last executing test programs: 2.063862068s ago: executing program 3 (id=913): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) socket$inet6(0xa, 0x3, 0x0) 1.992500683s ago: executing program 3 (id=916): r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000001000)=[{{&(0x7f0000001580)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x4004000) 1.991795916s ago: executing program 3 (id=919): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000000080)=0x9, 0x4) setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000000000)=0xf, 0x4) 1.972160304s ago: executing program 3 (id=921): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800042, &(0x7f0000000000), 0xfc, 0x575, &(0x7f0000000180)="$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") r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = dup(0xffffffffffffffff) ioctl$TCSETSF(r3, 0x5404, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 1.861251052s ago: executing program 3 (id=927): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, 0x0) 1.808170618s ago: executing program 4 (id=930): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffdffffffffffe}, 0x18) socket(0x2, 0x80805, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 1.800619701s ago: executing program 4 (id=932): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r1, 0x0, 0x0, 0x20000054) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.700462288s ago: executing program 3 (id=934): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 1.700288477s ago: executing program 32 (id=934): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 1.392906942s ago: executing program 0 (id=955): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x3) 1.157154714s ago: executing program 1 (id=963): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@newtaction={0x8d0, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x8bc, 0x1, [@m_police={0x888, 0x1, 0x0, 0x0, {{0xb}, {0x85c, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x5c}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xfffff683, 0xb3c3, 0x12, 0x80000001, 0xb, 0x1, 0x7ff, 0x8001, 0x8b, 0x80000000, 0x6, 0x5, 0x90, 0x37, 0x7fffffff, 0x3, 0xfffffffd, 0x7, 0x7, 0x5, 0xe8bc, 0xdb0, 0x2, 0xe, 0x800, 0x1, 0x2, 0xc, 0x400, 0x5, 0x3, 0x1, 0xae, 0x19, 0xa3, 0x4, 0x6c5, 0x324, 0x7d751e70, 0x4, 0x7f, 0x8, 0x3f, 0x1, 0x80000001, 0x1, 0x9, 0x6, 0xef0, 0x81, 0x7, 0x5, 0x5, 0x2606, 0x2, 0x8, 0x5, 0x0, 0x3, 0x5, 0x1e, 0x9, 0x3, 0xffffffff, 0x925, 0x4, 0x2, 0xdbf, 0xfffffff9, 0x100, 0x4, 0x7ff, 0xbb08, 0x8, 0x10, 0x8, 0x6, 0x87b, 0x5, 0x1, 0x4, 0x4, 0x1, 0xc56f, 0xfffffffa, 0x2, 0xbe, 0x7, 0x3, 0x45a, 0x80, 0xc, 0x10000, 0xe, 0x81, 0x9, 0x718, 0x1, 0x9, 0x7, 0x81, 0x2, 0x3, 0x6, 0x800000, 0x1000, 0x5, 0x0, 0x3b7, 0x0, 0x1, 0x7241, 0x6, 0xb, 0x9, 0x7, 0x3, 0x2, 0x9, 0x4, 0x80000001, 0x6c54, 0x2, 0x82, 0xfffffffb, 0x2, 0x161a, 0xde92, 0x0, 0xffffffff, 0x400, 0x9, 0x6, 0x5, 0x8, 0xfffffffc, 0x1000, 0x5, 0x4, 0x2, 0x3, 0x8, 0x8, 0x8, 0xbb0, 0x3, 0x5, 0x2, 0x3, 0x5, 0x8, 0xb5da, 0x20, 0x5, 0x7, 0xffff, 0x7ff, 0x5, 0x5, 0x10000, 0xe, 0x3, 0x3, 0x2, 0x800, 0x1, 0x2, 0x9, 0x1, 0x9, 0xaf, 0x5, 0x976, 0x559, 0x1, 0x6, 0xfffffff3, 0x8, 0x200000, 0x3ff, 0xffffffff, 0xe5, 0xfffffffd, 0x5, 0x9, 0x1, 0x0, 0x6, 0x74082f6f, 0x2, 0x7f, 0x6, 0xfffffff7, 0x1ff, 0x19b3, 0x10001, 0x2, 0x6, 0x0, 0x0, 0x7, 0x4, 0x7, 0x8, 0x2, 0x1, 0x30, 0x80000001, 0x8, 0x4, 0xffffffff, 0x9, 0x6, 0x401, 0x3ff, 0x1, 0xeac7, 0xa, 0xfb, 0x6, 0xfffffffc, 0x67f, 0x4, 0x8, 0xea, 0x478, 0x8, 0x80000001, 0x5, 0x8, 0x6, 0x0, 0x4, 0x0, 0x2, 0x7, 0x8000, 0x7, 0x1, 0x9, 0x1, 0x6, 0x6487, 0x6, 0x55, 0x5aed, 0x8, 0x1, 0x6, 0x4, 0xb, 0x3, 0x3, 0x43f, 0x53]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x4, 0x102, 0x1ff, 0x4, 0x201, 0x100, 0x8, 0x4, 0x993b0e2, 0x5, 0x9, 0x4, 0x5, 0x2, 0x9, 0xff, 0x7, 0x8, 0x3ff, 0x2800000, 0x7fffffff, 0x9, 0x4, 0x6, 0xfffff800, 0x6, 0x8100, 0x4000000, 0xe874, 0x2c494445, 0x7, 0xfffffffd, 0x37cb, 0x80000000, 0x80000000, 0xfffffffb, 0x6, 0xfffffffa, 0xfffffffa, 0x5, 0xcd3, 0xb36, 0x3, 0x8, 0x1, 0x1ca, 0xace8, 0x0, 0x8, 0x10, 0x3, 0x64, 0x10, 0x8001, 0x7, 0xa, 0xb5, 0x1, 0x1, 0x1, 0xfffffffc, 0x10000, 0x0, 0x2, 0x9, 0x7, 0x1, 0x6, 0x6, 0x6, 0x800, 0x7, 0x1ff, 0x5, 0xfffffffd, 0x20000000, 0x800, 0x1, 0x94000000, 0x129, 0xffff, 0x8, 0x10000, 0x401, 0x3, 0xeb7c, 0x40, 0x101, 0x8000, 0x400, 0x4, 0x9, 0x9, 0x4, 0x2, 0x1357, 0x8, 0x9, 0x8, 0x9c4, 0x31, 0x1, 0x3, 0x400, 0x5, 0x8, 0x100000, 0xe, 0x0, 0x3, 0x4, 0x1, 0x2, 0x2f, 0x8, 0xe2, 0x4, 0x2, 0x2, 0x139, 0x960, 0x7, 0x96a, 0xc4, 0x4, 0x3, 0x10000, 0x8, 0x6, 0x7, 0x1ff, 0xff, 0xc33, 0x3, 0x2, 0xc4b9, 0x280, 0x5, 0xc69113a, 0x1, 0x80, 0x8, 0x7f, 0x3, 0x90, 0x1ff, 0x2e, 0x5, 0x3, 0x7ff, 0x0, 0x9, 0x10, 0x1, 0x6, 0x9, 0x4, 0x308, 0xffffff1b, 0x6, 0x80ea, 0x4, 0xa64d, 0x6, 0x5, 0x2c, 0x9, 0x0, 0x3ee7, 0x6, 0x389b, 0x5, 0x3, 0x3, 0x1, 0x6, 0x12a90575, 0x1, 0x2, 0x2, 0x100, 0x0, 0x1, 0x8b3e, 0x6, 0x0, 0x9, 0x2, 0xce3c, 0x2, 0xd, 0x101, 0x8, 0x10, 0x80, 0x0, 0x0, 0xe6, 0x8, 0x800, 0x6a, 0xfffffff0, 0x96, 0x6, 0x101, 0x7, 0xfffff001, 0x5, 0x80cc, 0x6, 0x0, 0x3, 0x7, 0x9, 0x0, 0x5, 0xa, 0x1ff, 0x9, 0x0, 0x80, 0x8009, 0x55fe, 0x9, 0x8, 0x5, 0x1, 0x596e, 0xa, 0x9, 0x9, 0x400, 0xfff, 0x8, 0x0, 0x3, 0x1, 0x2, 0x7fffffff, 0x2, 0x9, 0x6, 0x81, 0xe6, 0x1, 0x0, 0x8, 0x10001, 0x2, 0xd8, 0xffffff80, 0x0, 0x9, 0x3, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x1, 0x2, 0x5e, 0xfffffffa, {0x6, 0x1, 0x1, 0x4, 0x9, 0x4}, {0x6, 0x1, 0x1, 0x7, 0x4, 0x40}, 0xfffffffe, 0x8000, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x8d0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.064497088s ago: executing program 1 (id=965): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='S\x00\x00'], 0x53) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.04695843s ago: executing program 2 (id=967): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 1.005701173s ago: executing program 1 (id=968): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdde, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 934.783003ms ago: executing program 4 (id=969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7fffffff500"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 933.360406ms ago: executing program 2 (id=970): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x5f}, 0x18) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x110) close_range(r1, 0xffffffffffffffff, 0x0) 872.381518ms ago: executing program 1 (id=971): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0xf, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb325c, 0x280c}}, 0xfffffffffffffe4b}, 0x1, 0x0, 0x0, 0x600}, 0x20000000) write$tun(r0, 0x0, 0x0) 871.948343ms ago: executing program 2 (id=972): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000e00)=ANY=[@ANYBLOB="6fff02040102cd"], 0x7) 868.721625ms ago: executing program 2 (id=973): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) writev(r0, &(0x7f0000003040)=[{&(0x7f0000001a80)="61ba0e4e", 0x4}], 0x1) 863.865649ms ago: executing program 4 (id=974): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2001}, 0x0) 786.393199ms ago: executing program 2 (id=975): syz_io_uring_setup(0x83d, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000007c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x2, {0x0, 0x1}}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4010) 786.021125ms ago: executing program 4 (id=976): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r2, 0x0, 0x80000001}, 0x18) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) 785.381211ms ago: executing program 1 (id=977): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000706010800000000000000000000000005000100b681560752"], 0x1c}}, 0x0) 740.055982ms ago: executing program 2 (id=978): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2, 0x0, 0xfffffffffffffffc}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() timerfd_gettime(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xcba85322fc7ec62}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "22fff4", 0x48, 0x2f, 0x0, @dev, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x2, 0x400]}, {}, {}, {0x8, 0x22eb, 0x3}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x75, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$inet(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="38db5e5210f0de00490e81417e0b1831b083", 0x12}, {&(0x7f0000000240)="7815137ae51f", 0x6}, {&(0x7f00000002c0)="cf6c6ccf4112fcdb417e0f7b43bf38d8830321ecf067d5ebbd1a47125b55aaf2ab55e90fa685a4c9f9be9030f136ac31567185b808cf274c", 0x38}, {&(0x7f0000001d80)="3dea231126cd59001d81b4482520dcde33173ef4625a9841570e63026abfa7fa14669f753b89aa2e03e5ffadff8369257f05c748f5140c07ee2531b3aca22c3e1d87b6dfce2eed4dfc16a9187ccbde28d995507d8af30fcc212fdfed6ea1944a5c40b9434f373b06457d23b3fb4157c64d54ad9bb7b5af99afa8f14b185c1a79f89a915083ad3b332043e6a2db5b6fa2cdc20a356b99d14468cffda1a93378cedb140a6e0a0ce775599ed13148e4afaf291bde5deab6e2bab400cc68c263f97e603ea3d84c05f28a86356949c1a93d876d4fadab3fbb101cec116b8b04e9d43584622695839e829222317f2ab580bf10f65eee107b721aec7af2b43c232f9b87fabd50282b804c24785288c6a41387f84e0c2424713ab63d2a88fde5b6e7911aa512373448ce44f4dd6bf0e9f21618d112b268b634c41da8ab9e02ac3948decb848b3fbe276ec839930a1e37619e28798f85790c430cdb27f8046130c81f9b9ea8312c76b186baa9bd09173c3314b6a62aa7a64d6cae2e19da28da31b68ae78adc33e0f9b54777073e3b50c89ea6f708d2cc0775e24bc4d223f6b85af65ec846d846b2b8ab995b2c1a6ba95db3f935609cfb2a47ecce3c63c5748411047dc80805a711dbbc24632711e9992f30efb72649fff985015a575667c8c7ecc0cf9154756054aecdba8e99e6f478ad505293325ae785069b03ecc87d56fe5141ee5b1d62064fcd10c4809c2df8fecd6ed3b3f16dea2d5ffb5b86c53a8ccc6de64e3cc0c8bb79f4668436927ea99878297520699ea8342424afa42fb2f7b2024547c00b7c689b775cba68e7a26a2f339e70f50f22f510f8c7f79614b021e2ec8d00926663b2979fd99c0cf8a9ad4c8750a5fdcfb6e7268ed049c712b7210b82fbda0fcb0dc91ce1d716dc31ffd9d6d9b520af67", 0x290}], 0x4}, 0x800) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 739.907509ms ago: executing program 1 (id=979): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r1, 0x0, 0x0, 0x20000054) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 739.327141ms ago: executing program 4 (id=980): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0x2}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x1c, r8, 0xc4fc9e906872338b, 0x70bd2a, 0x1000, {{0x15}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc040000}, 0x4008040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) unshare(0x64000680) 323.751522ms ago: executing program 0 (id=981): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000000306050000000000000000000000000005000100"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 202.685629ms ago: executing program 0 (id=982): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000e00)=ANY=[@ANYBLOB="6fff02040102cd"], 0x7) 111.766074ms ago: executing program 0 (id=983): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xc}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 67.546449ms ago: executing program 0 (id=984): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {}, 0xa}}, 0x26) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(r3, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 56.271627ms ago: executing program 5 (id=935): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000001940)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESHEX, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) 215.121µs ago: executing program 0 (id=985): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xb1ce, 0x0, 0x2, 0xbfdffffd}, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffff0000}, 0xffffffffffffffd2}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xc}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = open(&(0x7f00000005c0)='./bus\x00', 0x60842, 0x0) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x30, 0x3) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/sync_on_suspend', 0x143b02, 0x1c0) r10 = dup(r9) r11 = open(&(0x7f0000000040)='./bus\x00', 0x40d00, 0x20) sendfile(r10, r11, 0x0, 0x8000fffffffe) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r12}, 0x10) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r2, &(0x7f0000000780)={'#! ', './file0'}, 0xb) close_range(r1, r2, 0x0) 0s ago: executing program 5 (id=986): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "5525b137ba2ead4f", "aa764a1b09ad21687594081893a037ec", "0606fa47", "c375e7d1b22ce51f"}, 0x28) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.89' (ED25519) to the list of known hosts. [ 25.518583][ T6537] cgroup: Unknown subsys name 'net' [ 25.650456][ T6537] cgroup: Unknown subsys name 'cpuset' [ 25.652415][ T6537] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 25.808290][ T6537] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 27.718648][ T6552] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 27.719413][ T6552] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 27.723260][ T6552] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 27.723845][ T6552] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 27.724024][ T6552] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 27.724349][ T6552] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 27.724570][ T6552] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 27.729161][ T6117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 27.730756][ T6117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 27.731473][ T6117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 27.734517][ T6117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 27.735584][ T6117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 27.736914][ T6552] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 27.737652][ T6552] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 27.737847][ T6552] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 27.738416][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 27.738737][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 27.739759][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 27.741258][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 27.745409][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 