last executing test programs: 8.937965051s ago: executing program 4 (id=3121): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 6.857636883s ago: executing program 4 (id=3123): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r8, @ANYBLOB="0174dfdb0ddad4"], 0x20}}, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104, 0x780}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0xa0}}}}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6.846963454s ago: executing program 3 (id=3124): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='objagg_obj_parent_unassign\x00', r0}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0xfffffffc, 0xfffffffe, &(0x7f00000003c0)="19591ecce09adb1bb4c5cb12800056cc7ddb87ccf8c4666100ae5b5e55c0cdec5c1200ecd88336a605f02b80011a3c5a1baf67ea871ddd9cfe41b420830c93634cd7202805e758"}) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x12}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0xf, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x73, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffffffb, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004d6000/0x4000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000ee0000/0x3000)=nil) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) munmap(&(0x7f0000b04000/0x4000)=nil, 0x4000) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 6.274903113s ago: executing program 3 (id=3129): r0 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f0000000000), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x201}, 0x1) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x14281, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) unshare(0x20060400) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x67d2, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000340)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300)) 6.224431743s ago: executing program 0 (id=3131): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x2000, 0x2}, 0x14) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f00000000c0)="ab", 0x34000, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) 6.141624115s ago: executing program 4 (id=3133): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x6}, 0x18) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v2={0x2000000, [{0x0, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0) creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x125) 6.091129225s ago: executing program 0 (id=3134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 5.767800841s ago: executing program 4 (id=3137): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) 5.76431461s ago: executing program 3 (id=3138): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r1, 0x0, 0xe) syz_emit_ethernet(0x36, &(0x7f0000000740)=ANY=[], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x48000) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0xa1, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 5.036180902s ago: executing program 0 (id=3139): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 4.872838534s ago: executing program 4 (id=3142): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) inotify_init1(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0xa040, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000240), &(0x7f0000000000)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0xe, &(0x7f0000001980)={@remote, @empty, @void, {@generic={0x8884}}}, 0x0) 4.719779807s ago: executing program 4 (id=3144): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0xffff0000, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 4.153730566s ago: executing program 1 (id=3149): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000014000100fffffffbffdbdf250a00a100", @ANYRES32=r3, @ANYBLOB="1400010000000000000000000000000000000001"], 0x2c}}, 0x24005040) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 2.735480987s ago: executing program 2 (id=3157): clock_adjtime(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f1"], 0xa8}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r5}, 0x10) timer_create(0x3, 0x0, &(0x7f00000004c0)=0x0) timer_settime(r6, 0x1, &(0x7f0000000500)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) 2.324405024s ago: executing program 2 (id=3158): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r8, @ANYBLOB="0174dfdb0ddad4"], 0x20}}, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104, 0x780}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0xa0}}}}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.139520392s ago: executing program 0 (id=3159): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000140)={&(0x7f0000000100)=""/32, 0x20}) 1.136424793s ago: executing program 1 (id=3160): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = io_uring_setup(0x6ed0, &(0x7f0000000140)={0x0, 0x49fd, 0x10003, 0x20002, 0x185}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r4, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.104139803s ago: executing program 0 (id=3161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 844.049247ms ago: executing program 2 (id=3162): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) 751.567418ms ago: executing program 1 (id=3163): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') faccessat2(r2, &(0x7f0000000040)='\x00', 0x1, 0x1300) 732.249149ms ago: executing program 1 (id=3164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) setresuid(0xee01, 0x0, 0xffffffffffffffff) 671.549439ms ago: executing program 1 (id=3165): io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x201}, 0x1) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x14281, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) unshare(0x20060400) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x67d2, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000340)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300)) 523.106852ms ago: executing program 2 (id=3166): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000540)={0x1, &(0x7f0000002040)=[{0x4, 0x9, 0x5, 0x4}]}, 0x10) 474.706753ms ago: executing program 1 (id=3167): clock_adjtime(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f1"], 0xa8}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r5}, 0x10) timer_create(0x3, 0x0, &(0x7f00000004c0)=0x0) timer_settime(r6, 0x1, &(0x7f0000000500)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) 446.343163ms ago: executing program 3 (id=3168): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000000400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 311.511115ms ago: executing program 2 (id=3169): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000f0ffffff00000000000000000000000000ffffffff0000000000000000000000002000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) 311.053215ms ago: executing program 3 (id=3170): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000140)={&(0x7f0000000100)=""/32, 0x20}) 160.687077ms ago: executing program 0 (id=3171): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 78.414519ms ago: executing program 2 (id=3172): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r8, @ANYBLOB="0174dfdb0ddad4"], 0x20}}, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104, 0x780}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0xa0}}}}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 3 (id=3173): modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, 0x0}) socket$inet(0x2, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sendto(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create1(0x80000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000080200000100000000000000", @ANYRES32, @ANYRES32=0x0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@errors_remount}]}, 0x1, 0x5fc, &(0x7f0000000600)="$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") r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r3, 0x0, 0x0) kernel console output (not intermixed with test programs): 14][T10175] netlink: 'syz.3.2169': attribute type 83 has an invalid length. [ 349.184143][T10179] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2172'. [ 349.830602][ T27] kauditd_printk_skb: 85 callbacks suppressed [ 349.830616][ T27] audit: type=1326 audit(1750222044.616:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.2.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 349.896391][ T27] audit: type=1326 audit(1750222044.656:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.2.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 349.896433][ T27] audit: type=1326 audit(1750222044.656:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.2.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 349.896463][ T27] audit: type=1326 audit(1750222044.656:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.2.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 349.896493][ T27] audit: type=1326 audit(1750222044.656:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.2.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 349.896522][ T27] audit: type=1326 audit(1750222044.656:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.2.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 349.896552][ T27] audit: type=1326 audit(1750222044.656:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.2.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 349.896579][ T27] audit: type=1326 audit(1750222044.656:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.2.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 349.896608][ T27] audit: type=1326 audit(1750222044.656:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.2.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 349.896637][ T27] audit: type=1326 audit(1750222044.656:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.2.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 350.437426][T10098] Set syz1 is full, maxelem 65536 reached [ 350.681590][T10229] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2189'. [ 351.290662][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2201'. [ 351.372093][T10257] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2202'. [ 352.313240][T10303] netlink: 'syz.1.2223': attribute type 7 has an invalid length. [ 352.638984][T10315] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 353.065560][T10326] loop2: detected capacity change from 0 to 8192 [ 353.117244][T10326] loop2: p1 p2 < > p3 p4 < p5 > [ 353.137090][T10326] loop2: partition table partially beyond EOD, truncated [ 353.162552][T10326] loop2: p1 size 100663296 extends beyond EOD, truncated [ 353.182752][T10326] loop2: p2 start 591104 is beyond EOD, truncated [ 353.202973][T10326] loop2: p3 start 33572980 is beyond EOD, truncated [ 353.229478][T10326] loop2: p5 size 100663296 extends beyond EOD, truncated [ 353.326525][T10338] netlink: 'syz.3.2240': attribute type 12 has an invalid length. [ 353.540199][T10346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2242'. [ 353.860428][T10354] batman_adv: batadv0: Adding interface: dummy0 [ 353.883540][T10354] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.929605][T10354] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 354.342826][T10374] netlink: 'syz.2.2253': attribute type 13 has an invalid length. [ 354.904919][T10271] Set syz1 is full, maxelem 65536 reached [ 355.368921][T10374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.411371][T10374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.921475][T10374] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.932779][T10374] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.948972][T10374] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.958153][T10374] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.245885][T10406] bond2 (unregistering): Released all slaves [ 356.286996][T10413] netlink: 'syz.1.2266': attribute type 10 has an invalid length. [ 356.308063][T10413] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2266'. [ 356.319743][T10426] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 356.328420][ T27] kauditd_printk_skb: 93 callbacks suppressed [ 356.328434][ T27] audit: type=1326 audit(1750222051.106:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10421 comm="syz.0.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910c78e929 code=0x7ffc0000 [ 356.357818][ T27] audit: type=1326 audit(1750222051.106:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10421 comm="syz.0.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910c78e929 code=0x7ffc0000 [ 356.380481][ T27] audit: type=1326 audit(1750222051.106:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10421 comm="syz.0.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f910c78e929 code=0x7ffc0000 [ 356.448374][ T27] audit: type=1326 audit(1750222051.106:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10421 comm="syz.0.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910c78e929 code=0x7ffc0000 [ 356.467995][T10413] team0: Port device geneve0 added [ 356.521884][ T27] audit: type=1326 audit(1750222051.106:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10421 comm="syz.0.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910c78e929 code=0x7ffc0000 [ 356.602790][ T27] audit: type=1326 audit(1750222051.106:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10421 comm="syz.0.