sendmsg$nl_route(r4, 0x0, 0x4040) socketpair(0x1a, 0x1, 0x11, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}}}, 0x32) 1.798821012s ago: executing program 4 (id=139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000022c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797ad000000000140000"], 0x7c}}, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r4, &(0x7f0000000100), 0x9) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00', @ANYRES64, @ANYRES16], 0x4c}}, 0x4000804) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}}, 0x0) 1.610768147s ago: executing program 1 (id=140): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}]}]}]}}]}, 0x44}}, 0x0) 1.35957055s ago: executing program 3 (id=141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) 1.323963872s ago: executing program 1 (id=142): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x7d243a6ea807936d, 0x12, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x880) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x62) listen(0xffffffffffffffff, 0x3) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8000800}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x24044884) syz_genetlink_get_family_id$ieee802154(0x0, r0) 1.322905133s ago: executing program 4 (id=143): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) 1.175913982s ago: executing program 4 (id=144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}}, 0x0) 1.081765344s ago: executing program 4 (id=145): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {0x0}, {&(0x7f0000002d40)=""/4116, 0x1014}, {&(0x7f0000000440)=""/231, 0xe7}], 0x4}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) 944.997889ms ago: executing program 3 (id=146): socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) unshare(0x26020480) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, 0x0, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000007c0)=0xeb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) 906.472398ms ago: executing program 0 (id=147): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52e, &(0x7f0000000e00)="$eJzs3c1vHGcZAPBnxrvBaVzsAodSqR+iQUkF2Y1r2loc2iIQt0qgcg+WvbGsrLORd93GVoUc8QcgIQSVOHHigsSNCxLqn4CQKtE7AgRCkMKBAzBoZmdTZztrO+p+JPbvJ72777yzO8/zbryz73xkJoAz67mIeD0i5iLihYhYLNvTssRBv+Sv+/DuO+t5yZvf/HsSSdkWUVTvuVC+bb7/VKm7t39jrd1u7ZTTzd72rWZ3b//K1vbaZmuzdXNlZfnl1VdWX1q9OpZ+5v169Rt//vEPfv7NV3/z5bf/cO2vl7+XJ/31cv6gX+NTfHrxQfFYzz+Le2oRsTPeYDMzV/anPutEAAA4kXyU+pmI+EIx/l+MuWI0Vxge0s1PPzsAAABgHLLXFuI/SUQGAAAAnFqvRcRCJGmjPBdgIdK00eifw/u5eCxtd7q9L13v7N7cyOdFLEU9vb7Vbl0tz6ldinqSTy8X9Y+mXxyaXomIJyLiR4vni+nGeqe9MeudHwAAAHBGXBja/v/XYn/7HwAAADhllmadAAAAADBxo7b/kynnAQAAAEyO4/8AAABwqn3rjTfykg3uf73x1t7ujc5bVzZa3RuN7d31xnpn51Zjs9PZLK7Zt33UsuoR0e50bn0lYvd2s9fq9prdvf1r253dm71rW+4fCAAAALPyxLPvfZBExMFXzxcldy5/mBvxBucKwKmRPsiL/zS5PIDpG/UzfwLnxpkHMH21WScAzM7BrBMAZu2+S31UDAoOn7xz3z6D304uJwAAYLwufb76+H+tPJ//CPb/wyPu8La8YwFwtnyC4//AI85vPpxd9QcaAdyZYCbArBx3q4+RF++oOv5fuWcwy45dFgAAMFELRXk2bZTHAhciTRuNiMeL/+pfT65vtVtXI+LTEfH7xfqn8unl4p2J2wMCAAAAAAAAAAAAAAAAAAAAAAAAwAllWRIZAAAAcKpFpH9Jyvt/XVq8uDC8f+Bc8u/FKG/p9fZP3/zJ7bVeb2c5b//Hvfbeu2X7i7PYgwEAAABnUe3IuYPt9MF2PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM04d331kflGnG/dvXImKpKn4t5ovn+ahHxGP/TKJ26H1JRMyNIf7BnYh4sip+kqcVS2UWw/HTiDg/nfhPZ1lWGf/CGOLDWfZevv55ver7l8ZzxXP1979Wlk/qvvXfuV8dmpPeW//NjVj/PX7CGE+9/8vmyPh3Ip6qVa9/BvGTEfGfr1pgxYfy3e/s73+ssb/wyH4Wcany9ye5L1azt32r2d3bv7K1vbbZ2mzdXFlZfnn1ldWXVq82r2+1W+VjZR9/+PSv/zfU9N+sr+h/jIi/dEz/L+aV+qHGbDhMGez923c/26/WhxZRxL/8fPXf35NHxM//Jr5Y/g7k8y8N6gf9+mHP/OJ3z1QmVsbfGNH/4/79L49a6JAXvv39P57wpQDAFHT39m+stdutnYlX3s2ybFqxTl6J9KQvLoaLU/3EplsZjO4mFmL+YenplCsXH440HqQyjj1bAADAw+ajQf+sMwEAAAAAAAAAAAAAAAAAAICzq7sX6aQvJzYc82A2XQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONL/AwAA///zaNkr") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x85, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) listen(r4, 0xfff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) 517.325945ms ago: executing program 4 (id=148): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}], 0x1}}], 0x1, 0x10000, 0x0) 401.155647ms ago: executing program 4 (id=149): syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xffffffffffffffa3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r0, 0xfffffffd) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) syz_io_uring_setup(0x4b93, 0x0, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000480)={0x1, 0x0, 0x0, &(0x7f0000001740)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000000)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="1b709c3cd9a8442f1d60a43c4ad74f23ba879d3bd9a25380da455a979185e7ad67abf4a1d445540798309c4a752169f72c5d200c52f816402a167f39e3c32dfe5185edc1f4396fc9a9c2c079e348cb588e4898d89a39ea24f694a48ce59cb1c6be89d46d482f88d9"], 0x7) 0s ago: executing program 1 (id=150): socket$kcm(0xa, 0x5, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.81' (ED25519) to the list of known hosts. [ 74.186482][ T5824] cgroup: Unknown subsys name 'net' [ 74.377910][ T5824] cgroup: Unknown subsys name 'cpuset' [ 74.386823][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.865732][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.874864][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.894721][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.898377][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.902445][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.909989][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.923472][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.931318][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.939930][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.944732][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.954373][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.964752][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.971964][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.972166][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.987989][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.995882][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.010143][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.040506][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.049086][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.052177][ T5855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.063599][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.074301][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.081564][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.089928][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.097914][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.108881][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.618472][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 80.712751][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 80.808200][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 80.929567][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.936863][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.944613][ T5835] bridge_slave_0: entered allmulticast mode [ 80.951936][ T5835] bridge_slave_0: entered promiscuous mode [ 80.999710][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 81.022206][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.029419][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.036953][ T5835] bridge_slave_1: entered allmulticast mode [ 81.044190][ T5835] bridge_slave_1: entered promiscuous mode [ 81.051400][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 81.077750][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.084987][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.092110][ T5847] bridge_slave_0: entered allmulticast mode [ 81.099635][ T5847] bridge_slave_0: entered promiscuous mode [ 81.168059][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.175266][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.182358][ T5847] bridge_slave_1: entered allmulticast mode [ 81.189917][ T5847] bridge_slave_1: entered promiscuous mode [ 81.227428][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.234618][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.241778][ T5834] bridge_slave_0: entered allmulticast mode [ 81.249470][ T5834] bridge_slave_0: entered promiscuous mode [ 81.275966][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.301827][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.309315][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.317025][ T5834] bridge_slave_1: entered allmulticast mode [ 81.324412][ T5834] bridge_slave_1: entered promiscuous mode [ 81.339314][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.351039][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.395891][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.471810][ T5835] team0: Port device team_slave_0 added [ 81.493817][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.506044][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.529935][ T5847] team0: Port device team_slave_0 added [ 81.538728][ T5847] team0: Port device team_slave_1 added [ 81.546172][ T5835] team0: Port device team_slave_1 added [ 81.598316][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.606056][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.613212][ T5836] bridge_slave_0: entered allmulticast mode [ 81.620808][ T5836] bridge_slave_0: entered promiscuous mode [ 81.655621][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.662733][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.670089][ T5838] bridge_slave_0: entered allmulticast mode [ 81.677526][ T5838] bridge_slave_0: entered promiscuous mode [ 81.685896][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.693062][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.700232][ T5838] bridge_slave_1: entered allmulticast mode [ 81.708067][ T5838] bridge_slave_1: entered promiscuous mode [ 81.716837][ T5834] team0: Port device team_slave_0 added [ 81.747997][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.755276][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.762383][ T5836] bridge_slave_1: entered allmulticast mode [ 81.769897][ T5836] bridge_slave_1: entered promiscuous mode [ 81.802429][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.809482][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.835785][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.848716][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.855747][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.881788][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.894456][ T5834] team0: Port device team_slave_1 added [ 81.902813][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.926406][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.937053][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.944289][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.970311][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.981938][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.989164][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.015210][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.046447][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.071477][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.120138][ T5836] team0: Port device team_slave_0 added [ 82.126697][ T5840] Bluetooth: hci1: command tx timeout [ 82.132441][ T5854] Bluetooth: hci2: command tx timeout [ 82.138372][ T5840] Bluetooth: hci3: command tx timeout [ 82.144123][ T5157] Bluetooth: hci0: command tx timeout [ 82.182026][ T5838] team0: Port device team_slave_0 added [ 82.189638][ T5836] team0: Port device team_slave_1 added [ 82.204901][ T5854] Bluetooth: hci4: command tx timeout [ 82.223518][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.230546][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.257334][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.269801][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.276983][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.303148][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.316496][ T5838] team0: Port device team_slave_1 added [ 82.345278][ T5847] hsr_slave_0: entered promiscuous mode [ 82.351759][ T5847] hsr_slave_1: entered promiscuous mode [ 82.382869][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.389908][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.416054][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.428854][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.435879][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.462313][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.533257][ T5835] hsr_slave_0: entered promiscuous mode [ 82.539787][ T5835] hsr_slave_1: entered promiscuous mode [ 82.546075][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.553793][ T5835] Cannot create hsr debugfs directory [ 82.572134][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.580356][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.606770][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.642881][ T5834] hsr_slave_0: entered promiscuous mode [ 82.649473][ T5834] hsr_slave_1: entered promiscuous mode [ 82.655851][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.663406][ T5834] Cannot create hsr debugfs directory [ 82.669792][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.676981][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.702960][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.885629][ T5836] hsr_slave_0: entered promiscuous mode [ 82.891964][ T5836] hsr_slave_1: entered promiscuous mode [ 82.898422][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.906275][ T5836] Cannot create hsr debugfs directory [ 82.927074][ T5838] hsr_slave_0: entered promiscuous mode [ 82.933397][ T5838] hsr_slave_1: entered promiscuous mode [ 82.939961][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.947671][ T5838] Cannot create hsr debugfs directory [ 83.330661][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.348393][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.371513][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.383267][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.435231][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.447061][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.460278][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.473535][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.579669][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.592687][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.611502][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.626533][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.701943][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.750630][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.761561][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.772698][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.783097][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.813076][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.849586][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.856826][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.881386][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.888577][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.960253][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.987796][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.001185][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.011927][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.023104][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.109625][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.159116][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.166320][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.198545][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.205728][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.223346][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.230596][ T5157] Bluetooth: hci0: command tx timeout [ 84.231250][ T5855] Bluetooth: hci1: command tx timeout [ 84.236280][ T5840] Bluetooth: hci3: command tx timeout [ 84.247029][ T5854] Bluetooth: hci2: command tx timeout [ 84.294001][ T5840] Bluetooth: hci4: command tx timeout [ 84.333774][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.357702][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.399986][ T3517] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.407153][ T3517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.423163][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.430312][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.446876][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.474976][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.530672][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.582664][ T3517] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.589903][ T3517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.612366][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.648483][ T3517] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.655634][ T3517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.722191][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.756793][ T5847] veth0_vlan: entered promiscuous mode [ 84.821550][ T5847] veth1_vlan: entered promiscuous mode [ 84.842347][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.921422][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.928647][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.970156][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.977313][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.991913][ T5847] veth0_macvtap: entered promiscuous mode [ 85.009439][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.029018][ T5847] veth1_macvtap: entered promiscuous mode [ 85.122341][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.135499][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.162625][ T5836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.175330][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.208387][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.261953][ T5847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.272429][ T5847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.284738][ T5847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.293445][ T5847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.337221][ T5834] veth0_vlan: entered promiscuous mode [ 85.348445][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.372907][ T5834] veth1_vlan: entered promiscuous mode [ 85.443249][ T5835] veth0_vlan: entered promiscuous mode [ 85.500783][ T5835] veth1_vlan: entered promiscuous mode [ 85.563599][ T5834] veth0_macvtap: entered promiscuous mode [ 85.573936][ T5838] veth0_vlan: entered promiscuous mode [ 85.587527][ T3466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.593410][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.605705][ T3466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.623166][ T5834] veth1_macvtap: entered promiscuous mode [ 85.648710][ T5838] veth1_vlan: entered promiscuous mode [ 85.700588][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.724757][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.725731][ T5835] veth0_macvtap: entered promiscuous mode [ 85.732581][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.745514][ T5835] veth1_macvtap: entered promiscuous mode [ 85.769018][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.815696][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.825005][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.833716][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.843873][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.873075][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.902949][ T5838] veth0_macvtap: entered promiscuous mode [ 85.923192][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.940309][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.975056][ T5838] veth1_macvtap: entered promiscuous mode [ 86.017244][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.031153][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.053551][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.062553][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.155826][ T5957] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4'. [ 86.173680][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.181935][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.205172][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.226905][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.284921][ T5840] Bluetooth: hci1: command tx timeout [ 86.285932][ T5854] Bluetooth: hci3: command tx timeout [ 86.290346][ T5855] Bluetooth: hci2: command tx timeout [ 86.298631][ T5157] Bluetooth: hci0: command tx timeout [ 86.324814][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.333508][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.348702][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.358550][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.367537][ T5157] Bluetooth: hci4: command tx timeout [ 86.420570][ T5960] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.467768][ T3517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.482990][ T3517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.513372][ T5960] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.561577][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.571636][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.649148][ T5960] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.691209][ T3517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.728669][ T3517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.730721][ T5964] Zero length message leads to an empty skb [ 86.784303][ T5960] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.852486][ T3517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.864371][ T3532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.891591][ T3517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.892713][ T3532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.907738][ T5836] veth0_vlan: entered promiscuous mode [ 86.959038][ T5836] veth1_vlan: entered promiscuous mode [ 87.189279][ T5960] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.274512][ T5960] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.371767][ T5960] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.375835][ T5975] loop0: detected capacity change from 0 to 512 [ 87.431519][ T5975] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 87.456538][ T5975] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 87.490020][ T5960] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.499038][ T5975] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 87.500032][ T5975] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 87.510672][ T5836] veth0_macvtap: entered promiscuous mode [ 87.529614][ T5836] veth1_macvtap: entered promiscuous mode [ 87.538438][ T5975] System zones: 0-2, 18-18, 34-34 [ 87.586763][ T5975] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.1: iget: bad i_size value: 360287970189639680 [ 87.627138][ T5975] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.1: couldn't read orphan inode 15 (err -117) [ 87.648494][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.734968][ T5975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.743411][ T5982] loop3: detected capacity change from 0 to 512 [ 87.833673][ T5982] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 87.863636][ T5982] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 87.909547][ T5982] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 87.925240][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.954321][ T5982] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 87.994444][ T5982] System zones: 0-2, 18-18, 34-34 [ 88.034675][ T5982] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.7: iget: bad i_size value: 360287970189639680 [ 88.074633][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.122034][ T5982] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.7: couldn't read orphan inode 15 (err -117) [ 88.143631][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.185724][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.194503][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.205258][ T5982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.237328][ T5987] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1'. [ 88.246669][ T5987] unsupported nlmsg_type 40 [ 88.365045][ T5157] Bluetooth: hci2: command tx timeout [ 88.370780][ T5157] Bluetooth: hci0: command tx timeout [ 88.376735][ T5157] Bluetooth: hci1: command tx timeout [ 88.382391][ T5157] Bluetooth: hci3: command tx timeout [ 88.444485][ T5854] Bluetooth: hci4: command tx timeout [ 88.540991][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.593201][ T1015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.648392][ T1015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.664625][ T5989] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7'. [ 88.925686][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.961853][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.197844][ T6003] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.13'. [ 90.007182][ T6017] loop4: detected capacity change from 0 to 512 [ 90.073075][ T6018] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.104484][ T6017] ======================================================= [ 90.104484][ T6017] WARNING: The mand mount option has been deprecated and [ 90.104484][ T6017] and is ignored by this kernel. Remove the mand [ 90.104484][ T6017] option from the mount to silence this warning. [ 90.104484][ T6017] ======================================================= [ 90.211067][ T6017] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.323538][ T6017] EXT4-fs (loop4): orphan cleanup on readonly fs [ 90.392230][ T6017] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5: bg 0: block 248: padding at end of block bitmap is not set [ 90.431178][ T6017] Quota error (device loop4): write_blk: dquota write failed [ 90.504205][ T6017] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 90.517412][ T6017] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.5: Failed to acquire dquot type 1 [ 90.539842][ T6017] EXT4-fs (loop4): 1 truncate cleaned up [ 90.578060][ T6017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.621649][ T6018] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.737761][ T6018] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.802171][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.843567][ T6018] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.919426][ T6017] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.149843][ T6031] loop3: detected capacity change from 0 to 512 [ 91.212494][ T6018] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.250086][ T6031] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 91.302841][ T6031] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 91.304817][ T6018] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.349308][ T6031] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 91.390454][ T6031] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 91.417490][ T6031] System zones: 0-2, 18-18, 34-34 [ 91.443449][ T6031] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.20: iget: bad i_size value: 360287970189639680 [ 91.485888][ T6031] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.20: couldn't read orphan inode 15 (err -117) [ 91.495238][ T6018] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.532630][ T6031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.580429][ T6018] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.780128][ T24] cfg80211: failed to load regulatory.db [ 91.840012][ T6042] netlink: 60 bytes leftover after parsing attributes in process `syz.3.20'. [ 92.065275][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.177176][ T6048] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.279524][ T6048] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.279973][ T6052] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.26'. [ 92.571853][ T6048] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.100046][ T6048] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.134989][ T6065] loop0: detected capacity change from 0 to 512 [ 93.203020][ T6065] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 93.228492][ T6065] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 93.259652][ T6065] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 93.303880][ T6048] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.309379][ T6065] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 93.342168][ T6065] System zones: 0-2, 18-18, 34-34 [ 93.372579][ T6048] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.382646][ T6065] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.31: iget: bad i_size value: 360287970189639680 [ 93.412244][ T6065] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.31: couldn't read orphan inode 15 (err -117) [ 93.452103][ T6048] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.472536][ T6065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.749890][ T6048] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.914303][ T6079] netlink: 60 bytes leftover after parsing attributes in process `syz.0.31'. [ 94.032702][ T6083] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.297178][ T6083] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.358746][ T6083] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.483174][ T6083] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.824318][ T6092] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.39'. [ 94.984388][ T6094] loop3: detected capacity change from 0 to 512 [ 95.022177][ T6094] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.036979][ T6094] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 95.049990][ T6094] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 95.067838][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.082800][ T6094] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 95.106296][ T6094] System zones: 0-2, 18-18, 34-34 [ 95.111986][ T6094] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.40: iget: bad i_size value: 360287970189639680 [ 95.147944][ T6094] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.40: couldn't read orphan inode 15 (err -117) [ 95.170970][ T6094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.534827][ T6101] netlink: 60 bytes leftover after parsing attributes in process `syz.3.40'. [ 96.064484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.067326][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.116578][ T6131] loop3: detected capacity change from 0 to 512 [ 97.137050][ T6131] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.176422][ T6131] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 97.232039][ T6131] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 97.289099][ T6131] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 97.299029][ T6131] System zones: 0-2, 18-18, 34-34 [ 97.321069][ T6131] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.52: iget: bad i_size value: 360287970189639680 [ 97.338877][ T6131] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.52: couldn't read orphan inode 15 (err -117) [ 97.353725][ T6131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.521465][ T6138] loop2: detected capacity change from 0 to 512 [ 97.656436][ T6138] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.724584][ T6138] EXT4-fs (loop2): orphan cleanup on readonly fs [ 97.774881][ T6142] netlink: 60 bytes leftover after parsing attributes in process `syz.3.52'. [ 97.787852][ T6138] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.53: bg 0: block 248: padding at end of block bitmap is not set [ 97.830550][ T6138] Quota error (device loop2): write_blk: dquota write failed [ 97.875488][ T6138] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 97.909257][ T6138] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.53: Failed to acquire dquot type 1 [ 97.971451][ T6138] EXT4-fs (loop2): 1 truncate cleaned up [ 98.006929][ T6138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.272419][ T6138] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.393839][ T6151] loop0: detected capacity change from 0 to 512 [ 98.416782][ T6151] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 98.449531][ T6151] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 98.497653][ T6151] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 98.524476][ T6151] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 98.550833][ T6151] System zones: 0-2, 18-18, 34-34 [ 98.569489][ T6151] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.57: iget: bad i_size value: 360287970189639680 [ 98.618003][ T6151] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.57: couldn't read orphan inode 15 (err -117) [ 98.660156][ T6151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.737378][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.011431][ T6157] netlink: 60 bytes leftover after parsing attributes in process `syz.0.57'. [ 99.580751][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.616656][ T6083] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.648885][ T6083] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.684400][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.733575][ T6083] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.794649][ T6083] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.861697][ T6170] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.026609][ T6170] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.185326][ T6170] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.382665][ T6170] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.681015][ T6170] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.785979][ T6170] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.872158][ T6170] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.917394][ T6170] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.940977][ T6197] loop1: detected capacity change from 0 to 512 [ 100.995886][ T6197] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.024096][ T6197] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 101.065858][ T6197] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 101.127762][ T6197] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 101.149018][ T6197] System zones: 0-2, 18-18, 34-34 [ 101.156798][ T6197] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.69: iget: bad i_size value: 360287970189639680 [ 101.174129][ T6197] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.69: couldn't read orphan inode 15 (err -117) [ 101.195851][ T6197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.207920][ T6201] loop0: detected capacity change from 0 to 512 [ 101.215118][ T6201] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.240086][ T6201] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 101.294362][ T6201] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 101.319981][ T6201] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 101.395110][ T6201] System zones: 0-2, 18-18, 34-34 [ 101.428015][ T6201] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.72: iget: bad i_size value: 360287970189639680 [ 101.503498][ T6201] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.72: couldn't read orphan inode 15 (err -117) [ 101.516982][ T6197] netlink: 60 bytes leftover after parsing attributes in process `syz.1.69'. [ 101.671536][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.705129][ T6201] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.012390][ T6215] netlink: 60 bytes leftover after parsing attributes in process `syz.0.72'. [ 102.546545][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.576505][ T6219] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.723689][ T6219] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.967975][ T6219] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.185221][ T6219] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.388238][ T6239] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.518085][ T6239] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.593416][ T6246] loop2: detected capacity change from 0 to 512 [ 103.613009][ T6246] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 103.626286][ T6239] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.651168][ T6246] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 103.694502][ T6239] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.713000][ T6246] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 103.727670][ T6246] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 103.737032][ T6246] System zones: 0-2, 18-18, 34-34 [ 103.744651][ T6246] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.86: iget: bad i_size value: 360287970189639680 [ 103.771244][ T6246] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.86: couldn't read orphan inode 15 (err -117) [ 103.785358][ T6246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.959220][ T6246] netlink: 60 bytes leftover after parsing attributes in process `syz.2.86'. [ 104.078986][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.232001][ T6259] loop2: detected capacity change from 0 to 512 [ 104.257529][ T6259] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 104.284264][ T6259] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 104.311711][ T6259] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 104.369160][ T6259] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 104.397786][ T6259] System zones: 0-2, 18-18, 34-34 [ 104.409868][ T6259] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.89: iget: bad i_size value: 360287970189639680 [ 104.425782][ T6259] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.89: couldn't read orphan inode 15 (err -117) [ 104.459939][ T6259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.811788][ T6272] netlink: 60 bytes leftover after parsing attributes in process `syz.2.89'. [ 105.347979][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.443643][ T6239] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.554224][ T6279] loop4: detected capacity change from 0 to 512 [ 105.679498][ T6279] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.747836][ T6279] EXT4-fs (loop4): orphan cleanup on readonly fs [ 105.762585][ T6279] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.96: bg 0: block 248: padding at end of block bitmap is not set [ 105.787822][ T6279] Quota error (device loop4): write_blk: dquota write failed [ 105.795814][ T6279] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 105.806182][ T6279] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.96: Failed to acquire dquot type 1 [ 105.960853][ T6279] EXT4-fs (loop4): 1 truncate cleaned up [ 106.024790][ T6279] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.182243][ T6239] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.375078][ T6239] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.433445][ T6279] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.518768][ T6239] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.641813][ T6219] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.771961][ T6219] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.832004][ T6219] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.844573][ T6288] loop2: detected capacity change from 0 to 512 [ 106.888186][ T6219] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.945459][ T6288] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 107.031412][ T6288] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 107.093489][ T6288] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 107.189919][ T6288] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 107.245560][ T6288] System zones: 0-2, 18-18, 34-34 [ 107.283221][ T6288] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.100: iget: bad i_size value: 360287970189639680 [ 107.372309][ T6288] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.100: couldn't read orphan inode 15 (err -117) [ 107.458712][ T6288] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.736213][ T6288] netlink: 60 bytes leftover after parsing attributes in process `syz.2.100'. [ 107.834520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.845221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.853549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.871664][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.888492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.144608][ T6318] loop4: detected capacity change from 0 to 512 [ 108.180709][ T6318] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 108.244462][ T6318] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 108.303154][ T6318] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 108.397767][ T6318] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 108.416239][ T6318] System zones: 0-2, 18-18, 34-34 [ 108.477399][ T6318] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.108: iget: bad i_size value: 360287970189639680 [ 108.480557][ T6331] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.550949][ T6318] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.108: couldn't read orphan inode 15 (err -117) [ 108.597850][ T6318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.647376][ T6331] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.942090][ T6331] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.021590][ T6341] netlink: 60 bytes leftover after parsing attributes in process `syz.4.108'. [ 109.327059][ T6331] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.483162][ T6345] loop3: detected capacity change from 0 to 512 [ 109.606561][ T6347] loop1: detected capacity change from 0 to 512 [ 109.927149][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.940237][ T6347] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.959205][ T6347] EXT4-fs (loop1): orphan cleanup on readonly fs [ 109.978909][ T6347] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.115: bg 0: block 248: padding at end of block bitmap is not set [ 109.998136][ T6347] Quota error (device loop1): write_blk: dquota write failed [ 110.006228][ T6347] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 110.016384][ T6347] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.115: Failed to acquire dquot type 1 [ 110.039241][ T6347] EXT4-fs (loop1): 1 truncate cleaned up [ 110.058495][ T6345] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 110.192410][ T6345] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 110.434795][ T6345] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 110.661607][ T6345] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 110.895583][ T6345] System zones: 0-2, 18-18, 34-34 [ 110.911341][ T6347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.947199][ T6345] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.116: iget: bad i_size value: 360287970189639680 [ 111.005265][ T6345] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.116: couldn't read orphan inode 15 (err -117) [ 111.719444][ T6345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.760246][ T6331] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.813879][ T6331] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.941883][ T6347] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.128434][ T6363] netlink: 60 bytes leftover after parsing attributes in process `syz.3.116'. [ 112.156262][ T6331] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.466658][ T6331] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.492679][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.811032][ T6379] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.886816][ T6379] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.959569][ T6379] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.031233][ T6379] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.124468][ T6388] loop0: detected capacity change from 0 to 512 [ 113.234515][ T6390] loop2: detected capacity change from 0 to 512 [ 113.819717][ T6379] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.104203][ T6388] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.147566][ T6390] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.168559][ T6390] EXT4-fs (loop2): orphan cleanup on readonly fs [ 114.194165][ T6390] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.130: bg 0: block 248: padding at end of block bitmap is not set [ 114.227894][ T6390] Quota error (device loop2): write_blk: dquota write failed [ 114.235759][ T6390] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 114.245902][ T6390] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.130: Failed to acquire dquot type 1 [ 114.261267][ T6390] EXT4-fs (loop2): 1 truncate cleaned up [ 114.326919][ T6390] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.450914][ T6388] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 114.529489][ T6379] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.627618][ T6388] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 114.683198][ T6379] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.725475][ T6388] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 114.795685][ T6390] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.811794][ T6388] System zones: 0-2, 18-18, 34-34 [ 114.841293][ T6379] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.879094][ T6388] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.129: iget: bad i_size value: 360287970189639680 [ 114.929263][ T6388] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.129: couldn't read orphan inode 15 (err -117) [ 115.313124][ T6388] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.359267][ T6402] loop3: detected capacity change from 0 to 512 [ 115.387280][ T6402] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 115.514274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.522681][ T6402] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 115.533068][ T6402] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 115.600695][ T6408] netlink: 60 bytes leftover after parsing attributes in process `syz.0.129'. [ 116.094321][ T6402] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 116.109825][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.124589][ T6402] System zones: 0-2, 18-18, 34-34 [ 116.124773][ T6407] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.161643][ T6402] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.133: iget: bad i_size value: 360287970189639680 [ 116.200911][ T6402] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.133: couldn't read orphan inode 15 (err -117) [ 116.226134][ T6402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.429394][ T6407] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.575090][ T6425] netlink: 60 bytes leftover after parsing attributes in process `syz.3.133'. [ 116.774779][ T6407] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.967787][ T6407] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.030838][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.462305][ T6452] loop0: detected capacity change from 0 to 512 [ 117.479198][ T6453] loop3: detected capacity change from 0 to 512 [ 118.267270][ C0] ------------[ cut here ]------------ [ 118.273063][ C0] WARNING: net/mac80211/tx.c:5024 at __ieee80211_beacon_get+0x125d/0x1630, CPU#0: syz.3.146/6450 [ 118.283675][ C0] Modules linked in: [ 118.287799][ C0] CPU: 0 UID: 0 PID: 6450 Comm: syz.3.146 Not tainted 6.16.0-rc2-next-20250616-syzkaller #0 PREEMPT(full) [ 118.299288][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.309457][ C0] RIP: 0010:__ieee80211_beacon_get+0x125d/0x1630 [ 118.315925][ C0] Code: e7 e8 27 f2 2f f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 78 fe ff ff e8 92 bf d6 f6 90 0f 0b 90 e9 e0 f7 ff ff e8 84 bf d6 f6 90 <0f> 0b 90 e9 38 fb ff ff e8 76 bf d6 f6 48 c7 c7 a0 5c 79 8f 4c 89 [ 118.335680][ C0] RSP: 0018:ffffc900000079f8 EFLAGS: 00010246 [ 118.341923][ C0] RAX: ffffffff8ae9aaac RBX: ffffffff8ae99886 RCX: ffff8880275c8000 [ 118.350042][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.358125][ C0] RBP: 0000000000000000 R08: ffff8880275c8000 R09: 0000000000000003 [ 118.366225][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888057fd6500 [ 118.374303][ C0] R13: dffffc0000000000 R14: ffff888057fd69d0 R15: ffff888055d84c24 [ 118.382328][ C0] FS: 00007fa3a37606c0(0000) GS:ffff888125c40000(0000) knlGS:0000000000000000 [ 118.391367][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.398169][ C0] CR2: 0000200000651030 CR3: 00000000797ca000 CR4: 00000000003526f0 [ 118.406268][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 118.414341][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 118.422369][ C0] Call Trace: [ 118.425756][ C0] [ 118.428628][ C0] ? __ieee80211_beacon_get+0x36/0x1630 [ 118.434332][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 118.439883][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 118.446090][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 118.451704][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 118.459072][ C0] __iterate_interfaces+0x2a8/0x590 [ 118.464440][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 118.470616][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 118.471170][ T6453] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.477883][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 118.477915][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 118.477949][ C0] mac80211_hwsim_beacon+0xbb/0x1c0 [ 118.477982][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 118.500273][ T6452] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.504828][ C0] __hrtimer_run_queues+0x529/0xc60 [ 118.504889][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 118.504922][ C0] ? read_tsc+0x9/0x20 [ 118.504956][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 118.512878][ T6453] EXT4-fs (loop3): orphan cleanup on readonly fs [ 118.519825][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 118.527569][ T6453] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.146: bg 0: block 248: padding at end of block bitmap is not set [ 118.530765][ C0] handle_softirqs+0x283/0x870 [ 118.548354][ T6453] Quota error (device loop3): write_blk: dquota write failed [ 118.552167][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 118.552210][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 118.566688][ T6453] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 118.571222][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 118.571259][ C0] __irq_exit_rcu+0xca/0x1f0 [ 118.571295][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 118.571342][ C0] irq_exit_rcu+0x9/0x30 [ 118.571375][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 118.571407][ C0] [ 118.571416][ C0] [ 118.571427][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 118.571453][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 118.571485][ C0] Code: 74 05 e8 5b c1 5b f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 c3 9a 24 f6 65 8b 05 8c c4 31 07 85 c0 74 40 48 c7 04 24 0e 36 [ 118.571505][ C0] RSP: 0018:ffffc9000f70f560 EFLAGS: 00000206 [ 118.571529][ C0] RAX: 76ff1a0aac713e00 RBX: 0000000000000a06 RCX: 76ff1a0aac713e00 [ 118.571547][ C0] RDX: 0000000000000006 RSI: ffffffff8d98bd8e RDI: 0000000000000001 [ 118.571563][ C0] RBP: ffffc9000f70f5f8 R08: ffffffff8fa14ff7 R09: 1ffffffff1f429fe [ 118.571582][ C0] R10: dffffc0000000000 R11: fffffbfff1f429ff R12: dffffc0000000000 [ 118.571600][ C0] R13: 1ffff1100eabcd95 R14: ffff8880755e6c40 R15: 1ffff92001ee1eac [ 118.571640][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 118.571698][ C0] __skb_try_recv_datagram+0x17c/0x4e0 [ 118.571747][ C0] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 118.571790][ C0] __unix_dgram_recvmsg+0x2d5/0xde0 [ 118.571825][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 118.571852][ C0] ? exc_page_fault+0x9f/0xf0 [ 118.571887][ C0] ? unix_dgram_recvmsg+0xb1/0xd0 [ 118.571912][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 118.571944][ C0] sock_recvmsg_nosec+0x186/0x1c0 [ 118.571977][ C0] ____sys_recvmsg+0x3aa/0x460 [ 118.572012][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 118.572054][ C0] ? import_iovec+0x74/0xa0 [ 118.572084][ C0] ___sys_recvmsg+0x1b5/0x510 [ 118.572114][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 118.572173][ C0] ? __might_fault+0xb0/0x130 [ 118.572199][ C0] do_recvmmsg+0x307/0x770 [ 118.572234][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 118.572275][ C0] ? count_memcg_event_mm+0x21/0x260 [ 118.579665][ T6453] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.146: Failed to acquire dquot type 1 [ 118.584428][ C0] ? count_memcg_event_mm+0x21/0x260 [ 118.607166][ T6453] EXT4-fs (loop3): 1 truncate cleaned up [ 118.609570][ C0] __x64_sys_recvmmsg+0x190/0x240 [ 118.658903][ T6452] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 118.662841][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 118.760765][ T6452] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 118.762956][ C0] ? do_syscall_64+0xbe/0x3b0 [ 118.804696][ T6452] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 118.813500][ C0] do_syscall_64+0xfa/0x3b0 [ 118.869647][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.874994][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.877428][ T6452] System zones: [ 118.881135][ C0] ? clear_bhb_loop+0x60/0xb0 [ 118.889532][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.892666][ T6452] 0-2 [ 118.895520][ C0] RIP: 0033:0x7fa3a298e929 [ 118.895555][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.895572][ C0] RSP: 002b:00007fa3a3760038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 118.895596][ C0] RAX: ffffffffffffffda RBX: 00007fa3a2bb6080 RCX: 00007fa3a298e929 [ 118.895611][ C0] RDX: 03fffffffffffcb5 RSI: 00002000000000c0 RDI: 0000000000000004 [ 118.895627][ C0] RBP: 00007fa3a2a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 118.895639][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 118.910506][ T6452] , 18-18 [ 118.922373][ C0] R13: 0000000000000001 R14: 00007fa3a2bb6080 R15: 00007ffe12ea1d68 [ 118.922411][ C0] [ 118.922422][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 118.922437][ C0] CPU: 0 UID: 0 PID: 6450 Comm: syz.3.146 Not tainted 6.16.0-rc2-next-20250616-syzkaller #0 PREEMPT(full) [ 118.922459][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.922470][ C0] Call Trace: [ 118.922478][ C0] [ 118.922486][ C0] dump_stack_lvl+0x99/0x250 [ 118.922519][ C0] ? __asan_memcpy+0x40/0x70 [ 118.922548][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.922580][ C0] ? __pfx__printk+0x10/0x10 [ 118.922614][ C0] panic+0x2db/0x790 [ 118.922655][ C0] ? __pfx_panic+0x10/0x10 [ 118.922707][ C0] __warn+0x334/0x4c0 [ 118.922737][ C0] ? __ieee80211_beacon_get+0x125d/0x1630 [ 118.922767][ C0] ? __ieee80211_beacon_get+0x125d/0x1630 [ 118.922791][ C0] report_bug+0x2be/0x4f0 [ 118.922817][ C0] ? __ieee80211_beacon_get+0x125d/0x1630 [ 118.922852][ C0] ? __ieee80211_beacon_get+0x125d/0x1630 [ 118.922876][ C0] ? __ieee80211_beacon_get+0x125f/0x1630 [ 118.922901][ C0] handle_bug+0x84/0x160 [ 118.922934][ C0] exc_invalid_op+0x1a/0x50 [ 118.922966][ C0] asm_exc_invalid_op+0x1a/0x20 [ 118.922986][ C0] RIP: 0010:__ieee80211_beacon_get+0x125d/0x1630 [ 118.923012][ C0] Code: e7 e8 27 f2 2f f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 78 fe ff ff e8 92 bf d6 f6 90 0f 0b 90 e9 e0 f7 ff ff e8 84 bf d6 f6 90 <0f> 0b 90 e9 38 fb ff ff e8 76 bf d6 f6 48 c7 c7 a0 5c 79 8f 4c 89 [ 118.923030][ C0] RSP: 0018:ffffc900000079f8 EFLAGS: 00010246 [ 118.923049][ C0] RAX: ffffffff8ae9aaac RBX: ffffffff8ae99886 RCX: ffff8880275c8000 [ 118.923066][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.923080][ C0] RBP: 0000000000000000 R08: ffff8880275c8000 R09: 0000000000000003 [ 118.923094][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888057fd6500 [ 118.923109][ C0] R13: dffffc0000000000 R14: ffff888057fd69d0 R15: ffff888055d84c24 [ 118.923129][ C0] ? __ieee80211_beacon_get+0x36/0x1630 [ 118.923156][ C0] ? __ieee80211_beacon_get+0x125c/0x1630 [ 118.923195][ C0] ? __ieee80211_beacon_get+0x125c/0x1630 [ 118.923221][ C0] ? __ieee80211_beacon_get+0x36/0x1630 [ 118.923255][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 118.923285][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 118.923323][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 118.923353][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 118.923383][ C0] __iterate_interfaces+0x2a8/0x590 [ 118.923404][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 118.923431][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 118.923456][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 118.923481][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 118.923510][ C0] mac80211_hwsim_beacon+0xbb/0x1c0 [ 118.923544][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 118.923576][ C0] __hrtimer_run_queues+0x529/0xc60 [ 118.923630][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 118.923661][ C0] ? read_tsc+0x9/0x20 [ 118.923688][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 118.923719][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 118.923746][ C0] handle_softirqs+0x283/0x870 [ 118.923792][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 118.923831][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 118.923890][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 118.923924][ C0] __irq_exit_rcu+0xca/0x1f0 [ 118.923966][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 118.924013][ C0] irq_exit_rcu+0x9/0x30 [ 118.924049][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 118.924082][ C0] [ 118.924090][ C0] [ 118.924102][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 118.924128][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 118.924161][ C0] Code: 74 05 e8 5b c1 5b f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 c3 9a 24 f6 65 8b 05 8c c4 31 07 85 c0 74 40 48 c7 04 24 0e 36 [ 118.924188][ C0] RSP: 0018:ffffc9000f70f560 EFLAGS: 00000206 [ 118.924210][ C0] RAX: 76ff1a0aac713e00 RBX: 0000000000000a06 RCX: 76ff1a0aac713e00 [ 118.924228][ C0] RDX: 0000000000000006 RSI: ffffffff8d98bd8e RDI: 0000000000000001 [ 118.924242][ C0] RBP: ffffc9000f70f5f8 R08: ffffffff8fa14ff7 R09: 1ffffffff1f429fe [ 118.924262][ C0] R10: dffffc0000000000 R11: fffffbfff1f429ff R12: dffffc0000000000 [ 118.924280][ C0] R13: 1ffff1100eabcd95 R14: ffff8880755e6c40 R15: 1ffff92001ee1eac [ 118.924320][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 118.924366][ C0] __skb_try_recv_datagram+0x17c/0x4e0 [ 118.924406][ C0] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 118.924455][ C0] __unix_dgram_recvmsg+0x2d5/0xde0 [ 118.924494][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 118.924526][ C0] ? exc_page_fault+0x9f/0xf0 [ 118.924567][ C0] ? unix_dgram_recvmsg+0xb1/0xd0 [ 118.924595][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 118.924627][ C0] sock_recvmsg_nosec+0x186/0x1c0 [ 118.924668][ C0] ____sys_recvmsg+0x3aa/0x460 [ 118.924706][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 118.924753][ C0] ? import_iovec+0x74/0xa0 [ 118.924787][ C0] ___sys_recvmsg+0x1b5/0x510 [ 118.924822][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 118.924889][ C0] ? __might_fault+0xb0/0x130 [ 118.924918][ C0] do_recvmmsg+0x307/0x770 [ 118.924969][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 118.925012][ C0] ? count_memcg_event_mm+0x21/0x260 [ 118.925054][ C0] ? count_memcg_event_mm+0x21/0x260 [ 118.925099][ C0] __x64_sys_recvmmsg+0x190/0x240 [ 118.925127][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 118.925161][ C0] ? do_syscall_64+0xbe/0x3b0 [ 118.925201][ C0] do_syscall_64+0xfa/0x3b0 [ 118.925228][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.925257][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.925279][ C0] ? clear_bhb_loop+0x60/0xb0 [ 118.925304][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.925324][ C0] RIP: 0033:0x7fa3a298e929 [ 118.925343][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.925360][ C0] RSP: 002b:00007fa3a3760038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 118.925381][ C0] RAX: ffffffffffffffda RBX: 00007fa3a2bb6080 RCX: 00007fa3a298e929 [ 118.925397][ C0] RDX: 03fffffffffffcb5 RSI: 00002000000000c0 RDI: 0000000000000004 [ 118.925412][ C0] RBP: 00007fa3a2a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 118.925426][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 118.925439][ C0] R13: 0000000000000001 R14: 00007fa3a2bb6080 R15: 00007ffe12ea1d68 [ 118.925473][ C0] [ 118.931201][ C0] Kernel Offset: disabled