27.757925][ T6552] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 27.768486][ T6552] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 27.769144][ T6552] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 27.769496][ T6552] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 27.769695][ T6552] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 27.892726][ T6558] chnl_net:caif_netlink_parms(): no params data found [ 27.913550][ T6557] chnl_net:caif_netlink_parms(): no params data found [ 27.948553][ T6549] chnl_net:caif_netlink_parms(): no params data found [ 27.973554][ T6558] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.973941][ T6558] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.974019][ T6558] bridge_slave_0: entered allmulticast mode [ 27.974480][ T6558] bridge_slave_0: entered promiscuous mode [ 27.989347][ T6558] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.989393][ T6558] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.989459][ T6558] bridge_slave_1: entered allmulticast mode [ 27.989900][ T6558] bridge_slave_1: entered promiscuous mode [ 28.007351][ T6548] chnl_net:caif_netlink_parms(): no params data found [ 28.011176][ T6558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.012087][ T6558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.015111][ T6557] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.015187][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.015263][ T6557] bridge_slave_0: entered allmulticast mode [ 28.015689][ T6557] bridge_slave_0: entered promiscuous mode [ 28.042032][ T6557] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.043468][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.044805][ T6557] bridge_slave_1: entered allmulticast mode [ 28.046216][ T6557] bridge_slave_1: entered promiscuous mode [ 28.047833][ T6556] chnl_net:caif_netlink_parms(): no params data found [ 28.050034][ T6549] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.051211][ T6549] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.052453][ T6549] bridge_slave_0: entered allmulticast mode [ 28.053797][ T6549] bridge_slave_0: entered promiscuous mode [ 28.055753][ T6549] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.056946][ T6549] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.058158][ T6549] bridge_slave_1: entered allmulticast mode [ 28.059318][ T6549] bridge_slave_1: entered promiscuous mode [ 28.063298][ T6558] team0: Port device team_slave_0 added [ 28.075731][ T6558] team0: Port device team_slave_1 added [ 28.086325][ T6557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.090028][ T6549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.090894][ T6549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.106425][ T6557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.114307][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.114462][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.114533][ T6548] bridge_slave_0: entered allmulticast mode [ 28.114952][ T6548] bridge_slave_0: entered promiscuous mode [ 28.115899][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.115917][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.115961][ T6548] bridge_slave_1: entered allmulticast mode [ 28.116336][ T6548] bridge_slave_1: entered promiscuous mode [ 28.132510][ T6549] team0: Port device team_slave_0 added [ 28.133433][ T6549] team0: Port device team_slave_1 added [ 28.136942][ T6558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.138081][ T6558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.138675][ T6558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.139935][ T6558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.139945][ T6558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.139954][ T6558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.163125][ T6548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.165952][ T6548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.173948][ T6556] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.174052][ T6556] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.174101][ T6556] bridge_slave_0: entered allmulticast mode [ 28.174507][ T6556] bridge_slave_0: entered promiscuous mode [ 28.175772][ T6557] team0: Port device team_slave_0 added [ 28.176473][ T6557] team0: Port device team_slave_1 added [ 28.184501][ T6549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.185695][ T6549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.189853][ T6549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.191926][ T6549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.192267][ T6549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.192285][ T6549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.202522][ T6556] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.202599][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.202648][ T6556] bridge_slave_1: entered allmulticast mode [ 28.203096][ T6556] bridge_slave_1: entered promiscuous mode [ 28.216973][ T6548] team0: Port device team_slave_0 added [ 28.217728][ T6548] team0: Port device team_slave_1 added [ 28.226873][ T6557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.227979][ T6557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.229230][ T6557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.229893][ T6557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.229901][ T6557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.229915][ T6557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.236214][ T6558] hsr_slave_0: entered promiscuous mode [ 28.236549][ T6558] hsr_slave_1: entered promiscuous mode [ 28.238128][ T6549] hsr_slave_0: entered promiscuous mode [ 28.238722][ T6549] hsr_slave_1: entered promiscuous mode [ 28.240626][ T6549] debugfs: 'hsr0' already exists in 'hsr' [ 28.240664][ T6549] Cannot create hsr debugfs directory [ 28.245773][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.245782][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.245793][ T6548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.247573][ T6556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.258600][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.258624][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.258642][ T6548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.266551][ T6556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.283032][ T6556] team0: Port device team_slave_0 added [ 28.288553][ T6557] hsr_slave_0: entered promiscuous mode [ 28.289559][ T6557] hsr_slave_1: entered promiscuous mode [ 28.289755][ T6557] debugfs: 'hsr0' already exists in 'hsr' [ 28.289768][ T6557] Cannot create hsr debugfs directory [ 28.302791][ T6548] hsr_slave_0: entered promiscuous mode [ 28.303062][ T6548] hsr_slave_1: entered promiscuous mode [ 28.303223][ T6548] debugfs: 'hsr0' already exists in 'hsr' [ 28.303233][ T6548] Cannot create hsr debugfs directory [ 28.304324][ T6556] team0: Port device team_slave_1 added [ 28.333069][ T6556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.333095][ T6556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.333110][ T6556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.333593][ T6556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.333600][ T6556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.333611][ T6556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.362323][ T6556] hsr_slave_0: entered promiscuous mode [ 28.363895][ T6556] hsr_slave_1: entered promiscuous mode [ 28.365082][ T6556] debugfs: 'hsr0' already exists in 'hsr' [ 28.366048][ T6556] Cannot create hsr debugfs directory [ 28.462691][ T6558] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.466264][ T6558] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.471410][ T6558] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.475145][ T6558] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.491634][ T6558] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.491677][ T6558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.491854][ T6558] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.491883][ T6558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.497439][ T6549] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.501678][ T6549] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.507405][ T6549] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.510033][ T6549] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.535755][ T6558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.535870][ T6548] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.537254][ T6548] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.543867][ T6549] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.543907][ T6549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.543969][ T6549] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.543994][ T6549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.544546][ T6548] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.546206][ T6548] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.560341][ T4614] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.562230][ T4614] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.565441][ T4614] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.566937][ T4614] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.577211][ T6558] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.579393][ T4614] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.579437][ T4614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.587386][ T4614] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.587420][ T4614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.595631][ T6557] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.597958][ T6557] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.601560][ T6557] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.611139][ T6557] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.641969][ T6556] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.644496][ T6556] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.647441][ T6556] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.650966][ T6556] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.674676][ T6549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.683888][ T6549] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.688221][ T4614] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.688267][ T4614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.688598][ T4614] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.688613][ T4614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.703932][ T6557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.708744][ T6557] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.727783][ T6549] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.729076][ T6549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.733802][ T6558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.738208][ T4614] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.738242][ T4614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.742211][ T4614] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.742251][ T4614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.764139][ T6556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.768497][ T6556] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.794612][ T6558] veth0_vlan: entered promiscuous mode [ 28.798003][ T6558] veth1_vlan: entered promiscuous mode [ 28.804692][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.804727][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.805003][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.805017][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.811545][ T6548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.827718][ T6558] veth0_macvtap: entered promiscuous mode [ 28.837817][ T6556] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.839464][ T6556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.842311][ T6548] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.845727][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.845765][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.854168][ T6558] veth1_macvtap: entered promiscuous mode [ 28.861694][ T6549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.871251][ T6558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.872118][ T4614] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.872250][ T4614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.880100][ T6558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.895972][ T1878] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.896187][ T1878] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.896203][ T1878] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.896217][ T1878] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.897906][ T6548] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.897918][ T6548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.941655][ T6549] veth0_vlan: entered promiscuous mode [ 28.954969][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.954986][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.962170][ T6556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.978414][ T6549] veth1_vlan: entered promiscuous mode [ 28.983097][ T6557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.991935][ T6548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.999695][ T219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.999723][ T219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.000128][ T6556] veth0_vlan: entered promiscuous mode [ 29.018077][ T6556] veth1_vlan: entered promiscuous mode [ 29.030020][ T6549] veth0_macvtap: entered promiscuous mode [ 29.031769][ T6549] veth1_macvtap: entered promiscuous mode [ 29.039324][ T6558] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.040676][ T6557] veth0_vlan: entered promiscuous mode [ 29.056993][ T6557] veth1_vlan: entered promiscuous mode [ 29.062239][ T6556] veth0_macvtap: entered promiscuous