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f910c78e929 code=0x7ffc0000 [ 356.644955][T10411] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.650171][ T27] audit: type=1326 audit(1750222051.106:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10421 comm="syz.0.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910c78e929 code=0x7ffc0000 [ 356.685489][ T27] audit: type=1326 audit(1750222051.106:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10421 comm="syz.0.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910c78e929 code=0x7ffc0000 [ 356.709486][ T27] audit: type=1326 audit(1750222051.106:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10421 comm="syz.0.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f910c78e929 code=0x7ffc0000 [ 356.802824][ T27] audit: type=1326 audit(1750222051.106:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10421 comm="syz.0.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910c78e929 code=0x7ffc0000 [ 356.860090][T10411] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.889304][T10442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2279'. [ 356.982084][T10411] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.105073][T10411] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.277786][T10411] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.318915][T10411] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.354524][T10411] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.376231][T10411] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.586144][T10466] netlink: 'syz.1.2289': attribute type 7 has an invalid length. [ 358.205533][T10482] bond16 (unregistering): Released all slaves [ 358.703545][T10516] 8021q: adding VLAN 0 to HW filter on device bond6 [ 358.718899][T10516] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 358.727926][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 359.916041][T10569] netlink: 'syz.1.2335': attribute type 1 has an invalid length. [ 359.951082][T10569] 8021q: adding VLAN 0 to HW filter on device bond16 [ 359.970141][T10569] bond16: (slave dummy0): Enslaving as an active interface with an up link [ 360.265723][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): bond16: link becomes ready [ 360.825502][T10577] lo speed is unknown, defaulting to 1000 [ 361.378593][T10585] netlink: 'syz.2.2338': attribute type 2 has an invalid length. [ 361.450598][T10585] sctp: [Deprecated]: syz.2.2338 (pid 10585) Use of int in maxseg socket option. [ 361.450598][T10585] Use struct sctp_assoc_value instead [ 362.217631][ T27] kauditd_printk_skb: 22 callbacks suppressed [ 362.217645][ T27] audit: type=1326 audit(1750222057.006:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz.4.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 362.287667][ T27] audit: type=1326 audit(1750222057.006:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz.4.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 362.411879][ T27] audit: type=1326 audit(1750222057.006:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz.4.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 362.597451][ T27] audit: type=1326 audit(1750222057.006:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz.4.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 362.750693][T10616] netlink: 'syz.1.2351': attribute type 1 has an invalid length. [ 362.758894][ T27] audit: type=1326 audit(1750222057.006:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz.4.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 362.843654][ T27] audit: type=1326 audit(1750222057.006:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz.4.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 362.871119][ T27] audit: type=1326 audit(1750222057.006:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz.4.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 362.895263][ T27] audit: type=1326 audit(1750222057.006:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz.4.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 362.918245][ T27] audit: type=1326 audit(1750222057.006:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz.4.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 362.936274][T10616] 8021q: adding VLAN 0 to HW filter on device bond17 [ 362.941538][ T27] audit: type=1326 audit(1750222057.006:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz.4.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 362.979329][T10617] bond16: (slave dummy0): Releasing backup interface [ 362.992165][T10617] bond17: (slave dummy0): Enslaving as an active interface with an up link [ 363.001208][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bond17: link becomes ready [ 363.564896][T10627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2355'. [ 363.682218][T10651] netlink: 'syz.2.2366': attribute type 1 has an invalid length. [ 363.766238][T10651] 8021q: adding VLAN 0 to HW filter on device bond10 [ 363.788595][T10656] batman_adv: batadv0: Removing interface: dummy0 [ 363.843009][T10656] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 363.853516][T10658] netlink: 'syz.3.2369': attribute type 13 has an invalid length. [ 363.956887][T10658] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 363.984167][T10658] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 363.990701][T10667] loop2: detected capacity change from 0 to 512 [ 364.013054][T10667] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 364.025682][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bond10: link becomes ready [ 364.033458][T10667] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 364.105480][T10667] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.2373: invalid block [ 364.133644][T10667] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2373: invalid indirect mapped block 4294967295 (level 1) [ 364.194466][T10667] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2373: invalid indirect mapped block 4294967295 (level 1) [ 364.241025][T10667] EXT4-fs (loop2): 2 truncates cleaned up [ 364.271720][T10667] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 364.382676][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 364.598482][T10691] netlink: 'syz.1.2384': attribute type 2 has an invalid length. [ 364.933892][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2382'. [ 365.043796][T10704] loop2: detected capacity change from 0 to 128 [ 365.053476][T10704] ext4: Unknown parameter 'subj_user' [ 365.713439][ T26] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 365.893581][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 365.900707][ T26] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.930218][ T26] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 365.959163][ T26] usb 3-1: config 1 has no interface number 1 [ 365.973726][ T26] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 366.007463][ T26] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 366.033458][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.054614][ T26] usb 3-1: Product: syz [ 366.064426][ T26] usb 3-1: Manufacturer: syz [ 366.069079][ T26] usb 3-1: SerialNumber: syz [ 366.099134][T10720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2397'. [ 366.145328][T10720] bond18 (unregistering): Released all slaves [ 366.856568][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2405'. [ 367.834094][ T26] usb 3-1: 0:8 : does not exist [ 367.872819][ T26] usb 3-1: USB disconnect, device number 6 [ 367.976683][T10760] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2412'. [ 368.049537][ T27] kauditd_printk_skb: 118 callbacks suppressed [ 368.049552][ T27] audit: type=1326 audit(1750222062.836:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.4.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 368.083121][ T27] audit: type=1326 audit(1750222062.856:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.4.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 368.084932][T10760] bond7 (unregistering): Released all slaves [ 368.111259][ T27] audit: type=1326 audit(1750222062.856:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.4.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 368.136038][ T27] audit: type=1326 audit(1750222062.856:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.4.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 368.162313][ T27] audit: type=1326 audit(1750222062.856:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.4.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 368.185571][ T27] audit: type=1326 audit(1750222062.856:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.4.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 368.242206][ T27] audit: type=1326 audit(1750222062.856:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.4.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 368.293942][ T27] audit: type=1326 audit(1750222062.856:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.4.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 368.317448][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2416'. [ 368.423493][ T27] audit: type=1326 audit(1750222062.856:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.4.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 368.513336][ T27] audit: type=1326 audit(1750222062.856:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.4.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 368.730402][T10768] device syzkaller1 entered promiscuous mode [ 368.739548][T10778] netlink: 'syz.4.2418': attribute type 1 has an invalid length. [ 368.869788][T10781] 8021q: adding VLAN 0 to HW filter on device bond10 [ 368.901368][T10781] bond9: (slave bond10): making interface the new active one [ 368.909692][T10781] bond9: (slave bond10): Enslaving as an active interface with an up link [ 369.922715][T10812] loop2: detected capacity change from 0 to 512 [ 369.957050][T10812] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 369.974379][T10812] EXT4-fs (loop2): mount failed [ 370.049600][T10812] loop2: detected capacity change from 0 to 512 [ 370.064994][T10812] journal_path: Lookup failure for './bus' [ 370.071062][T10812] EXT4-fs: error: could not find journal device path [ 370.242245][T10828] netlink: 'syz.2.2436': attribute type 1 has an invalid length. [ 370.364599][T10836] loop2: detected capacity change from 0 to 512 [ 370.405838][T10836] EXT4-fs (loop2): 1 orphan inode deleted [ 370.414806][T10836] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 370.430205][ T4930] EXT4-fs error (device loop2): ext4_release_dquot:6850: comm kworker/u4:21: Failed to release dquot type 1 [ 370.442064][T10836] ext4 filesystem being mounted at /465/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.502175][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 370.847892][T10864] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2451'. [ 370.894653][T10864] bond18 (unregistering): Released all slaves [ 370.943880][T10868] loop2: detected capacity change from 0 to 512 [ 371.022112][T10868] EXT4-fs (loop2): 1 orphan inode deleted [ 371.038278][ T4303] EXT4-fs error (device loop2): ext4_release_dquot:6850: comm kworker/u4:5: Failed to release dquot type 1 [ 371.055545][T10872] netlink: 91 bytes leftover after parsing attributes in process `syz.0.2453'. [ 371.064775][T10868] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 371.081572][T10868] ext4 filesystem being mounted at /469/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.158973][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 371.356080][T10890] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.422386][T10890] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.467074][T10890] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.542305][T10890] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.662961][T10890] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.687877][T10890] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.818526][T10890] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.839993][T10890] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.384695][T10922] netlink: 'syz.4.2474': attribute type 1 has an invalid length. [ 373.395923][T10965] loop2: detected capacity change from 0 to 512 [ 373.418187][T10965] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 373.427408][T10965] ext4 filesystem being mounted at /474/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 373.487204][T10970] netlink: 'syz.3.2490': attribute type 1 has an invalid length. [ 374.000113][ T27] kauditd_printk_skb: 130 callbacks suppressed [ 374.000128][ T27] audit: type=1326 audit(1750222068.786:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10994 comm="syz.4.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 374.101880][ T27] audit: type=1326 audit(1750222068.816:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10994 comm="syz.4.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 374.104600][T10999] netlink: 'syz.3.2502': attribute type 1 has an invalid length. [ 374.131901][ T27] audit: type=1326 audit(1750222068.816:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10994 comm="syz.4.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 374.159755][ T27] audit: type=1326 audit(1750222068.816:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10994 comm="syz.4.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 374.182561][ T27] audit: type=1326 audit(1750222068.826:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10994 comm="syz.4.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 374.247464][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 374.252439][ T27] audit: type=1326 audit(1750222068.826:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10994 comm="syz.4.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 374.294911][ T27] audit: type=1326 audit(1750222068.826:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10994 comm="syz.4.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 374.318099][ T27] audit: type=1326 audit(1750222068.826:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10994 comm="syz.4.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 374.341123][ T27] audit: type=1326 audit(1750222068.826:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10994 comm="syz.4.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 374.369529][ T27] audit: type=1326 audit(1750222068.826:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10994 comm="syz.4.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 374.754139][T11024] loop2: detected capacity change from 0 to 256 [ 375.232834][T11037] netlink: 'syz.4.2518': attribute type 1 has an invalid length. [ 375.288936][T11037] 8021q: adding VLAN 0 to HW filter on device bond13 [ 375.407199][T11045] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2520'. [ 375.527638][T11049] loop2: detected capacity change from 0 to 512 [ 375.548523][T11049] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 375.706271][T11049] EXT4-fs (loop2): orphan cleanup on readonly fs [ 375.722837][T11049] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.2521: Failed to acquire dquot type 1 [ 375.744322][T11049] EXT4-fs (loop2): 1 truncate cleaned up [ 375.757921][T11049] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 376.306740][T11049] lo speed is unknown, defaulting to 1000 [ 376.576506][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2523'. [ 376.631866][T11055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2524'. [ 376.822445][T11060] bond6 (unregistering): Released all slaves [ 377.500473][T11077] bond6: (slave dummy0): Releasing backup interface [ 377.617287][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 377.881680][T11089] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2539'. [ 378.097258][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.105825][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.295114][T11107] 8021q: adding VLAN 0 to HW filter on device bond14 [ 379.330734][T11107] bond13: (slave bond14): Enslaving as an active interface with an up link [ 379.461414][T11111] lo speed is unknown, defaulting to 1000 [ 379.846908][T11120] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2551'. [ 379.922912][T11120] device hsr_slave_0 left promiscuous mode [ 379.997790][ T27] kauditd_printk_skb: 79 callbacks suppressed [ 379.997804][ T27] audit: type=1326 audit(1750222074.786:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcbe4b858e7 code=0x7ffc0000 [ 380.080397][T11120] device hsr_slave_1 left promiscuous mode [ 380.166493][ T27] audit: type=1326 audit(1750222074.826:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcbe4b2ab19 code=0x7ffc0000 [ 380.324330][ T27] audit: type=1326 audit(1750222074.826:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 380.470619][ T27] audit: type=1326 audit(1750222074.826:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcbe4b858e7 code=0x7ffc0000 [ 380.635345][ T27] audit: type=1326 audit(1750222074.826:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcbe4b2ab19 code=0x7ffc0000 [ 380.773823][ T27] audit: type=1326 audit(1750222074.826:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 380.828987][ T27] audit: type=1326 audit(1750222074.826:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcbe4b858e7 code=0x7ffc0000 [ 380.851373][ T27] audit: type=1326 audit(1750222074.826:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcbe4b2ab19 code=0x7ffc0000 [ 380.876045][ T27] audit: type=1326 audit(1750222074.826:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 380.899792][ T27] audit: type=1326 audit(1750222074.846:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcbe4b858e7 code=0x7ffc0000 [ 380.995776][T11116] Set syz1 is full, maxelem 65536 reached [ 381.270826][T11141] bond17: (slave dummy0): Releasing backup interface [ 382.190769][T11149] lo speed is unknown, defaulting to 1000 [ 384.770615][T11197] bond7 (unregistering): Released all slaves [ 385.342041][ T27] kauditd_printk_skb: 212 callbacks suppressed [ 385.342056][ T27] audit: type=1326 audit(1750222080.126:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11214 comm="syz.1.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c29f8e929 code=0x7ffc0000 [ 385.895264][ T27] audit: type=1326 audit(1750222080.126:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11214 comm="syz.1.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c29f8e929 code=0x7ffc0000 [ 386.078657][ T27] audit: type=1326 audit(1750222080.126:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11214 comm="syz.1.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f5c29f8e929 code=0x7ffc0000 [ 386.190710][ T27] audit: type=1326 audit(1750222080.136:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11214 comm="syz.1.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c29f8e929 code=0x7ffc0000 [ 386.400842][ T27] audit: type=1326 audit(1750222081.186:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11239 comm="syz.0.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910c78e929 code=0x7ffc0000 [ 386.475923][ T27] audit: type=1326 audit(1750222081.216:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11239 comm="syz.0.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f910c78e929 code=0x7ffc0000 [ 386.518237][ T27] audit: type=1326 audit(1750222081.216:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11239 comm="syz.0.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910c78e929 code=0x7ffc0000 [ 386.608736][T11242] bond18 (unregistering): Released all slaves [ 386.612940][ T27] audit: type=1326 audit(1750222081.216:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11239 comm="syz.0.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910c78e929 code=0x7ffc0000 [ 386.639036][ T27] audit: type=1326 audit(1750222081.216:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11239 comm="syz.0.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f910c78e929 code=0x7ffc0000 [ 386.662086][ T27] audit: type=1326 audit(1750222081.216:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11239 comm="syz.0.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910c78e929 code=0x7ffc0000 [ 387.001932][T11265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2608'. [ 387.011734][T11265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2608'. [ 387.524387][T11282] bond6 (unregistering): Released all slaves [ 387.793724][T11292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2619'. [ 387.929913][T11298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2622'. [ 387.946614][T11298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2622'. [ 388.540961][T11316] bond14 (unregistering): Released all slaves [ 388.745614][T11326] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2633'. [ 388.899857][T11332] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2636'. [ 388.922853][T11332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2636'. [ 389.241853][T11346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2641'. [ 390.034293][T11359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2644'. [ 390.663016][T11368] lo speed is unknown, defaulting to 1000 [ 392.326766][T11375] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2651'. [ 392.664279][T11377] bond7 (unregistering): Released all slaves [ 392.857405][T11387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2654'. [ 392.888778][T11386] netlink: 'syz.2.2655': attribute type 1 has an invalid length. [ 393.040748][T11389] 8021q: adding VLAN 0 to HW filter on device bond16 [ 393.075060][T11389] bond15: (slave bond16): Enslaving as an active interface with an up link [ 393.079824][T11276] Set syz1 is full, maxelem 65536 reached [ 393.436928][T11405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2660'. [ 393.479060][T11408] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2663'. [ 394.275158][T11415] lo speed is unknown, defaulting to 1000 [ 397.478734][T11436] bond7 (unregistering): Released all slaves [ 397.836931][T11447] netlink: 'syz.0.2672': attribute type 1 has an invalid length. [ 398.054551][T11449] 8021q: adding VLAN 0 to HW filter on device bond8 [ 398.119478][T11449] bond7: (slave bond8): Enslaving as an active interface with an up link [ 399.772351][T11467] bond18 (unregistering): Released all slaves [ 400.011282][T11476] IPv6: Can't replace route, no match found [ 401.381812][T11492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2686'. [ 401.596550][T11495] loop2: detected capacity change from 0 to 256 [ 402.425117][T11515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2692'. [ 403.132082][T11520] bond18 (unregistering): Released all slaves [ 404.470981][T11535] netlink: 'syz.2.2699': attribute type 1 has an invalid length. [ 404.519168][T11535] 8021q: adding VLAN 0 to HW filter on device bond17 [ 404.740106][T11445] Set syz1 is full, maxelem 65536 reached [ 404.749756][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2703'. [ 404.897401][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2704'. [ 405.176100][T11559] bond18 (unregistering): Released all slaves [ 405.313558][T11568] loop2: detected capacity change from 0 to 128 [ 405.323671][T11568] ext4: Unknown parameter 'subj_user' [ 406.124630][ T5405] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 406.754504][T11576] netlink: 'syz.0.2713': attribute type 1 has an invalid length. [ 406.807513][T11576] 8021q: adding VLAN 0 to HW filter on device bond9 [ 406.963683][ T5405] usb 3-1: Using ep0 maxpacket: 8 [ 406.970851][ T5405] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.998477][ T5405] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 407.021347][ T5405] usb 3-1: config 1 has no interface number 1 [ 407.038697][ T5405] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 407.062279][ T5405] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 407.073681][T11591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2718'. [ 407.094984][ T5405] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.112028][ T5405] usb 3-1: Product: syz [ 407.121282][ T5405] usb 3-1: Manufacturer: syz [ 407.133840][ T5405] usb 3-1: SerialNumber: syz [ 407.510909][T11595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2719'. [ 407.636919][T11587] Set syz1 is full, maxelem 65536 reached [ 408.010702][T11607] bond18 (unregistering): Released all slaves [ 408.890232][ T5405] usb 3-1: 0:8 : does not exist [ 408.987924][ T5405] usb 3-1: USB disconnect, device number 7 [ 409.041950][T11618] IPv6: Can't replace route, no match found [ 409.062773][T11621] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2728'. [ 409.113492][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2732'. [ 409.286220][T11632] netlink: 'syz.4.2735': attribute type 1 has an invalid length. [ 409.407216][T11632] 8021q: adding VLAN 0 to HW filter on device bond14 [ 409.435485][T11640] loop2: detected capacity change from 0 to 164 [ 410.922796][T11655] bond18 (unregistering): Released all slaves [ 410.981316][T11662] netlink: 'syz.4.2744': attribute type 1 has an invalid length. [ 410.983952][T11663] loop2: detected capacity change from 0 to 512 [ 411.001374][T11663] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 411.075058][T11663] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 411.084925][T11662] 8021q: adding VLAN 0 to HW filter on device bond15 [ 411.115158][T11663] EXT4-fs (loop2): 1 truncate cleaned up [ 411.119380][T11670] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2746'. [ 411.123413][T11663] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 411.174122][T11662] device veth5 entered promiscuous mode [ 411.236125][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 411.304700][ T27] kauditd_printk_skb: 63 callbacks suppressed [ 411.304714][ T27] audit: type=1326 audit(1750222106.096:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.2.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 411.340280][T11678] netlink: 'syz.4.2750': attribute type 1 has an invalid length. [ 411.360506][ T27] audit: type=1326 audit(1750222106.126:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.2.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 411.384025][ T27] audit: type=1326 audit(1750222106.126:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.2.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 411.408119][ T27] audit: type=1326 audit(1750222106.126:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.2.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 411.431585][ T27] audit: type=1326 audit(1750222106.126:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.2.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 411.438618][T11678] 8021q: adding VLAN 0 to HW filter on device bond16 [ 411.462753][ T27] audit: type=1326 audit(1750222106.146:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.2.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 411.510040][ T27] audit: type=1326 audit(1750222106.146:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.2.