mode [ 29.063174][ T6556] veth1_macvtap: entered promiscuous mode [ 29.085033][ T6556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.085956][ T6556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.102884][ T6549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.107337][ T6549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.109133][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.109289][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.109359][ T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.109427][ T41] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.113305][ T42] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.113366][ T42] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.113417][ T42] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.113448][ T42] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.142631][ T6557] veth0_macvtap: entered promiscuous mode [ 29.145437][ T6557] veth1_macvtap: entered promiscuous mode [ 29.151401][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.152259][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.166935][ T41] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.168570][ T41] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.178235][ T41] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.181068][ T41] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.182664][ T6548] veth0_vlan: entered promiscuous mode [ 29.371416][ T6663] mmap: syz.0.1 (6663) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 29.502058][ T6548] veth1_vlan: entered promiscuous mode [ 29.506556][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.508968][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.536836][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.536866][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.542554][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.542590][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.543895][ T6548] veth0_macvtap: entered promiscuous mode [ 29.549484][ T6548] veth1_macvtap: entered promiscuous mode [ 29.563869][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.563896][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.572396][ T1878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.572438][ T1878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.579604][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.583623][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.583645][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.590448][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.593709][ T1878] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.593763][ T1878] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.593807][ T1878] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.593833][ T1878] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.679672][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.679694][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.690764][ T6676] vhci_hcd: invalid port number 96 [ 29.691920][ T6676] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 29.696739][ T6674] loop2: detected capacity change from 0 to 1024 [ 29.697661][ T6674] EXT4-fs: Ignoring removed nomblk_io_submit option [ 29.703287][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.703314][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.727653][ T6674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.749276][ T6670] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 29.769334][ T6552] Bluetooth: hci0: command tx timeout [ 29.769494][ T52] Bluetooth: hci1: command tx timeout [ 29.769497][ T6552] Bluetooth: hci3: command tx timeout [ 29.769559][ T6552] Bluetooth: hci2: command tx timeout [ 29.792849][ T6556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.814622][ T6670] veth0_to_team: entered promiscuous mode [ 29.860243][ T6117] Bluetooth: hci4: command tx timeout [ 29.869275][ T6690] loop4: detected capacity change from 0 to 764 [ 29.944183][ T6700] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.956556][ T6701] 9pnet_fd: Insufficient options for proto=fd [ 30.013743][ T6704] all (unregistering): Released all slaves [ 30.093625][ T6719] wg2: entered promiscuous mode [ 30.094578][ T6719] wg2: entered allmulticast mode [ 30.107712][ T6723] syzkaller0: entered promiscuous mode [ 30.108675][ T6723] syzkaller0: entered allmulticast mode [ 30.142305][ T6727] loop1: detected capacity change from 0 to 512 [ 30.144546][ T6727] EXT4-fs: Ignoring removed oldalloc option [ 30.160532][ T6727] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.27: Parent and EA inode have the same ino 15 [ 30.197585][ T6727] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 30.200012][ T6727] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.27: Parent and EA inode have the same ino 15 [ 30.203230][ T6727] EXT4-fs (loop1): 1 orphan inode deleted [ 30.203675][ T6727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.233548][ T6733] Zero length message leads to an empty skb [ 30.244224][ T6549] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.274779][ T31] audit: type=1326 audit(30.250:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6736 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8735c0a8 code=0x7ffc0000 [ 30.278422][ T31] audit: type=1326 audit(30.250:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6736 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8735c0a8 code=0x7ffc0000 [ 30.285404][ T31] audit: type=1326 audit(30.250:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6736 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8735c0a8 code=0x7ffc0000 [ 30.285457][ T31] audit: type=1326 audit(30.250:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6736 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8735c0a8 code=0x7ffc0000 [ 30.285484][ T31] audit: type=1326 audit(30.250:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6736 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8735c0a8 code=0x7ffc0000 [ 30.285507][ T31] audit: type=1326 audit(30.250:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6736 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8735c0a8 code=0x7ffc0000 [ 30.285529][ T31] audit: type=1326 audit(30.250:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6736 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8735c0a8 code=0x7ffc0000 [ 30.285548][ T31] audit: type=1326 audit(30.250:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6736 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8735c0a8 code=0x7ffc0000 [ 30.285567][ T31] audit: type=1326 audit(30.250:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6736 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8735c0a8 code=0x7ffc0000 [ 30.285582][ T31] audit: type=1326 audit(30.250:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6736 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8735c0a8 code=0x7ffc0000 [ 30.340681][ T6741] loop1: detected capacity change from 0 to 1024 [ 30.342497][ T6741] ======================================================= [ 30.342497][ T6741] WARNING: The mand mount option has been deprecated and [ 30.342497][ T6741] and is ignored by this kernel. Remove the mand [ 30.342497][ T6741] option from the mount to silence this warning. [ 30.342497][ T6741] ======================================================= [ 30.378130][ T6741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.403332][ T6549] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.636175][ T6751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.37'. [ 30.696782][ T6753] loop1: detected capacity change from 0 to 2368 [ 30.798159][ T6765] loop9: detected capacity change from 0 to 7 [ 30.798671][ T6765] Buffer I/O error on dev loop9, logical block 0, async page read [ 30.798743][ T6765] Buffer I/O error on dev loop9, logical block 0, async page read [ 30.799002][ T6765] Buffer I/O error on dev loop9, logical block 0, async page read [ 30.799032][ T6765] Buffer I/O error on dev loop9, logical block 0, async page read [ 30.799159][ T6765] Buffer I/O error on dev loop9, logical block 0, async page read [ 30.799193][ T6765] Buffer I/O error on dev loop9, logical block 0, async page read [ 30.799223][ T6765] Buffer I/O error on dev loop9, logical block 0, async page read [ 30.799242][ T6765] ldm_validate_partition_table(): Disk read failed. [ 30.799256][ T6765] Buffer I/O error on dev loop9, logical block 0, async page read [ 30.799284][ T6765] Buffer I/O error on dev loop9, logical block 0, async page read [ 30.799312][ T6765] Buffer I/O error on dev loop9, logical block 0, async page read [ 30.799353][ T6765] Dev loop9: unable to read RDB block 0 [ 30.799444][ T6765] loop9: unable to read partition table [ 30.799500][ T6765] loop9: partition table beyond EOD, truncated [ 30.799508][ T6765] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 30.799508][ T6765] ) failed (rc=-5) [ 30.827138][ T6769] loop9: detected capacity change from 0 to 7 [ 30.827612][ T6769] ldm_validate_partition_table(): Disk read failed. [ 30.827692][ T6769] Dev loop9: unable to read RDB block 0 [ 30.827778][ T6769] loop9: unable to read partition table [ 30.827826][ T6769] loop9: partition table beyond EOD, truncated [ 30.827833][ T6769] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 30.827833][ T6769] ) failed (rc=-5) [ 30.868091][ T6771] loop1: detected capacity change from 0 to 1024 [ 30.871157][ T6771] EXT4-fs: Ignoring removed nomblk_io_submit option [ 30.927329][ T6771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.946585][ T6549] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.229588][ T6776] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 31.265965][ T6786] loop1: detected capacity change from 0 to 2048 [ 31.322441][ T6786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.344795][ T6549] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.384842][ T6801] netlink: 440 bytes leftover after parsing attributes in process `syz.3.57'. [ 31.500315][ T6813] netlink: 100 bytes leftover after parsing attributes in process `syz.3.63'. [ 31.648203][ T6825] loop3: detected capacity change from 0 to 1024 [ 31.654501][ T6825] EXT4-fs: Ignoring removed nobh option [ 31.671148][ T6825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.688135][ T6557] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.849017][ T52] Bluetooth: hci3: command tx timeout [ 31.849341][ T6552] Bluetooth: hci0: command tx timeout [ 31.849391][ T6117] Bluetooth: hci2: command tx timeout [ 31.878910][ T6117] Bluetooth: hci1: command tx timeout [ 31.938920][ T6117] Bluetooth: hci4: command tx timeout [ 32.380473][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'. [ 32.395282][ T6883] vlan2: entered allmulticast mode [ 32.395315][ T6883] dummy0: entered allmulticast mode [ 32.411186][ T6884] IPVS: Error joining to the multicast group [ 32.438034][ T6890] loop1: detected capacity change from 0 to 512 [ 32.448039][ T6887] loop3: detected capacity change from 0 to 2048 [ 32.456433][ T6890] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 32.462118][ T6890] EXT4-fs (loop1): mount failed [ 32.473139][ T6887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 32.602700][ T6887] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 32.608261][ T6887] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 32.613504][ T6887] EXT4-fs (loop3): This should not happen!! Data will be lost [ 32.613504][ T6887] [ 32.613547][ T6887] EXT4-fs (loop3): Total free blocks count 0 [ 32.613563][ T6887] EXT4-fs (loop3): Free/Dirty block details [ 32.613584][ T6887] EXT4-fs (loop3): free_blocks=2415919104 [ 32.613605][ T6887] EXT4-fs (loop3): dirty_blocks=2912 [ 32.613618][ T6887] EXT4-fs (loop3): Block reservation details [ 32.613630][ T6887] EXT4-fs (loop3): i_reserved_data_blocks=182 [ 32.704768][ T26] cfg80211: failed to load regulatory.db [ 33.363682][ T42] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 33.936308][ T6552] Bluetooth: hci0: command tx timeout [ 33.937459][ T6117] Bluetooth: hci1: command tx timeout [ 33.938914][ T6552] Bluetooth: hci3: command tx timeout [ 33.940050][ T6117] Bluetooth: hci2: command tx timeout [ 34.009164][ T6117] Bluetooth: hci4: command tx timeout [ 34.129961][ T6950] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 34.236446][ T6962] loop4: detected capacity change from 0 to 2048 [ 34.275339][ T6540] loop4: p2 p3 p7 [ 34.304128][ T6962] loop4: p2 p3 p7 [ 34.322161][ T6962] FAT-fs (loop4p2): bogus number of reserved sectors [ 34.322207][ T6962] FAT-fs (loop4p2): Can't find a valid FAT filesystem [ 34.335559][ T6968] netlink: 'syz.2.129': attribute type 2 has an invalid length. [ 34.380321][ T6566] udevd[6566]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 34.382258][ T6562] udevd[6562]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 34.387700][ T6540] udevd[6540]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 34.406882][ T6972] loop0: detected capacity change from 0 to 1024 [ 34.408733][ T6562] udevd[6562]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 34.412346][ T6540] udevd[6540]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 34.413007][ T6542] udevd[6542]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 34.460506][ T6972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 34.498032][ T6558] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 34.639106][ T7002] loop2: detected capacity change from 0 to 128 [ 34.751594][ T7011] netlink: 16 bytes leftover after parsing attributes in process `syz.1.147'. [ 34.773697][ T7013] loop2: detected capacity change from 0 to 8192 [ 35.081405][ T7020] loop3: detected capacity change from 0 to 512 [ 35.107796][ T7020] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.151: missing EA_INODE flag [ 35.112441][ T7020] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.151: error while reading EA inode 11 err=-117 [ 35.115425][ T7020] EXT4-fs (loop3): 1 orphan inode deleted [ 35.118548][ T7020] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.153746][ T6557] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.191927][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.153'. [ 35.333112][ T7054] syz.2.164: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 35.333932][ T7054] CPU: 0 UID: 0 PID: 7054 Comm: syz.2.164 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 35.333952][ T7054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 35.333958][ T7054] Call trace: [ 35.333961][ T7054] show_stack+0x2c/0x3c (C) [ 35.333977][ T7054] __dump_stack+0x30/0x40 [ 35.333987][ T7054] dump_stack_lvl+0xd8/0x12c [ 35.333999][ T7054] dump_stack+0x1c/0x28 [ 35.334008][ T7054] warn_alloc+0x1f8/0x30c [ 35.334020][ T7054] __vmalloc_node_range_noprof+0x114/0xf70 [ 35.334029][ T7054] vmalloc_user_noprof+0xf0/0x14c [ 35.334036][ T7054] xskq_create+0xbc/0x168 [ 35.334043][ T7054] xsk_init_queue+0xb0/0x118 [ 35.334054][ T7054] xsk_setsockopt+0x478/0x684 [ 35.334065][ T7054] do_sock_setsockopt+0x1ec/0x328 [ 35.334074][ T7054] __arm64_sys_setsockopt+0x170/0x1e0 [ 35.334082][ T7054] invoke_syscall+0x98/0x2b8 [ 35.334088][ T7054] el0_svc_common+0x130/0x23c [ 35.334094][ T7054] do_el0_svc+0x48/0x58 [ 35.334101][ T7054] el0_svc+0x58/0x180 [ 35.334108][ T7054] el0t_64_sync_handler+0x84/0x12c [ 35.334115][ T7054] el0t_64_sync+0x198/0x19c [ 35.335045][ T7054] Mem-Info: [ 35.335057][ T7054] active_anon:22 inactive_anon:7709 isolated_anon:0 [ 35.335057][ T7054] active_file:2280 inactive_file:13937 isolated_file:0 [ 35.335057][ T7054] unevictable:768 dirty:1651 writeback:0 [ 35.335057][ T7054] slab_reclaimable:10346 slab_unreclaimable:90757 [ 35.335057][ T7054] mapped:31893 shmem:3825 pagetables:1099 [ 35.335057][ T7054] sec_pagetables:0 bounce:0 [ 35.335057][ T7054] kernel_misc_reclaimable:0 [ 35.335057][ T7054] free:1420480 free_pcp:25178 free_cma:7360 [ 35.335088][ T7054] Node 0 active_anon:88kB inactive_anon:30836kB active_file:9120kB inactive_file:55748kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:127572kB dirty:6604kB writeback:0kB shmem:15300kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9464kB pagetables:4396kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 35.335104][ T7054] Node 0 DMA free:3076864kB boost:0kB min:20864kB low:26080kB high:31296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 35.335123][ T7054] lowmem_reserve[]: 0 0 3492 3492 3492 [ 35.335142][ T7054] Node 0 Normal free:2605056kB boost:0kB min:24188kB low:30232kB high:36276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:88kB inactive_anon:30836kB active_file:9120kB inactive_file:55748kB unevictable:3072kB writepending:6604kB present:5242880kB managed:3575940kB mlocked:0kB bounce:0kB free_pcp:100712kB local_pcp:55996kB free_cma:0kB [ 35.335160][ T7054] lowmem_reserve[]: 0 0 0 0 0 [ 35.335178][ T7054] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 35.335233][ T7054] Node 0 Normal: 108*4kB (UE) 264*8kB (UME) 11*16kB (UM) 3*32kB (UME) 0*64kB 2*128kB (UM) 0*256kB 4*512kB (UME) 1*1024kB (E) 1*2048kB (M) 634*4096kB (M) = 2605056kB [ 35.335397][ T7054] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 35.335403][ T7054] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 35.335409][ T7054] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 35.335415][ T7054] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 35.335421][ T7054] 20034 total pagecache pages [ 35.335425][ T7054] 0 pages in swap cache [ 35.335428][ T7054] Free swap = 124996kB [ 35.335431][ T7054] Total swap = 124996kB [ 35.335435][ T7054] 2097152 pages RAM [ 35.335438][ T7054] 0 pages HighMem/MovableOnly [ 35.335441][ T7054] 433119 pages reserved [ 35.335444][ T7054] 8192 pages cma reserved [ 35.335447][ T7054] 0 pages hwpoisoned [ 35.364484][ T7057] loop2: detected capacity change from 0 to 512 [ 35.365575][ T7057] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 35.366314][ T7057] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 35.366408][ T7057] EXT4-fs (loop2): orphan cleanup on readonly fs [ 35.366417][ T7057] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.165: bad orphan inode 267 [ 35.366785][ T7057] EXT4-fs (loop2): Remounting filesystem read-only [ 35.367303][ T7057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 35.371831][ T7057] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.165: dx entry: limit 0 != root limit 125 [ 35.371852][ T7057] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.165: Corrupt directory, running e2fsck is recommended [ 35.398537][ T6556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 35.586466][ T31] kauditd_printk_skb: 60 callbacks suppressed [ 35.586505][ T31] audit: type=1326 audit(35.560:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7076 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8735c0a8 code=0x7ffc0000 [ 35.596510][ T31] audit: type=1326 audit(35.570:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7076 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8735c0a8 code=0x7ffc0000 [ 35.596550][ T31] audit: type=1326 audit(35.570:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7076 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8735c0a8 code=0x7ffc0000 [ 35.596564][ T31] audit: type=1326 audit(35.570:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7076 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8735c0a8 code=0x7ffc0000 [ 35.596577][ T31] audit: type=1326 audit(35.570:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7076 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8735c0a8 code=0x7ffc0000 [ 35.596591][ T31] audit: type=1326 audit(35.570:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7076 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=25 compat=0 ip=0xffff8735c0a8 code=0x7ffc0000 [ 35.596603][ T31] audit: type=1326 audit(35.570:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7076 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8735c0a8 code=0x7ffc0000 [ 35.596615][ T31] audit: type=1326 audit(35.570:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7076 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8735c0a8 code=0x7ffc0000 [ 35.607104][ T31] audit: type=1326 audit(35.580:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7078 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f95c0a8 code=0x7ffc0000 [ 35.607130][ T31] audit: type=1326 audit(35.580:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7078 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f95c0a8 code=0x7ffc0000 [ 35.642648][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.642680][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.642699][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.642710][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.642720][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.642730][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.642740][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.642749][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.642758][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.642767][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.650605][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 35.697117][ T7088] fido_id[7088]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 35.833729][ T7107] loop1: detected capacity change from 0 to 1024 [ 36.009245][ T52] Bluetooth: hci1: command tx timeout [ 36.010584][ T52] Bluetooth: hci0: command tx timeout [ 36.012232][ T6552] Bluetooth: hci3: command tx timeout [ 36.013630][ T6117] Bluetooth: hci2: command tx timeout [ 36.088867][ T6117] Bluetooth: hci4: command tx timeout [ 36.110783][ T7107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.150459][ T6549] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.190086][ T7126] loop1: detected capacity change from 0 to 128 [ 36.348244][ T7139] netlink: 24 bytes leftover after parsing attributes in process `syz.1.198'. [ 36.481431][ T7161] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 36.483711][ T7160] IPVS: stopping master sync thread 7161 ... [ 36.527013][ T7165] loop4: detected capacity change from 0 to 512 [ 36.527031][ T7167] ALSA: seq fatal error: cannot create timer (-22) [ 36.533636][ T7165] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.533668][ T7165] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 36.544836][ T7165] EXT4-fs (loop4): 1 orphan inode deleted [ 36.544866][ T7165] EXT4-fs (loop4): 1 truncate cleaned up [ 36.545310][ T7165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.578131][ T6548] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.812472][ T7201] loop0: detected capacity change from 0 to 512 [ 36.820071][ T7201] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 36.824241][ T7199] loop4: detected capacity change from 0 to 2048 [ 36.826282][ T7201] EXT4-fs (loop0): Remounting filesystem read-only [ 36.826355][ T7201] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 36.826407][ T7201] EXT4-fs (loop0): 1 orphan inode deleted [ 36.826872][ T7201] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.867570][ T6558] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.927070][ T7213] loop3: detected capacity change from 0 to 164 [ 36.931548][ T7213] Unsupported NM flag settings (8) [ 37.528104][ T7240] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.611627][ T7243] loop0: detected capacity change from 0 to 1024 [ 37.615664][ T7243] EXT4-fs: Ignoring removed bh option [ 37.622068][ T7243] EXT4-fs: inline encryption not supported [ 37.628062][ T7243] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 37.643498][ T7243] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 37.663761][ T7243] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.235: lblock 2 mapped to illegal pblock 2 (length 1) [ 37.674349][ T7243] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.235: lblock 0 mapped to illegal pblock 48 (length 1) [ 37.678136][ T7243] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.235: Failed to acquire dquot type 0 [ 37.683917][ T7243] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 37.686821][ T7243] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.235: mark_inode_dirty error [ 37.690265][ T7243] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 37.690340][ T7243] EXT4-fs (loop0): 1 orphan inode deleted [ 37.690827][ T7243] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.745047][ T7246] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 37.748430][ T7246] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0 [ 37.772425][ T7243] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 37.778352][ T7251] IPv6: Can't replace route, no match found [ 37.848320][ T6558] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.919296][ T24] IPVS: starting estimator thread 0... [ 38.020355][ T7270] lo speed is unknown, defaulting to 1000 [ 38.020578][ T7270] lo speed is unknown, defaulting to 1000 [ 38.159606][ T7259] IPVS: using max 69 ests per chain, 165600 per kthread [ 38.245166][ T7267] netlink: 14 bytes leftover after parsing attributes in process `syz.4.243'. [ 38.276894][ T7278] netlink: 24 bytes leftover after parsing attributes in process `syz.3.245'. [ 38.278598][ T7267] hsr_slave_0: left promiscuous mode [ 38.283225][ T7267] hsr_slave_1: left promiscuous mode [ 38.305640][ T7282] loop2: detected capacity change from 0 to 1024 [ 38.306938][ T7270] lo speed is unknown, defaulting to 1000 [ 38.310309][ T7282] EXT4-fs: Ignoring removed nobh option [ 38.313923][ T7270] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 38.315663][ T7270] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 38.336491][ T7284] netlink: 32 bytes leftover after parsing attributes in process `syz.0.248'. [ 38.390720][ T7270] lo speed is unknown, defaulting to 1000 [ 38.391233][ T7270] lo speed is unknown, defaulting to 1000 [ 38.391574][ T7270] lo speed is unknown, defaulting to 1000 [ 38.392993][ T7270] lo speed is unknown, defaulting to 1000 [ 38.393493][ T7270] lo speed is unknown, defaulting to 1000 [ 38.393534][ T7282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.442170][ T6556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.716730][ T7301] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 38.716959][ T7298] IPVS: stopping master sync thread 7301 ... [ 38.978368][ T7322] lo speed is unknown, defaulting to 1000 [ 39.340346][ T7349] loop0: detected capacity change from 0 to 1024 [ 39.404193][ T7349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.439621][ T6558] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.795250][ T7370] loop2: detected capacity change from 0 to 128 [ 39.820082][ T7370] Process accounting resumed [ 39.884967][ T7381] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.906272][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.286'. [ 39.969514][ T7381] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.099511][ T7388] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 40.101757][ T7388] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 40.102353][ T7381] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.108415][ T7389] loop0: detected capacity change from 0 to 512 [ 40.117524][ T7389] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.127256][ T7389] EXT4-fs (loop0): 1 truncate cleaned up [ 40.127725][ T7389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.157710][ T7381] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.206884][ T6558] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.244448][ T7398] pimreg: entered allmulticast mode [ 40.284727][ T7398] pimreg: left allmulticast mode [ 40.304672][ T14] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.307872][ T14] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.336329][ T4614] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.336391][ T4614] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.528698][ T7418] netlink: 60 bytes leftover after parsing attributes in process `syz.0.302'. [ 40.673675][ T7426] loop0: detected capacity change from 0 to 512 [ 40.675383][ T7426] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.677826][ T7426] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.683213][ T7426] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.683241][ T7426] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 40.705631][ T7426] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.305: Allocating blocks 41-42 which overlap fs metadata [ 40.713860][ T7426] __quota_error: 283 callbacks suppressed [ 40.713896][ T7426] Quota error (device loop0): write_blk: dquota write failed [ 40.713909][ T7426] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 40.713957][ T7426] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.305: Allocating blocks 41-42 which overlap fs metadata [ 40.714550][ T7426] Quota error (device loop0): write_blk: dquota write failed [ 40.714614][ T7426] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 40.714642][ T7426] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.305: Failed to acquire dquot type 1 [ 40.721835][ T7426] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 40.722073][ T7426] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.305: corrupted inode contents [ 40.725062][ T7426] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #12: comm syz.0.305: mark_inode_dirty error [ 40.725582][ T7426] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.305: corrupted inode contents [ 40.725695][ T7426] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.305: mark_inode_dirty error [ 40.725842][ T7426] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.305: corrupted inode contents [ 40.727005][ T7426] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 40.727132][ T7426] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.305: corrupted inode contents [ 40.727231][ T7426] EXT4-fs error (device loop0): ext4_truncate:4666: inode #12: comm syz.0.305: mark_inode_dirty error [ 40.727327][ T7426] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 40.727523][ T7426] EXT4-fs (loop0): 1 truncate cleaned up [ 40.727960][ T7426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.802302][ T6558] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.847797][ T7434] loop0: detected capacity change from 0 to 128 [ 40.915124][ T31] audit: type=1326 audit(40.890:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7443 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8735c0a8 code=0x7ffc0000 [ 40.928141][ T31] audit: type=1326 audit(40.900:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7443 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8735c0a8 code=0x7ffc0000 [ 40.928554][ T31] audit: type=1326 audit(40.900:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7443 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8735c0a8 code=0x7ffc0000 [ 40.928573][ T31] audit: type=1326 audit(40.900:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7443 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8735c0a8 code=0x7ffc0000 [ 40.930934][ T31] audit: type=1326 audit(40.910:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7443 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8735c0a8 code=0x7ffc0000 [ 40.930948][ T31] audit: type=1326 audit(40.910:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7443 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8735c0a8 code=0x7ffc0000 [ 41.191446][ T24] hid_parser_main: 22 callbacks suppressed [ 41.191484][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.191504][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.191517][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.191528][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.191538][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.191548][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.191558][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.191567][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.191576][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.191586][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.205676][ T24] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 41.263274][ T7464] fido_id[7464]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 41.842908][ T7492] loop3: detected capacity change from 0 to 128 [ 42.344470][ T7502] hub 2-0:1.0: USB hub found [ 42.350926][ T7502] hub 2-0:1.0: 8 ports detected [ 42.366924][ T7506] binfmt_misc: register: failed to install interpreter file ./file0 [ 42.451881][ T7512] loop4: detected capacity change from 0 to 1024 [ 42.467761][ T7512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.525338][ T6548] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.565617][ T7520] loop3: detected capacity change from 0 to 128 [ 42.802331][ T7532] loop2: detected capacity change from 0 to 512 [ 42.830999][ T7532] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.348: bg 0: block 5: invalid block bitmap [ 42.835027][ T7532] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 42.837928][ T7532] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.348: invalid indirect mapped block 3 (level 2) [ 42.843023][ T7532] EXT4-fs (loop2): 2 truncates cleaned up [ 42.843575][ T7532] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.855272][ T6556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.782689][ T7561] process 'syz.2.359' launched './file1' with NULL argv: empty string added [ 43.823879][ T7563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'. [ 43.856044][ T7566] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 43.856321][ T7565] IPVS: stopping master sync thread 7566 ... [ 43.977884][ T7471] Set syz1 is full, maxelem 65536 reached [ 44.090967][ T7578] netlink: 'syz.4.367': attribute type 49 has an invalid length. [ 44.154351][ T7576] lo speed is unknown, defaulting to 1000 [ 44.491249][ T7601] atomic_op 000000009e58921f conn xmit_atomic 0000000000000000 [ 44.790595][ T7525] Set syz1 is full, maxelem 65536 reached [ 45.182773][ T7623] bridge_slave_0: left allmulticast mode [ 45.182811][ T7623] bridge_slave_0: left promiscuous mode [ 45.182887][ T7623] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.211569][ T7623] bridge_slave_1: left allmulticast mode [ 45.211622][ T7623] bridge_slave_1: left promiscuous mode [ 45.211711][ T7623] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.224104][ T7629] loop4: detected capacity change from 0 to 164 [ 45.228531][ T7629] rock: directory entry would overflow storage [ 45.228549][ T7629] rock: sig=0x66, size=4, remaining=3 [ 45.232065][ T7631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.386'. [ 45.241598][ T7623] bond0: (slave bond_slave_0): Releasing backup interface [ 45.286089][ T7623] bond0: (slave bond_slave_1): Releasing backup interface [ 45.313163][ T7623] team0: Port device team_slave_0 removed [ 45.316581][ T7623] team0: Port device team_slave_1 removed [ 45.317492][ T7623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.317504][ T7623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.323116][ T7623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.323146][ T7623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.385525][ T7623] netlink: 'syz.3.382': attribute type 3 has an invalid length. [ 45.857393][ T7662] atomic_op 0000000071faa91b conn xmit_atomic 0000000000000000 [ 46.424099][ T31] kauditd_printk_skb: 139 callbacks suppressed [ 46.424134][ T31] audit: type=1326 audit(46.400:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7672 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f95c0a8 code=0x7ffc0000 [ 46.424158][ T31] audit: type=1326 audit(46.400:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7672 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f95c0a8 code=0x7ffc0000 [ 46.426386][ T7674] loop9: detected capacity change from 0 to 7 [ 46.433450][ T31] audit: type=1326 audit(46.400:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7672 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9f95c0a8 code=0x7ffc0000 [ 46.433491][ T31] audit: type=1326 audit(46.400:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7672 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f95c0a8 code=0x7ffc0000 [ 46.433515][ T31] audit: type=1326 audit(46.400:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7672 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f95c0a8 code=0x7ffc0000 [ 46.433532][ T31] audit: type=1326 audit(46.400:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7672 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=101 compat=0 ip=0xffff9f95c0a8 code=0x7ffc0000 [ 46.433548][ T31] audit: type=1326 audit(46.400:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7672 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f95c0a8 code=0x7ffc0000 [ 46.433564][ T31] audit: type=1326 audit(46.400:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7672 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f95c0a8 code=0x7ffc0000 [ 46.433579][ T31] audit: type=1326 audit(46.400:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7672 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9f95c0a8 code=0x7ffc0000 [ 46.433593][ T31] audit: type=1326 audit(46.400:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7672 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f95c0a8 code=0x7ffc0000 [ 46.447690][ T7676] netlink: 'syz.4.401': attribute type 7 has an invalid length. [ 46.462334][ T7674] Dev loop9: unable to read RDB block 7 [ 46.462368][ T7674] loop9: AHDI p1 p2 p3 [ 46.462391][ T7674] loop9: partition table partially beyond EOD, truncated [ 46.462498][ T7674] loop9: p1 start 1601398130 is beyond EOD, truncated [ 46.462517][ T7674] loop9: p2 start 1702059890 is beyond EOD, truncated [ 46.965574][ T7703] serio: Serial port ptm0 [ 47.270960][ T7716] atomic_op 0000000014f1cbf9 conn xmit_atomic 0000000000000000 [ 47.481401][ T7721] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.523377][ T7730] netlink: 'syz.2.422': attribute type 3 has an invalid length. [ 47.542262][ T7721] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.655968][ T7721] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.680277][ T7740] vxcan2: entered promiscuous mode [ 47.680311][ T7740] vxcan2: entered allmulticast mode [ 47.717940][ T7721] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.775217][ T7752] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 47.775258][ T7752] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 48.079985][ T4614] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.083681][ T4614] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.083736][ T4614] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.086510][ T7246] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.668310][ T7782] lo speed is unknown, defaulting to 1000 [ 48.981461][ T7783] atomic_op 00000000c0e122a7 conn xmit_atomic 0000000000000000 [ 49.023236][ T7788] loop4: detected capacity change from 0 to 512 [ 49.038104][ T7790] loop1: detected capacity change from 0 to 128 [ 49.046337][ T7788] EXT4-fs error (device loop4): ext4_orphan_get:1392: comm syz.4.442: inode #15: comm syz.4.442: iget: illegal inode # [ 49.054601][ T7788] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.442: couldn't read orphan inode 15 (err -117) [ 49.059083][ T7788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.069894][ T7790] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 49.071696][ T7790] FAT-fs (loop1): Filesystem has been set read-only [ 49.297822][ T6548] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.422460][ T7812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.422661][ T7812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.446832][ T7811] loop4: detected capacity change from 0 to 2048 [ 49.501524][ T7811] loop4: p1 < > p4 [ 49.504295][ T7811] loop4: p4 size 8388608 extends beyond EOD, truncated [ 49.554132][ T6983] udevd[6983]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 49.576081][ T6540] udevd[6540]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 49.612749][ T7819] loop4: detected capacity change from 0 to 1024 [ 49.613088][ T7819] EXT4-fs: Ignoring removed orlov option [ 49.624141][ T7819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.647215][ T6548] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.950687][ T7828] loop4: detected capacity change from 0 to 128 [ 49.952835][ T7828] EXT4-fs: Ignoring removed nobh option [ 49.956052][ T7828] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.972161][ T6548] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.998260][ T7831] IPv6: Can't replace route, no match found [ 50.126217][ T7848] loop0: detected capacity change from 0 to 512 [ 50.128748][ T7848] EXT4-fs: Ignoring removed oldalloc option [ 50.143523][ T7848] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.467: Parent and EA inode have the same ino 15 [ 50.146591][ T7848] EXT4-fs (loop0): Remounting filesystem read-only [ 50.148166][ T7848] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -30) [ 50.151123][ T7848] EXT4-fs (loop0): 1 orphan inode deleted [ 50.153298][ T7848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.175261][ T6558] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.274014][ T7861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.471'. [ 50.274047][ T7861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.471'. [ 50.274057][ T7861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.471'. [ 50.360635][ T7870] netlink: 28 bytes leftover after parsing attributes in process `syz.0.476'. [ 50.360677][ T7870] netlink: 28 bytes leftover after parsing attributes in process `syz.0.476'. [ 50.420409][ T7878] loop0: detected capacity change from 0 to 128 [ 50.704893][ T7905] loop3: detected capacity change from 0 to 4096 [ 50.734937][ T7905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.125921][ T7925] netlink: 'syz.2.498': attribute type 21 has an invalid length. [ 51.125978][ T7925] netlink: 132 bytes leftover after parsing attributes in process `syz.2.498'. [ 51.304525][ T7943] loop4: detected capacity change from 0 to 512 [ 51.327910][ T7943] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 51.328478][ T7943] EXT4-fs (loop4): mount failed [ 51.393441][ T7947] vlan2: entered allmulticast mode [ 51.393474][ T7947] dummy0: entered allmulticast mode [ 51.447493][ T7948] loop1: detected capacity change from 0 to 2048 [ 51.466171][ T7948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 51.482949][ T6557] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.507174][ T7953] loop3: detected capacity change from 0 to 164 [ 51.512342][ T7953] rock: directory entry would overflow storage [ 51.512361][ T7953] rock: sig=0x66, size=4, remaining=3 [ 51.572646][ T31] kauditd_printk_skb: 854 callbacks suppressed [ 51.572705][ T31] audit: type=1326 audit(51.550:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7954 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f95c0a8 code=0x7ffc0000 [ 51.572734][ T31] audit: type=1326 audit(51.550:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7954 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f95c0a8 code=0x7ffc0000 [ 51.591118][ T31] audit: type=1326 audit(51.570:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7954 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=435 compat=0 ip=0xffff9f95c0a8 code=0x7ffc0000 [ 51.591903][ T7948] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 51.595801][ T7948] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 522 with error 28 [ 51.595819][ T7948] EXT4-fs (loop1): This should not happen!! Data will be lost [ 51.595819][ T7948] [ 51.595826][ T7948] EXT4-fs (loop1): Total free blocks count 0 [ 51.595832][ T7948] EXT4-fs (loop1): Free/Dirty block details [ 51.595839][ T7948] EXT4-fs (loop1): free_blocks=2415919104 [ 51.595845][ T7948] EXT4-fs (loop1): dirty_blocks=528 [ 51.595850][ T7948] EXT4-fs (loop1): Block reservation details [ 51.595855][ T7948] EXT4-fs (loop1): i_reserved_data_blocks=33 [ 51.626532][ T31] audit: type=1326 audit(51.600:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7959 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff9f9867c8 code=0x7ffc0000 [ 51.630715][ T31] audit: type=1326 audit(51.600:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7954 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f95c0a8 code=0x7ffc0000 [ 51.630746][ T31] audit: type=1326 audit(51.600:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7954 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f95c0a8 code=0x7ffc0000 [ 51.637822][ T31] audit: type=1326 audit(51.610:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7954 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=131 compat=0 ip=0xffff9f95c0a8 code=0x7ffc0000 [ 51.641699][ T31] audit: type=1326 audit(51.620:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7954 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f95c0a8 code=0x7ffc0000 [ 51.645175][ T31] audit: type=1326 audit(51.620:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7954 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f95c0a8 code=0x7ffc0000 [ 51.675654][ T7963] loop0: detected capacity change from 0 to 512 [ 51.684744][ T7963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.707280][ T6558] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.846608][ T7980] loop3: detected capacity change from 0 to 1024 [ 51.853827][ T7980] EXT4-fs: inline encryption not supported [ 51.856199][ T7980] EXT4-fs: Ignoring removed bh option [ 51.874030][ T7980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.887361][ T6557] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.200809][ T7992] netlink: 28 bytes leftover after parsing attributes in process `syz.4.520'. [ 52.200856][ T7992] netlink: 28 bytes leftover after parsing attributes in process `syz.4.520'. [ 52.263855][ T42] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 16 with max blocks 16 with error 28 [ 52.497035][ T31] audit: type=1326 audit(52.470:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8014 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f95c0a8 code=0x7ffc0000 [ 52.575831][ T8022] loop1: detected capacity change from 0 to 1024 [ 52.592693][ T8022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.803395][ T6549] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.860502][ T8038] loop3: detected capacity change from 0 to 512 [ 52.863413][ T8038] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 52.870138][ T8038] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 52.870286][ T8038] EXT4-fs (loop3): orphan cleanup on readonly fs [ 52.870296][ T8038] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.540: bad orphan inode 267 [ 52.870918][ T8038] EXT4-fs (loop3): Remounting filesystem read-only [ 52.877182][ T8038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 52.889660][ T6557] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 52.895665][ T8046] syz.1.541 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 52.975468][ T8053] loop2: detected capacity change from 0 to 1024 [ 52.980210][ T8056] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 53.006283][ T8053] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 53.036054][ T8053] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.545: lblock 3 mapped to illegal pblock 3 (length 1) [ 53.043107][ T8053] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 53.045756][ T8053] EXT4-fs (loop2): This should not happen!! Data will be lost [ 53.045756][ T8053] [ 53.056442][ T6556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 53.146081][ T8077] random: crng reseeded on system resumption [ 53.186233][ T8082] netlink: 'syz.1.556': attribute type 3 has an invalid length. [ 53.187985][ T8082] netlink: 'syz.1.556': attribute type 1 has an invalid length. [ 53.193507][ T8082] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.556'. [ 53.220929][ T8085] loop2: detected capacity change from 0 to 1024 [ 53.241112][ T8085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.257787][ T8085] usb usb1: check_ctrlrecip: process 8085 (+}[@) requesting ep 01 but needs 81 [ 53.267291][ T8097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.563'. [ 53.418335][ T6556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.535038][ T8119] bridge_slave_1: left allmulticast mode [ 53.536111][ T8119] bridge_slave_1: left promiscuous mode [ 53.536286][ T8119] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.538458][ T8119] bridge_slave_0: left allmulticast mode [ 53.539830][ T8119] bridge_slave_0: left promiscuous mode [ 53.539968][ T8119] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.583714][ T8123] lo speed is unknown, defaulting to 1000 [ 53.726868][ T8146] lo speed is unknown, defaulting to 1000 [ 53.811358][ T8155] loop1: detected capacity change from 0 to 512 [ 53.857191][ T8155] EXT4-fs error (device loop1): ext4_quota_enable:7124: inode #4: comm syz.1.585: iget: bogus i_mode (11) [ 53.859797][ T8155] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.585: Bad quota inode: 4, type: 1 [ 53.864755][ T8155] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 53.865264][ T8155] EXT4-fs (loop1): mount failed [ 53.891124][ T8155] $H: renamed from bond0 (while UP) [ 53.921317][ T8155] $H: entered promiscuous mode [ 53.921353][ T8155] bond_slave_0: entered promiscuous mode [ 53.921444][ T8155] bond_slave_1: entered promiscuous mode [ 54.023071][ T8175] bond_slave_0: entered promiscuous mode [ 54.023108][ T8175] bond_slave_1: entered promiscuous mode [ 54.025531][ T8175] macvtap1: entered promiscuous mode [ 54.026855][ T8175] bond0: entered promiscuous mode [ 54.028132][ T8175] macvtap1: entered allmulticast mode [ 54.031068][ T8175] bond0: entered allmulticast mode [ 54.032202][ T8175] bond_slave_0: entered allmulticast mode [ 54.044046][ T8175] bond_slave_1: entered allmulticast mode [ 54.047801][ T8175] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 54.106013][ T8175] bond0: left allmulticast mode [ 54.106045][ T8175] bond_slave_0: left allmulticast mode [ 54.106071][ T8175] bond_slave_1: left allmulticast mode [ 54.106093][ T8175] bond0: left promiscuous mode [ 54.106313][ T8175] bond_slave_0: left promiscuous mode [ 54.106334][ T8175] bond_slave_1: left promiscuous mode [ 54.128154][ T8192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.130626][ T8192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.465518][ T8231] loop3: detected capacity change from 0 to 1024 [ 54.467008][ T8231] EXT4-fs: Ignoring removed orlov option [ 54.467045][ T8231] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.502844][ T8231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.512356][ T6557] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.953942][ T8295] loop2: detected capacity change from 0 to 256 [ 54.956609][ T8295] FAT-fs (loop2): Directory bread(block 1285) failed [ 55.027772][ T8303] vlan0: entered allmulticast mode [ 55.029352][ T8303] dummy0: entered allmulticast mode [ 55.083384][ T8311] loop2: detected capacity change from 0 to 2048 [ 55.147286][ T8311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 55.203401][ T8322] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:169: inode #12: comm syz.2.645: inline data xattr refers to an external xattr inode [ 55.223567][ T8324] tc_dump_action: action bad kind [ 55.284948][ T8322] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 55.285118][ T8322] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 55.285128][ T8322] EXT4-fs (loop2): This should not happen!! Data will be lost [ 55.285128][ T8322] [ 55.285134][ T8322] EXT4-fs (loop2): Total free blocks count 0 [ 55.285139][ T8322] EXT4-fs (loop2): Free/Dirty block details [ 55.285145][ T8322] EXT4-fs (loop2): free_blocks=2415919104 [ 55.285151][ T8322] EXT4-fs (loop2): dirty_blocks=3040 [ 55.285156][ T8322] EXT4-fs (loop2): Block reservation details [ 55.285160][ T8322] EXT4-fs (loop2): i_reserved_data_blocks=190 [ 55.375579][ T8334] loop3: detected capacity change from 0 to 256 [ 55.562663][ T14] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 55.694383][ T8356] netlink: 'syz.2.667': attribute type 7 has an invalid length. [ 55.741267][ T8363] loop3: detected capacity change from 0 to 164 [ 55.761982][ T8363] syz.3.671: attempt to access beyond end of device [ 55.761982][ T8363] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 55.764974][ T8363] syz.3.671: attempt to access beyond end of device [ 55.764974][ T8363] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 55.843385][ T8376] loop2: detected capacity change from 0 to 512 [ 55.854967][ T8376] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 55.892973][ T8376] EXT4-fs (loop2): 1 truncate cleaned up [ 55.893469][ T8376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.965038][ T6556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.053416][ T8393] __nla_validate_parse: 10 callbacks suppressed [ 56.053451][ T8393] netlink: 28 bytes leftover after parsing attributes in process `syz.3.682'. [ 56.115978][ T8398] netlink: 'syz.3.684': attribute type 13 has an invalid length. [ 56.124802][ T8400] loop2: detected capacity change from 0 to 512 [ 56.151886][ T8400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.177062][ T6556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.655051][ T14] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.655118][ T14] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.655150][ T14] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.655178][ T14] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.801542][ T8429] dummy0: entered promiscuous mode [ 56.822160][ T8428] dummy0: left promiscuous mode [ 56.865022][ T8439] loop1: detected capacity change from 0 to 256 [ 56.925172][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 56.925223][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.702'. [ 57.000041][ T8448] loop4: detected capacity change from 0 to 512 [ 57.031975][ T8444] loop2: detected capacity change from 0 to 8192 [ 57.033438][ T8448] __quota_error: 213 callbacks suppressed [ 57.033487][ T8448] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 57.033553][ T8448] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 57.038981][ T8448] EXT4-fs (loop4): mount failed [ 57.095277][ T6540] loop2: p1 p4 < > [ 57.095314][ T6540] loop2: partition table partially beyond EOD, truncated [ 57.096576][ T6540] loop2: p1 start 4261412864 is beyond EOD, truncated [ 57.105448][ T8444] loop2: p1 p4 < > [ 57.105476][ T8444] loop2: partition table partially beyond EOD, truncated [ 57.113000][ T8444] loop2: p1 start 4261412864 is beyond EOD, truncated [ 57.207649][ T8470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.714'. [ 57.207684][ T8470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.207726][ T8470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.212842][ T8470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.212872][ T8470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.241493][ T6983] udevd[6983]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 57.524399][ T6983] udevd[6983]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 57.575682][ T8495] netlink: 32 bytes leftover after parsing attributes in process `syz.1.724'. [ 57.674545][ T8507] loop4: detected capacity change from 0 to 164 [ 57.677204][ T8507] ISOFS: unable to read i-node block [ 57.678246][ T8507] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 57.724470][ T31] audit: type=1326 audit(57.700:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8518 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa815c0a8 code=0x7ffc0000 [ 57.724564][ T31] audit: type=1326 audit(57.700:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8518 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa815c0a8 code=0x7ffc0000 [ 57.724765][ T31] audit: type=1326 audit(57.700:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8518 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=145 compat=0 ip=0xffffa815c0a8 code=0x7ffc0000 [ 57.724876][ T31] audit: type=1326 audit(57.700:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8518 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa815c0a8 code=0x7ffc0000 [ 57.724933][ T31] audit: type=1326 audit(57.700:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8518 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa815c0a8 code=0x7ffc0000 [ 58.122600][ T31] audit: type=1326 audit(58.100:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8540 comm="syz.4.741" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa815c0a8 code=0x7ffc0000 [ 58.122685][ T31] audit: type=1326 audit(58.100:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8540 comm="syz.4.741" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa815c0a8 code=0x7ffc0000 [ 58.126409][ T31] audit: type=1326 audit(58.100:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8540 comm="syz.4.741" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=214 compat=0 ip=0xffffa815c0a8 code=0x7ffc0000 [ 58.126478][ T31] audit: type=1326 audit(58.100:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8540 comm="syz.4.741" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa815c0a8 code=0x7ffc0000 [ 58.214175][ T8550] lo speed is unknown, defaulting to 1000 [ 58.245374][ T8553] netlink: 'syz.4.745': attribute type 3 has an invalid length. [ 58.298333][ T8555] loop4: detected capacity change from 0 to 1024 [ 58.350629][ T8560] netlink: 'syz.4.748': attribute type 21 has an invalid length. [ 58.352439][ T8560] netlink: 156 bytes leftover after parsing attributes in process `syz.4.748'. [ 58.354555][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.748'. [ 58.408667][ T8566] loop2: detected capacity change from 0 to 128 [ 58.588345][ T8579] lo speed is unknown, defaulting to 1000 [ 58.656390][ T8585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.756'. [ 58.691960][ T8589] loop3: detected capacity change from 0 to 1024 [ 58.706350][ T8589] EXT4-fs: Ignoring removed bh option [ 58.726170][ T8589] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 58.736106][ T8589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.834957][ T6557] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.124172][ T8597] wg2: entered promiscuous mode [ 59.126295][ T8597] wg2: entered allmulticast mode [ 59.227758][ T8606] netlink: 76 bytes leftover after parsing attributes in process `syz.0.764'. [ 59.305749][ T8609] netlink: 'syz.0.765': attribute type 1 has an invalid length. [ 59.305790][ T8609] netlink: 'syz.0.765': attribute type 2 has an invalid length. [ 59.449559][ T8621] netlink: 'syz.0.768': attribute type 10 has an invalid length. [ 59.465835][ T8621] team0: Port device dummy0 added [ 59.843676][ T8641] lo speed is unknown, defaulting to 1000 [ 59.860784][ T8643] loop1: detected capacity change from 0 to 1764 [ 59.861167][ T8643] iso9660: Bad value for 'uid' [ 59.861180][ T8643] iso9660: Bad value for 'uid' [ 60.196748][ T8655] erspan0: entered promiscuous mode [ 60.347294][ T8663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.786'. [ 60.413396][ T8673] loop1: detected capacity change from 0 to 2048 [ 60.498596][ T8679] netlink: 'syz.3.794': attribute type 7 has an invalid length. [ 60.506274][ T6540] loop1: p1 < > p4 [ 60.517449][ T6540] loop1: p4 size 8388608 extends beyond EOD, truncated [ 60.541352][ T8673] loop1: p1 < > p4 [ 60.545875][ T8673] loop1: p4 size 8388608 extends beyond EOD, truncated [ 60.664410][ T8700] loop4: detected capacity change from 0 to 1024 [ 60.664747][ T8700] EXT4-fs: Ignoring removed bh option [ 60.664763][ T8700] EXT4-fs: inline encryption not supported [ 60.670828][ T8700] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 60.674340][ T8700] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 60.695513][ T8700] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.803: lblock 2 mapped to illegal pblock 2 (length 1) [ 60.700167][ T8700] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.803: lblock 0 mapped to illegal pblock 48 (length 1) [ 60.702875][ T8700] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.803: Failed to acquire dquot type 0 [ 60.705267][ T8700] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 60.710912][ T8700] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.803: mark_inode_dirty error [ 60.712952][ T8700] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 60.713009][ T8700] EXT4-fs (loop4): 1 orphan inode deleted [ 60.713463][ T8700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.735077][ T7269] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 60.738808][ T7269] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 0 [ 60.757865][ T6983] udevd[6983]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 60.763063][ T8700] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.803: lblock 0 mapped to illegal pblock 48 (length 1) [ 60.763703][ T7742] udevd[7742]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 60.778980][ T8709] loop3: detected capacity change from 0 to 512 [ 60.781114][ T8709] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 60.781149][ T8709] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 60.795674][ T8709] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm +}[@: Invalid inode table block 1 in block_group 0 [ 60.795886][ T8709] EXT4-fs (loop3): Remounting filesystem read-only [ 60.795920][ T8709] EXT4-fs (loop3): get root inode failed [ 60.795926][ T8709] EXT4-fs (loop3): mount failed [ 60.851565][ T6548] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.901554][ T8696] loop3: detected capacity change from 0 to 512 [ 60.915795][ T8696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.955785][ T6983] udevd[6983]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 60.956709][ T6540] udevd[6540]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 61.014991][ T8717] loop4: detected capacity change from 0 to 128 [ 61.019716][ T6557] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.110857][ T7742] udevd[7742]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 61.126244][ T8717] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 61.127732][ T8717] System zones: 1-3, 19-19, 35-36 [ 61.177503][ T8717] infiniband syz1: set active [ 61.181187][ T8717] infiniband syz1: added syz_tun [ 61.185867][ T6983] udevd[6983]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 61.240941][ T8723] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 61.294718][ T8729] loop1: detected capacity change from 0 to 1024 [ 61.348098][ T8717] RDS/IB: syz1: added [ 61.350876][ T8717] smc: adding ib device syz1 with port count 1 [ 61.353393][ T8717] smc: ib device syz1 port 1 has pnetid [ 61.685570][ T8745] __nla_validate_parse: 1 callbacks suppressed [ 61.685610][ T8745] netlink: 24 bytes leftover after parsing attributes in process `syz.2.816'. [ 61.793273][ T8751] netlink: 'syz.1.819': attribute type 3 has an invalid length. [ 62.126792][ T8788] loop4: detected capacity change from 0 to 1024 [ 62.127557][ T8788] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 62.133801][ T8788] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce118, mo2=0000] [ 62.133849][ T8788] System zones: 0-1, 3-12 [ 62.134651][ T8788] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.836: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 62.134847][ T8788] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.836: couldn't read orphan inode 11 (err -117) [ 62.153879][ T8788] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.836: Invalid block bitmap block 0 in block_group 0 [ 62.154690][ T8788] __quota_error: 161 callbacks suppressed [ 62.154713][ T8788] Quota error (device loop4): write_blk: dquota write failed [ 62.154731][ T8788] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 62.154788][ T8788] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.836: Failed to acquire dquot type 0 [ 62.400801][ T8813] pimreg: entered allmulticast mode [ 62.401779][ T8813] pimreg: left allmulticast mode [ 62.409473][ T31] audit: type=1326 audit(62.370:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8810 comm="syz.1.846" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8735c0a8 code=0x7ffc0000 [ 62.412878][ T31] audit: type=1326 audit(62.380:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8810 comm="syz.1.846" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=425 compat=0 ip=0xffff8735c0a8 code=0x7ffc0000 [ 62.412910][ T31] audit: type=1326 audit(62.380:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8810 comm="syz.1.846" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8735c0a8 code=0x7ffc0000 [ 62.412928][ T31] audit: type=1326 audit(62.380:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8810 comm="syz.1.846" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff8735c0a8 code=0x7ffc0000 [ 62.412945][ T31] audit: type=1326 audit(62.380:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8810 comm="syz.1.846" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8735c0a8 code=0x7ffc0000 [ 62.412961][ T31] audit: type=1326 audit(62.380:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8810 comm="syz.1.846" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8735c0a8 code=0x7ffc0000 [ 62.412977][ T31] audit: type=1326 audit(62.380:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8810 comm="syz.1.846" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8735c0a8 code=0x7ffc0000 [ 62.412992][ T31] audit: type=1326 audit(62.380:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8810 comm="syz.1.846" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8735c0a8 code=0x7ffc0000 [ 62.417007][ T8811] loop1: detected capacity change from 0 to 512 [ 62.417453][ T8811] EXT4-fs: Ignoring removed i_version option [ 62.442254][ T8811] EXT4-fs (loop1): 1 truncate cleaned up [ 62.463371][ T8811] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 62.463420][ T8811] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 62.686015][ T8829] loop3: detected capacity change from 0 to 512 [ 62.690994][ T8829] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.694718][ T8829] EXT4-fs (loop3): 1 truncate cleaned up [ 63.106181][ T8840] netlink: 32 bytes leftover after parsing attributes in process `syz.2.858'. [ 63.203581][ T8844] sch_fq: defrate 4294967295 ignored. [ 63.997079][ T8911] netlink: 16 bytes leftover after parsing attributes in process `syz.4.889'. [ 64.015120][ T8915] loop1: detected capacity change from 0 to 512 [ 64.015546][ T8915] EXT4-fs: Ignoring removed bh option [ 64.018527][ T8915] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 64.018553][ T8915] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 64.030605][ T8915] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 64.035867][ T8915] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 64.096966][ T8920] netlink: 5 bytes leftover after parsing attributes in process `syz.4.894'. [ 64.100812][ T8920] 0{X: renamed from gretap0 (while UP) [ 64.103202][ T8920] 0{X: entered allmulticast mode [ 64.104429][ T8920] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 64.222784][ T8930] Injecting memory failure for pfn 0x20ac5d at process virtual address 0x20000000 [ 64.225269][ T8930] Memory failure: 0x20ac5d: recovery action for reserved kernel page: Ignored [ 64.493756][ T8949] lo speed is unknown, defaulting to 1000 [ 64.500064][ T2412] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.500102][ T2412] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.578242][ T8954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.581723][ T8954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.842116][ T8977] 9pnet_fd: Insufficient options for proto=fd [ 64.877399][ T8984] loop3: detected capacity change from 0 to 512 [ 64.886186][ T8984] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.921: bad orphan inode 15 [ 64.886338][ T8984] ext4_test_bit(bit=14, block=18) = 1 [ 64.886344][ T8984] is_bad_inode(inode)=0 [ 64.886348][ T8984] NEXT_ORPHAN(inode)=1023 [ 64.886351][ T8984] max_ino=32 [ 64.886354][ T8984] i_nlink=0 [ 64.886750][ T8984] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.921: corrupted xattr block 19: invalid header [ 64.886971][ T8984] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 64.887469][ T8984] EXT4-fs mount: 12 callbacks suppressed [ 64.887476][ T8984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 64.918058][ T8989] bridge_slave_0: left allmulticast mode [ 64.921034][ T8989] bridge_slave_0: left promiscuous mode [ 64.922287][ T8989] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.928476][ T8989] bridge_slave_1: left allmulticast mode [ 64.928498][ T8989] bridge_slave_1: left promiscuous mode [ 64.928566][ T8989] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.935411][ T6557] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /166/qY3aK: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=458767, rec_len=0, size=4096 fake=0 [ 64.941663][ T6557] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 64.941926][ T6557] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 64.957597][ T8989] bond0: (slave bond_slave_0): Releasing backup interface [ 64.976827][ T8995] netlink: 64 bytes leftover after parsing attributes in process `syz.2.925'. [ 64.979678][ T8989] bond0: (slave bond_slave_1): Releasing backup interface [ 64.997453][ T8989] team0: Failed to send options change via netlink (err -105) [ 64.997584][ T8989] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 64.997729][ T8989] team0: Port device team_slave_0 removed [ 65.006085][ T8989] team0: Failed to send options change via netlink (err -105) [ 65.006239][ T8989] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 65.006408][ T8989] team0: Port device team_slave_1 removed [ 65.006794][ T8989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.006806][ T8989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.014971][ T8989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.015164][ T8989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.025733][ T8995] team0: Failed to send options change via netlink (err -105) [ 65.025767][ T8995] team0: Mode changed to "loadbalance" [ 65.072644][ T6557] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 65.171244][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.936'. [ 65.171685][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.936'. [ 65.171805][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.936'. [ 65.172028][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.936'. [ 