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 411.550853][ T27] audit: type=1326 audit(1750222106.146:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.2.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 411.574038][ T27] audit: type=1326 audit(1750222106.146:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.2.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 411.596599][ T27] audit: type=1326 audit(1750222106.146:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.2.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 411.875496][T11691] loop2: detected capacity change from 0 to 164 [ 412.079016][T11697] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2757'. [ 412.417652][T11712] netlink: 'syz.1.2764': attribute type 1 has an invalid length. [ 412.484721][T11712] 8021q: adding VLAN 0 to HW filter on device bond18 [ 412.494217][T11714] netlink: 'syz.4.2763': attribute type 10 has an invalid length. [ 412.539108][T11714] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2763'. [ 412.640046][T11714] team0: Port device geneve0 added [ 412.766980][T11708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2761'. [ 412.787339][T11710] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.819946][T11717] IPv6: Can't replace route, no match found [ 412.834736][T11719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2766'. [ 412.921606][T11710] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.059009][T11710] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.108828][T11726] loop2: detected capacity change from 0 to 164 [ 413.256135][T11710] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.395107][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2771'. [ 413.464881][T11710] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.511062][T11710] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.556855][T11710] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.605568][T11710] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.814204][T11748] IPv6: Can't replace route, no match found [ 413.841944][T11750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2777'. [ 413.938185][T11746] bond19 (unregistering): Released all slaves [ 413.954013][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2779'. [ 414.737503][T11762] netlink: 'syz.1.2783': attribute type 1 has an invalid length. [ 414.852007][T11763] bond18 (unregistering): Released all slaves [ 414.926240][T11767] bond19: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 414.955225][ T4937] bond19: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 414.972357][T11762] 8021q: adding VLAN 0 to HW filter on device bond19 [ 415.012933][T11761] Set syz1 is full, maxelem 65536 reached [ 415.070509][T11769] device veth3 entered promiscuous mode [ 415.113695][ T4920] bond19: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 415.231985][T11780] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2790'. [ 415.461083][T11787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2793'. [ 415.585898][T11792] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2795'. [ 415.638450][T11792] bond20 (unregistering): Released all slaves [ 415.796687][T11789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2794'. [ 415.912712][T11801] bond20 (unregistering): Released all slaves [ 416.369078][T11822] bond17 (unregistering): Released all slaves [ 416.648137][T11836] bond6 (unregistering): Released all slaves [ 417.544922][T11862] __nla_validate_parse: 5 callbacks suppressed [ 417.544941][T11862] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2824'. [ 417.807893][T11864] bond6 (unregistering): Released all slaves [ 418.515118][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 418.548810][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 418.557528][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 418.565499][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 418.573759][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 418.583575][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 418.880001][ T4927] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.757137][ T4927] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.838423][T11873] lo speed is unknown, defaulting to 1000 [ 419.892446][ T4927] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.996644][ T4927] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.270020][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2832'. [ 420.405138][T11917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2834'. [ 420.455363][T11873] chnl_net:caif_netlink_parms(): no params data found [ 420.653401][ T48] Bluetooth: hci5: command 0x0409 tx timeout [ 420.851479][T11873] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.876703][T11873] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.898785][T11873] device bridge_slave_0 entered promiscuous mode [ 420.956799][T11873] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.967342][T11873] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.995055][T11873] device bridge_slave_1 entered promiscuous mode [ 421.184083][T11873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.221064][T11873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.353141][ T4927] bond2: (slave gretap1): Releasing backup interface [ 421.417143][T11949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2846'. [ 421.492306][T11950] bond6 (unregistering): Released all slaves [ 421.579023][T11873] team0: Port device team_slave_0 added [ 421.655717][T11873] team0: Port device team_slave_1 added [ 421.741225][T11946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2845'. [ 422.067918][T11873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.086744][T11873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.131230][T11873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.187932][T11966] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2853'. [ 422.221340][T11873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.258081][T11873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.302447][T11873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.359643][T11967] bond20 (unregistering): Released all slaves [ 422.549645][T11978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2859'. [ 422.573495][T11976] netlink: 'syz.2.2857': attribute type 10 has an invalid length. [ 422.581870][T11976] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2857'. [ 422.622391][T11976] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.640706][T11976] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.652999][T11976] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.671859][T11976] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.704357][T11976] team0: Port device geneve0 added [ 422.729560][T11981] bond6 (unregistering): Released all slaves [ 422.734061][ T48] Bluetooth: hci5: command 0x041b tx timeout [ 422.835737][T11987] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2861'. [ 422.856949][T11987] netem: change failed [ 422.965412][T11989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2862'. [ 422.997042][T11873] device hsr_slave_0 entered promiscuous mode [ 423.038229][T11873] device hsr_slave_1 entered promiscuous mode [ 423.068045][T11873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.083541][T11873] Cannot create hsr debugfs directory [ 423.099643][ T4927] device team0 left promiscuous mode [ 423.113506][ T4927] device team_slave_0 left promiscuous mode [ 423.123999][ T4927] device team_slave_1 left promiscuous mode [ 423.163430][ T4927] device bond0 left promiscuous mode [ 423.168784][ T4927] device bond_slave_0 left promiscuous mode [ 423.193503][ T4927] device bond_slave_1 left promiscuous mode [ 423.255944][ T4927] device hsr_slave_1 left promiscuous mode [ 423.311697][ T4927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.333755][ T4927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.349792][ T4927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.363841][ T4927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.460679][ T4927] device veth1_macvtap left promiscuous mode [ 423.467527][ T4927] device veth0_macvtap left promiscuous mode [ 423.481091][ T4927] device veth1_vlan left promiscuous mode [ 423.488159][ T4927] device veth0_vlan left promiscuous mode [ 423.749838][T12020] netlink: 'syz.4.2875': attribute type 2 has an invalid length. [ 423.952846][ T4927] bond9 (unregistering): Released all slaves [ 424.135348][ T4927] bond7 (unregistering): (slave bond8): Releasing backup interface [ 424.145979][ T4927] bond8 (unregistering): Released all slaves [ 424.160610][ T4927] bond7 (unregistering): Released all slaves [ 424.351973][ T4927] bond6 (unregistering): Released all slaves [ 424.365723][ T4927] bond5 (unregistering): Released all slaves [ 424.379860][ T4927] bond4 (unregistering): Released all slaves [ 424.579977][ T4927] bond2 (unregistering): (slave bond3): Releasing backup interface [ 424.590819][ T4927] bond3 (unregistering): Released all slaves [ 424.601943][ T4927] bond2 (unregistering): Released all slaves [ 424.751556][ T4927] bond1 (unregistering): Released all slaves [ 424.813857][ T48] Bluetooth: hci5: command 0x040f tx timeout [ 425.207697][ T4927] team0 (unregistering): Port device team_slave_1 removed [ 425.257036][ T4927] team0 (unregistering): Port device team_slave_0 removed [ 425.306977][ T4927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.359453][ T4927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.748269][ T4927] bond0 (unregistering): Released all slaves [ 425.793084][T12007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2871'. [ 425.836599][T12022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2876'. [ 426.044253][T12033] netlink: 'syz.4.2879': attribute type 1 has an invalid length. [ 426.235340][T12033] device veth7 entered promiscuous mode [ 426.247731][T12033] bond17: (slave veth7): Enslaving as a backup interface with a down link [ 426.496863][T12053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2887'. [ 426.540232][T12057] netlink: 'syz.1.2885': attribute type 1 has an invalid length. [ 426.566120][T12057] 8021q: adding VLAN 0 to HW filter on device bond20 [ 426.674310][T12030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2878'. [ 426.695668][T12053] bond18 (unregistering): Released all slaves [ 426.722470][T12061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2889'. [ 426.848905][T12065] bond21 (unregistering): Released all slaves [ 426.893604][ T48] Bluetooth: hci5: command 0x0419 tx timeout [ 426.962519][T12074] loop2: detected capacity change from 0 to 512 [ 427.029170][T12074] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 427.053654][T12074] ext4 filesystem being mounted at /545/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.177548][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 427.177563][ T27] audit: type=1326 audit(1750222121.966:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12080 comm="syz.4.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 427.318046][ T27] audit: type=1326 audit(1750222121.996:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12080 comm="syz.4.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 427.318115][T11873] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 427.384352][ T27] audit: type=1326 audit(1750222121.996:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12080 comm="syz.4.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 427.438056][ T27] audit: type=1326 audit(1750222121.996:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12080 comm="syz.4.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 427.451453][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 427.472026][T12087] netlink: 'syz.1.2897': attribute type 1 has an invalid length. [ 427.507782][T12090] netlink: 'syz.3.2899': attribute type 1 has an invalid length. [ 427.516077][ T27] audit: type=1326 audit(1750222121.996:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12080 comm="syz.4.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 427.538811][ T27] audit: type=1326 audit(1750222121.996:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12080 comm="syz.4.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 427.570235][ T27] audit: type=1326 audit(1750222121.996:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12080 comm="syz.4.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 427.584113][T12090] 8021q: adding VLAN 0 to HW filter on device bond6 [ 427.602012][T11873] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 427.639702][ T27] audit: type=1326 audit(1750222121.996:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12080 comm="syz.4.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 427.643913][T12087] device veth5 entered promiscuous mode [ 427.662650][ T27] audit: type=1326 audit(1750222122.006:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12080 comm="syz.4.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 427.691041][ T27] audit: type=1326 audit(1750222122.016:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12080 comm="syz.4.