65.198512][ T6117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.202046][ T6117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.202720][ T6117] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.204343][ T6117] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.205470][ T6117] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.216811][ T9021] vhci_hcd: invalid port number 96 [ 65.216891][ T9021] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 65.315181][ T9018] lo speed is unknown, defaulting to 1000 [ 65.405811][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'. [ 65.443013][ T9059] loop1: detected capacity change from 0 to 256 [ 65.541734][ T9018] chnl_net:caif_netlink_parms(): no params data found [ 65.598739][ T9018] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.599790][ T9018] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.599857][ T9018] bridge_slave_0: entered allmulticast mode [ 65.600280][ T9018] bridge_slave_0: entered promiscuous mode [ 65.603549][ T9018] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.603566][ T9018] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.603616][ T9018] bridge_slave_1: entered allmulticast mode [ 65.604020][ T9018] bridge_slave_1: entered promiscuous mode [ 65.648074][ T9018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.654191][ T9018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.695045][ T9084] netlink: 'syz.1.963': attribute type 3 has an invalid length. [ 65.698169][ T9018] team0: Port device team_slave_0 added [ 65.706848][ T9018] team0: Port device team_slave_1 added [ 65.733146][ T9018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.733173][ T9018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.733198][ T9018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.733714][ T9018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.733725][ T9018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.733744][ T9018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.768387][ T9018] hsr_slave_0: entered promiscuous mode [ 65.771329][ T9018] hsr_slave_1: entered promiscuous mode [ 65.772506][ T9018] debugfs: 'hsr0' already exists in 'hsr' [ 65.778278][ T9018] Cannot create hsr debugfs directory [ 65.793573][ T9092] netlink: 'syz.2.967': attribute type 4 has an invalid length. [ 65.809651][ T9092] netlink: 'syz.2.967': attribute type 4 has an invalid length. [ 66.001888][ T9018] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 66.008358][ T9018] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 66.020910][ T9018] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 66.027425][ T9018] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 66.094493][ T9018] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.094560][ T9018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.095054][ T9018] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.095094][ T9018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.126766][ T9018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.147381][ T7269] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.152288][ T7269] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.166651][ T9018] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.177024][ T7269] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.177065][ T7269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.181079][ T7269] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.181112][ T7269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.446528][ T9130] lo speed is unknown, defaulting to 1000 [ 66.564001][ T9018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.655211][ T9018] veth0_vlan: entered promiscuous mode [ 66.657395][ T9018] veth1_vlan: entered promiscuous mode [ 66.665428][ T9018] veth0_macvtap: entered promiscuous mode [ 66.667156][ T9018] veth1_macvtap: entered promiscuous mode [ 66.672470][ T9018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.673600][ T9018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.677897][ T7246] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.684925][ T7246] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.684968][ T7246] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.684989][ T7246] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.713517][ T1878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.714069][ T1878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.729975][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.731939][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.776895][ T9157] loop5: detected capacity change from 0 to 128 [ 66.835367][ T9159] ------------[ cut here ]------------ [ 66.835391][ T9159] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x4000000, 0x0] s64=[0x4000000, 0x0] u32=[0x4000000, 0x0] s32=[0x4000000, 0x0] var_off=(0x0, 0x0)(1) [ 66.840314][ T9159] WARNING: CPU: 0 PID: 9159 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x7e8/0xa6c [ 66.841919][ T9159] Modules linked in: [ 66.842514][ T9159] CPU: 0 UID: 0 PID: 9159 Comm: syz.0.985 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 66.844054][ T9159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 66.845738][ T9159] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 66.847053][ T9159] pc : reg_bounds_sanity_check+0x7e8/0xa6c [ 66.847954][ T9159] lr : reg_bounds_sanity_check+0x7e8/0xa6c [ 66.848893][ T9159] sp : ffff8000a2056c80 [ 66.849518][ T9159] x29: ffff8000a2056d60 x28: 0000000000000000 x27: 0000000004000000 [ 66.850798][ T9159] x26: 0000000000000000 x25: ffff0000dece42f0 x24: 0000000004000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 66.851977][ T9159] x23: ffff0000dece42d0 x22: ffff0000dece4308 x21: 0000000000000000 [ 66.853290][ T9159] x20: ffff0000dece4310 x19: 1fffe0001bd9c862 x18: 1fffe0003379be88 [ 66.854563][ T9159] x17: ffff80008f7be000 x16: ffff80008b007230 x15: 0000000000000001 [ 66.855836][ T9159] x14: 1fffe0003379e908 x13: 0000000000000000 x12: 0000000000000000 [ 66.857055][ T9159] x11: 0000000000080000 x10: 0000000000000003 x9 : f281019c71640f00 [ 66.858218][ T9159] x8 : f281019c71640f00 x7 : ffff800080491074 x6 : 0000000000000000 [ 66.859523][ T9159] x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000010 [ 66.860798][ T9159] x2 : ffff8000a2056840 x1 : ffff80008b6577c0 x0 : 0000000000000001 [ 66.862083][ T9159] Call trace: [ 66.862612][ T9159] reg_bounds_sanity_check+0x7e8/0xa6c (P) [ 66.863566][ T9159] reg_set_min_max+0x1b4/0x25c [ 66.864366][ T9159] check_cond_jmp_op+0x102c/0x2008 [ 66.865212][ T9159] do_check+0x55c0/0xb650 [ 66.865896][ T9159] do_check_common+0x12c0/0x1cb8 [ 66.866654][ T9159] bpf_check+0x10600/0x15d8c [ 66.867422][ T9159] bpf_prog_load+0xec8/0x13fc [ 66.868202][ T9159] __sys_bpf+0x450/0x628 [ 66.868931][ T9159] __arm64_sys_bpf+0x80/0x98 [ 66.869689][ T9159] invoke_syscall+0x98/0x2b8 [ 66.870454][ T9159] el0_svc_common+0x130/0x23c [ 66.871163][ T9159] do_el0_svc+0x48/0x58 [ 66.871802][ T9159] el0_svc+0x58/0x180 [ 66.872433][ T9159] el0t_64_sync_handler+0x84/0x12c [ 66.873244][ T9159] el0t_64_sync+0x198/0x19c [ 66.873934][ T9159] irq event stamp: 81302 [ 66.874589][ T9159] hardirqs last enabled at (81301): [] finish_lock_switch+0xb0/0x1c0 [ 66.875965][ T9159] hardirqs last disabled at (81302): [] el1_brk64+0x1c/0x48 [ 66.877243][ T9159] softirqs last enabled at (80962): [] local_bh_enable+0x10/0x34 [ 66.878617][ T9159] softirqs last disabled at (80960): [] local_bh_disable+0x10/0x34 [ 66.879922][ T9159] ---[ end trace 0000000000000000 ]--- [ 67.185554][ T4841] smc: removing ib device syz1 [ 67.189287][ T24] syz1: Port: 1 Link DOWN [ 67.511230][ T219] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.573150][ T219] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.651840][ T219] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.741267][ T219] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.880733][ T219] bridge_slave_1: left allmulticast mode [ 67.880776][ T219] bridge_slave_1: left promiscuous mode [ 67.881333][ T219] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.887047][ T219] bridge_slave_0: left allmulticast mode [ 67.887073][ T219] bridge_slave_0: left promiscuous mode [ 67.887957][ T219] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.135483][ T219] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.158974][ T219] bond_slave_0: left promiscuous mode [ 68.161189][ T219] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.199096][ T219] bond_slave_1: left promiscuous mode [ 68.200712][ T219] $H (unregistering): Released all slaves [ 68.578504][ T219] hsr_slave_0: left promiscuous mode [ 68.581337][ T219] hsr_slave_1: left promiscuous mode [ 68.581629][ T219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.581646][ T219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.582757][ T219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.582767][ T219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.596469][ T219] veth1_macvtap: left promiscuous mode [ 68.596536][ T219] veth0_macvtap: left promiscuous mode [ 68.596592][ T219] veth1_vlan: left promiscuous mode [ 68.596648][ T219] veth0_vlan: left promiscuous mode [ 68.741624][ T219] team0 (unregistering): Port device team_slave_1 removed [ 68.752976][ T219] team0 (unregistering): Port device team_slave_0 removed [ 68.876478][ T6635] lo speed is unknown, defaulting to 1000 [ 68.876505][ T6635] syz0: Port: 1 Link DOWN [ 69.920145][ T219] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.968269][ T219] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.007969][ T219] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.057041][ T219] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.174633][ T219] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.217993][ T219] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.248191][ T219] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.319827][ T219] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.427268][ T219] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.457291][ T219] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.498214][ T219] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.561249][ T219] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.681001][ T219] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.716462][ T219] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.766466][ T219] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.813562][ T219] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.941861][ T219] bridge_slave_1: left allmulticast mode [ 70.941895][ T219] bridge_slave_1: left promiscuous mode [ 70.941970][ T219] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.946514][ T219] bridge_slave_0: left allmulticast mode [ 70.946552][ T219] bridge_slave_0: left promiscuous mode [ 70.946613][ T219] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.951776][ T219] bridge_slave_1: left allmulticast mode [ 70.952793][ T219] bridge_slave_1: left promiscuous mode [ 70.954038][ T219] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.956565][ T219] bridge_slave_0: left allmulticast mode [ 70.957747][ T219] bridge_slave_0: left promiscuous mode [ 70.960021][ T219] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.380486][ T219] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.401235][ T219] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.429660][ T219] bond0 (unregistering): Released all slaves [ 71.528641][ T219] bond0 (unregistering): Released all slaves [ 71.637704][ T219] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.660266][ T219] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.710758][ T219] bond0 (unregistering): Released all slaves [ 71.791226][ T219] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.829909][ T219] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.849855][ T219] bond0 (unregistering): Released all slaves [ 73.228211][ T219] hsr_slave_0: left promiscuous mode [ 73.229817][ T219] hsr_slave_1: left promiscuous mode [ 73.230991][ T219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.232419][ T219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.234119][ T219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.235385][ T219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.237877][ T219] hsr_slave_0: left promiscuous mode [ 73.241484][ T219] hsr_slave_1: left promiscuous mode [ 73.246032][ T219] hsr_slave_0: left promiscuous mode [ 73.247353][ T219] hsr_slave_1: left promiscuous mode [ 73.248697][ T219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.250121][ T219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.251696][ T219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.253037][ T219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.274836][ T219] veth1_macvtap: left promiscuous mode [ 73.275906][ T219] veth0_macvtap: left promiscuous mode [ 73.276972][ T219] veth1_vlan: left promiscuous mode [ 73.277841][ T219] veth0_vlan: left promiscuous mode [ 73.279295][ T219] veth1_macvtap: left promiscuous mode [ 73.280196][ T219] veth0_macvtap: left promiscuous mode [ 73.281677][ T219] veth1_macvtap: left promiscuous mode [ 73.282624][ T219] veth0_macvtap: left promiscuous mode [ 73.283663][ T219] veth1_vlan: left promiscuous mode [ 73.284581][ T219] veth0_vlan: left promiscuous mode [ 73.286031][ T219] veth1_macvtap: left promiscuous mode [ 73.286919][ T219] veth0_macvtap: left promiscuous mode [ 73.287893][ T219] veth1_vlan: left promiscuous mode [ 73.289135][ T219] veth0_vlan: left promiscuous mode [ 73.515074][ T219] team0 (unregistering): Port device team_slave_1 removed [ 73.526904][ T219] team0 (unregistering): Port device team_slave_0 removed [ 73.973041][ T219] team0 (unregistering): Port device team_slave_1 removed [ 73.982741][ T219] team0 (unregistering): Port device team_slave_0 removed [ 74.203940][ T219] team0 (unregistering): Port device team_slave_1 removed [ 74.214301][ T219] team0 (unregistering): Port device team_slave_0 removed [ 74.289577][ T219] team0 (unregistering): Port device dummy0 removed [ 75.054786][ T219] IPVS: stop unused estimator thread 0...