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02db8e929 code=0x7ffc0000 [ 427.717378][T12087] bond21: (slave veth5): Enslaving as a backup interface with a down link [ 427.726644][T11873] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 427.736864][T11873] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 427.906196][T12102] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2902'. [ 427.939501][T11873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.994473][T12102] bond18 (unregistering): Released all slaves [ 428.044530][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 428.082169][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 428.102235][T11873] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.126528][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 428.139082][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 428.157770][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.164987][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.198487][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 428.277655][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 428.296682][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 428.311896][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.319167][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.349953][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 428.421278][T11873] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 428.441608][T11873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 428.529348][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2901'. [ 428.857088][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 428.878807][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 428.892014][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 428.901404][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 428.917579][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 428.930787][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 428.952908][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 428.962327][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 428.971303][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 428.987854][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 429.007173][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 429.265370][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 429.278658][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 429.313145][T11873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.370355][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 429.398876][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 429.438073][T12135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2915'. [ 429.457989][T11651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 429.477927][T11651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 429.491094][T11651] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 429.509015][T11651] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 429.524345][T11873] device veth0_vlan entered promiscuous mode [ 429.567074][T12139] bond22 (unregistering): Released all slaves [ 429.598833][T12143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2916'. [ 429.617280][T11873] device veth1_vlan entered promiscuous mode [ 429.695383][T11651] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 429.729805][T11651] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 429.754123][T11651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 429.768906][T11651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 429.784726][T11873] device veth0_macvtap entered promiscuous mode [ 429.809551][T11873] device veth1_macvtap entered promiscuous mode [ 429.842931][T11873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.863672][T11873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.886866][T11873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.902684][T11873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.943634][T11873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.951980][T11898] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 429.966257][T11898] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 429.984556][T11898] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 430.010853][T11898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 430.028921][T11873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.053792][T11873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.075070][T11873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.082452][T11651] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 430.118323][T11651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 430.138148][T12154] netlink: 'syz.3.2920': attribute type 1 has an invalid length. [ 430.324362][T12155] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 430.346054][T11873] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.363873][T11873] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.372797][T11873] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.532524][T11873] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.805189][T12166] loop2: detected capacity change from 0 to 128 [ 430.815512][T12166] ext4: Unknown parameter 'subj_user' [ 431.074674][T12154] device veth3 entered promiscuous mode [ 431.082987][T12154] bond7: (slave veth3): Enslaving as a backup interface with a down link [ 431.200799][T12167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2918'. [ 431.249788][ T4540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.280189][ T4540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.324725][ T26] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 431.337784][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 431.358448][T11898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.386337][T11898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.407269][T11898] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 431.523547][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 431.534720][ T26] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.570855][ T26] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 431.610118][ T26] usb 3-1: config 1 has no interface number 1 [ 431.636859][ T26] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 431.669005][ T26] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 431.684455][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.692935][ T26] usb 3-1: Product: syz [ 431.698253][T12175] netlink: 'syz.0.2924': attribute type 21 has an invalid length. [ 431.707676][ T26] usb 3-1: Manufacturer: syz [ 431.712666][ T26] usb 3-1: SerialNumber: syz [ 432.190482][ T4258] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 432.202549][ T4258] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 432.213624][ T4258] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 432.221641][ T4258] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 432.229590][ T4258] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 432.237527][ T4258] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 432.284944][T12185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2927'. [ 432.388265][ T4930] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.503186][T12190] bond18 (unregistering): Released all slaves [ 432.574243][ T4930] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.704365][ T4930] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.742244][T12181] lo speed is unknown, defaulting to 1000 [ 432.812585][ T4930] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.832325][T12198] netlink: 'syz.4.2931': attribute type 1 has an invalid length. [ 432.973619][T12202] device veth9 entered promiscuous mode [ 433.000143][T12202] bond18: (slave veth9): Enslaving as a backup interface with a down link [ 433.039469][T12204] netlink: 'syz.0.2934': attribute type 10 has an invalid length. [ 433.070574][T12204] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2934'. [ 433.146745][T12204] team0: Port device geneve0 added [ 433.182477][ T26] usb 3-1: 0:8 : does not exist [ 433.249541][ T26] usb 3-1: USB disconnect, device number 8 [ 433.268080][ T27] kauditd_printk_skb: 122 callbacks suppressed [ 433.268095][ T27] audit: type=1326 audit(1750222128.056:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12211 comm="syz.0.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 433.389263][ T27] audit: type=1326 audit(1750222128.056:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12211 comm="syz.0.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 433.455761][ T27] audit: type=1326 audit(1750222128.056:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12211 comm="syz.0.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 433.455799][ T27] audit: type=1326 audit(1750222128.056:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12211 comm="syz.0.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 433.455826][ T27] audit: type=1326 audit(1750222128.056:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12211 comm="syz.0.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 433.455856][ T27] audit: type=1326 audit(1750222128.056:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12211 comm="syz.0.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 433.455885][ T27] audit: type=1326 audit(1750222128.056:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12211 comm="syz.0.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 433.455913][ T27] audit: type=1326 audit(1750222128.056:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12211 comm="syz.0.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 433.455941][ T27] audit: type=1326 audit(1750222128.056:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12211 comm="syz.0.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 433.455971][ T27] audit: type=1326 audit(1750222128.056:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12211 comm="syz.0.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f099298d290 code=0x7ffc0000 [ 433.459479][T12220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2940'. [ 434.255067][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 435.518564][T12247] netlink: 91 bytes leftover after parsing attributes in process `syz.4.2946'. [ 435.666052][ T4930] bond19: (slave ip6gretap1): Removing an active aggregator [ 435.676104][ T4930] bond19: (slave ip6gretap1): Releasing backup interface [ 435.706387][T12181] chnl_net:caif_netlink_parms(): no params data found [ 436.335750][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 436.364650][T12255] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2950'. [ 436.437848][T12256] bond8 (unregistering): Released all slaves [ 436.533351][ T4301] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 436.702004][T12266] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.753954][ T4301] usb 1-1: Using ep0 maxpacket: 8 [ 436.764601][ T4301] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.778960][T12270] netlink: 'syz.4.2954': attribute type 10 has an invalid length. [ 436.796516][T12270] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2954'. [ 436.810189][ T4301] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 436.835838][ T4301] usb 1-1: config 1 has no interface number 1 [ 436.842268][ T4301] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 436.857963][T12275] loop2: detected capacity change from 0 to 512 [ 436.860738][ T4301] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 436.866457][T12275] EXT4-fs: Ignoring removed mblk_io_submit option [ 436.876745][ T4301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.896641][T12275] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 436.897090][ T4301] usb 1-1: Product: syz [ 436.909506][ T4301] usb 1-1: Manufacturer: syz [ 436.919069][ T4301] usb 1-1: SerialNumber: syz [ 436.919778][T12275] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 436.935124][T12275] ext4 filesystem being mounted at /554/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.984175][T12266] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.006952][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 437.074708][T12266] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.106064][T12181] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.122876][T12181] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.137681][T12181] device bridge_slave_0 entered promiscuous mode [ 437.182628][T12266] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.212075][T12181] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.219774][T12181] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.234735][T12181] device bridge_slave_1 entered promiscuous mode [ 437.302981][ T4930] bond2: (slave gretap1): Releasing backup interface [ 437.402577][T12181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.431160][T12181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.578231][T12181] team0: Port device team_slave_0 added [ 437.604109][T12266] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.742589][T12181] team0: Port device team_slave_1 added [ 437.782869][T12266] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.844268][T12266] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.041492][T12266] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.064980][T12181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.074156][T12181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.132557][T12181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.189606][T12181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.217849][T12181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.330033][T12181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.413507][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 438.525125][T12181] device hsr_slave_0 entered promiscuous mode [ 438.532766][ T4301] usb 1-1: 0:8 : does not exist [ 438.610623][ T4301] usb 1-1: USB disconnect, device number 2 [ 438.643802][T12181] device hsr_slave_1 entered promiscuous mode [ 438.655185][ T27] kauditd_printk_skb: 82 callbacks suppressed [ 438.655199][ T27] audit: type=1326 audit(1750222133.446:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12310 comm="syz.0.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 438.684753][T12181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.692865][T12181] Cannot create hsr debugfs directory [ 438.737234][ T27] audit: type=1326 audit(1750222133.486:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12310 comm="syz.0.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 438.762225][ T4930] device hsr_slave_0 left promiscuous mode [ 438.794076][ T4930] device hsr_slave_1 left promiscuous mode [ 438.841381][ T27] audit: type=1326 audit(1750222133.486:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12310 comm="syz.0.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 438.841421][ T27] audit: type=1326 audit(1750222133.486:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12310 comm="syz.0.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 438.841450][ T27] audit: type=1326 audit(1750222133.486:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12310 comm="syz.0.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 438.841478][ T27] audit: type=1326 audit(1750222133.486:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12310 comm="syz.0.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 438.841507][ T27] audit: type=1326 audit(1750222133.486:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12310 comm="syz.0.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 438.841537][ T27] audit: type=1326 audit(1750222133.486:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12310 comm="syz.0.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 438.841566][ T27] audit: type=1326 audit(1750222133.486:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12310 comm="syz.0.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 438.841603][ T27] audit: type=1326 audit(1750222133.486:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12310 comm="syz.0.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f099298d290 code=0x7ffc0000 [ 438.909182][ T4930] device veth1_macvtap left promiscuous mode [ 438.909280][ T4930] device veth0_macvtap left promiscuous mode [ 439.217488][ T4930] bond21 (unregistering): (slave veth5): Releasing backup interface [ 439.238440][ T4930] bond21 (unregistering): Released all slaves [ 439.536477][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.542867][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.679610][ T4930] bond20 (unregistering): Released all slaves [ 440.041901][ T4930] bond19 (unregistering): Released all slaves [ 440.341577][ T4930] bond18 (unregistering): Released all slaves [ 440.503016][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 440.584752][ T4930] bond17 (unregistering): Released all slaves [ 440.673634][T12324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2975'. [ 440.959090][ T4930] bond16 (unregistering): Released all slaves [ 441.076721][T12299] Set syz1 is full, maxelem 65536 reached [ 441.181156][ T4930] bond15 (unregistering): Released all slaves [ 441.336921][ T4930] bond14 (unregistering): Released all slaves [ 441.497673][ T4930] bond12 (unregistering): (slave bond13): Releasing backup interface [ 441.507854][ T4930] bond13 (unregistering): Released all slaves [ 441.524160][ T4930] bond12 (unregistering): Released all slaves [ 441.666860][ T4930] bond10 (unregistering): (slave bond11): Releasing backup interface [ 441.676676][ T4930] bond11 (unregistering): Released all slaves [ 441.689247][ T4930] bond10 (unregistering): Released all slaves [ 441.829674][ T4930] bond8 (unregistering): (slave bond9): Releasing backup interface [ 441.840674][ T4930] bond9 (unregistering): Released all slaves [ 441.852705][ T4930] bond8 (unregistering): Released all slaves [ 441.862977][ T4930] bond7 (unregistering): Released all slaves [ 441.872968][ T4930] bond6 (unregistering): Released all slaves [ 442.011273][ T4930] bond4 (unregistering): (slave bond5): Releasing backup interface [ 442.021753][ T4930] bond5 (unregistering): Released all slaves [ 442.034686][ T4930] bond4 (unregistering): Released all slaves [ 442.187883][ T4930] bond2 (unregistering): (slave bond3): Releasing backup interface [ 442.197556][ T4930] bond3 (unregistering): Released all slaves [ 442.209671][ T4930] bond2 (unregistering): Released all slaves [ 442.345007][ T4930] bond1 (unregistering): Released all slaves [ 442.640477][ T4930] team0 (unregistering): Port device geneve0 removed [ 442.936000][ T4930] team0 (unregistering): Port device team_slave_1 removed [ 442.988310][ T4930] team0 (unregistering): Port device team_slave_0 removed [ 443.032988][ T4930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.083076][ T4930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.561843][ T4930] bond0 (unregistering): Released all slaves [ 443.614530][T12327] netlink: 'syz.0.2976': attribute type 1 has an invalid length. [ 443.718746][T12329] device veth3 entered promiscuous mode [ 443.744150][T12331] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2977'. [ 444.739523][T12338] netlink: 'syz.2.2980': attribute type 1 has an invalid length. [ 445.451059][T12368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2985'. [ 445.552909][T12372] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2986'. [ 445.598276][T12181] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 445.608712][T12181] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 445.633091][T12181] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 445.652216][T12181] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 445.800490][T12181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.835741][T11651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 445.847778][T11651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 445.864868][T12380] netlink: 'syz.0.2990': attribute type 1 has an invalid length. [ 445.878965][T12181] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.907575][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 445.932256][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 445.956015][ T4307] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.963122][ T4307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.993821][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 446.037885][T12380] device veth3 entered promiscuous mode [ 446.067844][ T27] kauditd_printk_skb: 28 callbacks suppressed [ 446.067857][ T27] audit: type=1326 audit(1750222140.856:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12387 comm="syz.2.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 446.101067][T11651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 446.101714][T11651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 446.102107][T11651] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.102235][T11651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.118105][T11651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 446.127230][ T27] audit: type=1326 audit(1750222140.856:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12387 comm="syz.2.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 446.127272][ T27] audit: type=1326 audit(1750222140.856:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12387 comm="syz.2.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 446.127300][ T27] audit: type=1326 audit(1750222140.856:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12387 comm="syz.2.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 446.127327][ T27] audit: type=1326 audit(1750222140.856:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12387 comm="syz.2.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 446.127356][ T27] audit: type=1326 audit(1750222140.856:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12387 comm="syz.2.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 446.127383][ T27] audit: type=1326 audit(1750222140.856:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12387 comm="syz.2.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 446.127412][ T27] audit: type=1326 audit(1750222140.856:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12387 comm="syz.2.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 446.127439][ T27] audit: type=1326 audit(1750222140.866:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12387 comm="syz.2.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 446.127466][ T27] audit: type=1326 audit(1750222140.866:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12387 comm="syz.2.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbe4b8e929 code=0x7ffc0000 [ 446.140881][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 446.152602][T11651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 446.154726][T11651] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 446.155388][T11651] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 446.181197][T11651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 446.181964][T11651] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 446.192828][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 446.193523][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 446.204499][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 446.491756][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 446.496907][T12181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 446.590693][T12400] netlink: 'syz.4.2997': attribute type 1 has an invalid length. [ 446.769518][T12403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2996'. [ 447.349811][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 447.361054][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 447.379369][T12425] netlink: 'syz.4.3007': attribute type 1 has an invalid length. [ 447.444365][T12181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.536267][T11651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 447.562194][T11651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 447.609907][T12432] loop2: detected capacity change from 0 to 1024 [ 447.623513][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 447.640753][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 447.653900][T12432] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 447.674564][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 447.682732][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 447.699948][T12181] device veth0_vlan entered promiscuous mode [ 447.716042][T12181] device veth1_vlan entered promiscuous mode [ 447.740288][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 447.748589][T12432] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 447.767515][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 447.808639][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 447.838843][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 447.868053][T12181] device veth0_macvtap entered promiscuous mode [ 447.892738][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 447.923066][T12444] netlink: 'syz.4.3011': attribute type 1 has an invalid length. [ 447.967177][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 447.989422][T12181] device veth1_macvtap entered promiscuous mode [ 448.021458][T12446] 8021q: adding VLAN 0 to HW filter on device bond22 [ 448.035081][T12446] bond21: (slave bond22): Enslaving as an active interface with an up link [ 448.052767][T12181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.064204][T12181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.074503][T12181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.085846][T12181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.095876][T12181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.106778][T12181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.118947][T12181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.150231][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 448.204243][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 448.235174][T12181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.286835][T12181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.307060][T12181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.326275][T12181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.347919][T12181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.374232][T11651] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 448.390424][T11651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 448.424024][T12181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.424058][T12181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.424081][T12181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.424105][T12181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.550165][ T4540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.550212][ T4540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.559154][T12451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3013'. [ 448.563886][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 448.621684][ T4307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.621736][ T4307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.626975][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 448.762819][T12462] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.816727][T12465] netlink: 'syz.4.3017': attribute type 10 has an invalid length. [ 448.816749][T12465] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3017'. [ 448.904497][T12467] netlink: 'syz.0.3018': attribute type 1 has an invalid length. [ 448.933065][T12462] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.988985][T12462] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.706309][T12462] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.892351][T12462] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.939082][T12462] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.963972][T12462] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.981302][T12462] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.762908][ T4258] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 450.783759][ T4265] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 450.834766][T12490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3028'. [ 450.922987][ T4265] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 451.023293][ T4265] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 451.038638][ T4265] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 451.048931][ T4265] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 451.380533][ T4939] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.473409][ T27] kauditd_printk_skb: 51 callbacks suppressed [ 451.473423][ T27] audit: type=1107 audit(1750222146.266:2430): pid=12489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 451.606307][ T4939] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.626895][ T27] audit: type=1326 audit(1750222146.416:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12506 comm="syz.1.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bfa78e929 code=0x7ffc0000 [ 451.659962][T12496] lo speed is unknown, defaulting to 1000 [ 451.688351][ T27] audit: type=1326 audit(1750222146.436:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12506 comm="syz.1.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bfa78e929 code=0x7ffc0000 [ 451.747239][ T27] audit: type=1326 audit(1750222146.436:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12506 comm="syz.1.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bfa78e929 code=0x7ffc0000 [ 451.775463][ T4939] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.797389][ T27] audit: type=1326 audit(1750222146.436:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12506 comm="syz.1.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bfa78e929 code=0x7ffc0000 [ 451.821727][ T27] audit: type=1326 audit(1750222146.436:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12506 comm="syz.1.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bfa78e929 code=0x7ffc0000 [ 451.847617][ T27] audit: type=1326 audit(1750222146.446:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12506 comm="syz.1.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bfa78e929 code=0x7ffc0000 [ 451.918795][ T4939] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.930067][ T27] audit: type=1326 audit(1750222146.446:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12506 comm="syz.1.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bfa78e929 code=0x7ffc0000 [ 451.964132][T12517] netlink: 'syz.0.3036': attribute type 10 has an invalid length. [ 451.972966][ T27] audit: type=1326 audit(1750222146.446:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12506 comm="syz.1.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bfa78e929 code=0x7ffc0000 [ 451.996990][T12517] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3036'. [ 452.002108][ T27] audit: type=1326 audit(1750222146.446:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12506 comm="syz.1.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bfa78e929 code=0x7ffc0000 [ 452.047412][T12516] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3038'. [ 452.058939][T12516] device hsr_slave_0 left promiscuous mode [ 452.066101][T12516] device hsr_slave_1 left promiscuous mode [ 452.157765][T12512] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.179363][T12519] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3039'. [ 452.276391][T12512] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.381469][T12512] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.397858][T12496] chnl_net:caif_netlink_parms(): no params data found [ 452.550076][T12512] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.628333][ T4939] bond7: (slave ip6gretap1): Releasing backup interface [ 452.640032][ T4939] bond7: (slave ip6gretap1): the permanent HWaddr of slave - f2:c3:40:31:ed:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 452.664536][T12496] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.671815][T12496] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.679850][T12496] device bridge_slave_0 entered promiscuous mode [ 452.712430][T12496] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.727835][T12496] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.738364][T12496] device bridge_slave_1 entered promiscuous mode [ 452.795795][T12512] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.817883][T12512] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.832653][T12512] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.857239][T12512] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.934179][T12496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.946162][T12496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.224983][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 453.537526][T12496] team0: Port device team_slave_0 added [ 453.565874][T12496] team0: Port device team_slave_1 added [ 453.723059][T12540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3044'. [ 453.741713][T12540] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3044'. [ 453.749811][T12542] loop9: detected capacity change from 0 to 7 [ 453.757324][T12540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3044'. [ 453.770910][T12542] Dev loop9: unable to read RDB block 7 [ 453.780436][T12540] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3044'. [ 453.789959][T12542] loop9: unable to read partition table [ 453.793771][T12540] netlink: 'syz.0.3044': attribute type 6 has an invalid length. [ 453.800789][T12542] loop9: partition table beyond EOD, truncated [ 453.830175][T12542] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 453.830175][T12542] U) failed (rc=-5) [ 453.858637][T12496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.871648][T12496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.907670][T12496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.975005][T12496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.982284][T12496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.008986][T12496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.031049][T12549] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3049'. [ 454.043983][T12550] netlink: 'syz.2.3050': attribute type 1 has an invalid length. [ 454.184555][T12550] 8021q: adding VLAN 0 to HW filter on device bond18 [ 454.207460][T12496] device hsr_slave_0 entered promiscuous mode [ 454.214721][T12496] device hsr_slave_1 entered promiscuous mode [ 454.221780][T12558] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3053'. [ 454.260723][T12553] device veth3 entered promiscuous mode [ 454.271909][T12553] bond18: (slave veth3): Enslaving as a backup interface with a down link [ 454.758427][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3056'. [ 454.953116][ T4939] device hsr_slave_0 left promiscuous mode [ 454.960188][ T4939] device hsr_slave_1 left promiscuous mode [ 454.974804][ T4939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.982782][ T4939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.999531][ T4939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.008621][ T4939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.048223][ T4939] device veth1_macvtap left promiscuous mode [ 455.061699][ T4939] device veth0_macvtap left promiscuous mode [ 455.178666][ T4939] infiniband syz!: set down [ 455.896318][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 455.940374][ T4939] bond7 (unregistering): (slave veth3): Releasing backup interface [ 455.969730][ T4939] bond7 (unregistering): Released all slaves [ 456.208692][ T4939] bond6 (unregistering): Released all slaves [ 456.224748][ T4939] bond5 (unregistering): Released all slaves [ 456.238146][ T4939] bond4 (unregistering): Released all slaves [ 456.251365][ T4939] bond3 (unregistering): Released all slaves [ 456.265954][ T4939] bond2 (unregistering): Released all slaves [ 456.630019][ T4939] bond1 (unregistering): Released all slaves [ 456.949472][ T4939] team0 (unregistering): Port device team_slave_1 removed [ 456.999415][ T4939] team0 (unregistering): Port device team_slave_0 removed [ 457.008350][ T4937] smc: removing ib device syz! [ 457.049081][ T4939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.094961][ T4939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.438351][ T4939] bond0 (unregistering): Released all slaves [ 457.482208][T12576] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3061'. [ 457.497949][T12592] netlink: 'syz.1.3066': attribute type 1 has an invalid length. [ 457.596046][T12595] device veth3 entered promiscuous mode [ 458.003792][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 458.127699][T12601] loop2: detected capacity change from 0 to 128 [ 458.137912][T12601] ext4: Unknown parameter 'subj_user' [ 458.553433][ T4300] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 458.565576][ T27] kauditd_printk_skb: 114 callbacks suppressed [ 458.565589][ T27] audit: type=1326 audit(1750222153.356:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12602 comm="syz.0.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 458.655102][ T27] audit: type=1326 audit(1750222153.366:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12602 comm="syz.0.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 458.699376][T12496] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 458.732495][T12496] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 458.745336][ T27] audit: type=1326 audit(1750222153.396:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12602 comm="syz.0.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 458.759256][ T4300] usb 3-1: Using ep0 maxpacket: 8 [ 458.794337][T12496] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 458.821700][ T4300] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 458.831537][ T27] audit: type=1326 audit(1750222153.396:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12602 comm="syz.0.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 458.853160][ T4300] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 458.856893][T12496] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 458.866649][ T4300] usb 3-1: config 1 has no interface number 1 [ 458.903915][ T4300] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 458.951208][ T27] audit: type=1326 audit(1750222153.396:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12602 comm="syz.0.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 458.958092][ T4300] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 459.018025][ T4300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.026241][ T27] audit: type=1326 audit(1750222153.396:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12602 comm="syz.0.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 459.049986][ T4300] usb 3-1: Product: syz [ 459.054340][ T4300] usb 3-1: Manufacturer: syz [ 459.073737][ T4300] usb 3-1: SerialNumber: syz [ 459.124254][ T27] audit: type=1326 audit(1750222153.396:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12602 comm="syz.0.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 459.150076][T12496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.170250][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 459.179383][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 459.187024][ T27] audit: type=1326 audit(1750222153.396:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12602 comm="syz.0.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 459.215688][T12496] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.225938][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3070'. [ 459.242258][ T27] audit: type=1326 audit(1750222153.396:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12602 comm="syz.0.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 459.280425][T11894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 459.290535][T11894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 459.311973][T11894] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.319211][T11894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.330169][ T27] audit: type=1326 audit(1750222153.396:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12602 comm="syz.0.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 459.354357][T11894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 459.363643][T11894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 459.375195][T11894] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.382360][T11894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.392499][T11894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 459.402192][T11894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 459.429628][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 459.443054][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 459.471918][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 459.491300][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 459.528739][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 459.556196][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 459.593790][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 459.616822][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 459.634601][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 459.662487][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 459.688767][T12496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 460.014724][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 460.668126][T12626] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3076'. [ 460.754293][ T4300] usb 3-1: 0:8 : does not exist [ 460.779923][ T4300] usb 3-1: USB disconnect, device number 9 [ 460.917605][T12634] netlink: 'syz.0.3079': attribute type 1 has an invalid length. [ 461.000060][T12638] 8021q: adding VLAN 0 to HW filter on device bond1 [ 461.077627][T12634] device veth3 entered promiscuous mode [ 461.087490][T12634] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 461.136209][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 461.150145][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 461.180472][T12496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.223609][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 461.244372][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 461.291672][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 461.311215][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 461.322574][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 461.337103][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 461.375151][T12496] device veth0_vlan entered promiscuous mode [ 461.383633][T12644] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3081'. [ 461.402534][T12644] device hsr_slave_0 left promiscuous mode [ 461.419294][T12644] device hsr_slave_1 left promiscuous mode [ 461.554350][T12496] device veth1_vlan entered promiscuous mode [ 461.729313][T12652] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.783507][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 461.797687][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 461.808373][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 461.820966][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 461.971688][T12496] device veth0_macvtap entered promiscuous mode [ 462.660927][T12652] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.773692][T12668] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3088'. [ 462.799501][T12496] device veth1_macvtap entered promiscuous mode [ 462.840741][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 462.929568][T12652] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.994763][T12496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.010903][T12496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.022066][T12496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.039345][T12496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.049751][T12496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.060627][T12496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.085028][T12496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.092853][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 463.117886][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 463.172998][T12652] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.195890][T12496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.211925][T12496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.222998][T12496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.235022][T12496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.262844][T12496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.292647][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 463.308550][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 463.340458][T12496] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.357133][T12496] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.371192][T12496] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.385882][T12496] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.008430][T12652] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.114086][T12652] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.148773][T12652] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.183160][ T4917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.216116][T12652] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.218131][ T4917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.279465][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 464.302910][ T4917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.323618][ T4917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.338902][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 464.387761][T12681] netlink: 'syz.2.3092': attribute type 1 has an invalid length. [ 464.498607][T12683] 8021q: adding VLAN 0 to HW filter on device bond19 [ 464.575200][T12681] device veth5 entered promiscuous mode [ 464.602282][T12681] bond19: (slave veth5): Enslaving as a backup interface with a down link [ 464.631542][T12685] netlink: 'syz.3.3024': attribute type 1 has an invalid length. [ 464.741404][ T27] kauditd_printk_skb: 138 callbacks suppressed [ 464.741417][ T27] audit: type=1326 audit(1750222159.526:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12689 comm="syz.0.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 464.835378][T12686] bond1 (unregistering): Released all slaves [ 464.907830][ T27] audit: type=1326 audit(1750222159.696:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12689 comm="syz.0.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 464.984258][ T27] audit: type=1326 audit(1750222159.696:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12689 comm="syz.0.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 465.053779][ T27] audit: type=1326 audit(1750222159.696:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12689 comm="syz.0.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 465.143306][ T27] audit: type=1326 audit(1750222159.716:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12689 comm="syz.0.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 465.225138][ T27] audit: type=1326 audit(1750222159.726:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12689 comm="syz.0.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 465.259703][T12633] Set syz1 is full, maxelem 65536 reached [ 465.293601][ T27] audit: type=1326 audit(1750222159.726:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12689 comm="syz.0.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 465.343013][ T27] audit: type=1326 audit(1750222159.726:2709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12689 comm="syz.0.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 465.419460][T12706] loop3: detected capacity change from 0 to 512 [ 465.426662][ T27] audit: type=1326 audit(1750222159.726:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12689 comm="syz.0.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 465.458078][T12706] ext2: Unknown parameter 'defcontext' [ 465.464326][ T27] audit: type=1326 audit(1750222159.726:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12689 comm="syz.0.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099298e929 code=0x7ffc0000 [ 465.497011][T12708] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.570082][T12708] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.081996][T12708] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.371513][T12708] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.421543][T12721] netlink: 'syz.1.3107': attribute type 1 has an invalid length. [ 466.578241][T12705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3100'. [ 466.579906][T12721] 8021q: adding VLAN 0 to HW filter on device bond1 [ 466.684987][T12729] loop2: detected capacity change from 0 to 128 [ 466.691992][T12729] ext4: Unknown parameter 'subj_user' [ 466.747405][T12708] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.926217][T12708] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.069897][T12708] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.247239][T12708] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.315228][T12721] device veth3 entered promiscuous mode [ 467.327800][T12721] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 467.399168][T12733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3110'. [ 467.459402][T12733] bond23 (unregistering): Released all slaves [ 467.563813][T12358] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 467.893510][T12358] usb 3-1: Using ep0 maxpacket: 8 [ 467.902877][T12358] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.916064][T12358] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 467.933290][T12358] usb 3-1: config 1 has no interface number 1 [ 467.939655][T12358] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 467.965927][T12358] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 468.016418][T12358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.173795][T12756] lo speed is unknown, defaulting to 1000 [ 468.607360][T12358] usb 3-1: Product: syz [ 468.624592][T12358] usb 3-1: Manufacturer: syz [ 468.630377][T12358] usb 3-1: SerialNumber: syz [ 469.032137][T12763] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.339882][T12764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3120'. [ 469.482757][T12763] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.592734][T12763] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.706079][T12763] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.045566][T12763] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.101930][T12763] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.137549][T12763] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.144073][ T27] kauditd_printk_skb: 85 callbacks suppressed [ 470.144086][ T27] audit: type=1326 audit(1750222164.936:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.3.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071558e929 code=0x7ffc0000 [ 470.153419][T12763] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.183819][ T27] audit: type=1326 audit(1750222164.966:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.3.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071558e929 code=0x7ffc0000 [ 470.184392][T12775] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3125'. [ 470.207067][ T27] audit: type=1326 audit(1750222164.966:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.3.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f071558e929 code=0x7ffc0000 [ 470.207106][ T27] audit: type=1326 audit(1750222164.966:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.3.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071558e929 code=0x7ffc0000 [ 470.207134][ T27] audit: type=1326 audit(1750222164.966:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.3.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071558e929 code=0x7ffc0000 [ 470.207183][ T27] audit: type=1326 audit(1750222164.966:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.3.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f071558e929 code=0x7ffc0000 [ 470.317173][ T27] audit: type=1326 audit(1750222164.966:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.3.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071558e929 code=0x7ffc0000 [ 470.353503][T12358] usb 3-1: 0:8 : does not exist [ 470.377734][T12774] netlink: 'syz.4.3123': attribute type 1 has an invalid length. [ 470.405238][ T27] audit: type=1326 audit(1750222164.966:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.3.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f071558e929 code=0x7ffc0000 [ 470.429151][T12358] usb 3-1: USB disconnect, device number 10 [ 470.441998][ T27] audit: type=1326 audit(1750222164.966:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.3.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071558e929 code=0x7ffc0000 [ 470.465132][ T27] audit: type=1326 audit(1750222164.966:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.3.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f071558e929 code=0x7ffc0000 [ 470.496403][T12777] 8021q: adding VLAN 0 to HW filter on device bond23 [ 470.529430][T12776] device veth11 entered promiscuous mode [ 470.598549][T12776] bond23: (slave veth11): Enslaving as a backup interface with a down link [ 470.646381][T12790] netlink: 'syz.1.3128': attribute type 1 has an invalid length. [ 470.726657][T12797] syz.2.3132[12797] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 470.726752][T12797] syz.2.3132[12797] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 470.807369][T12793] 8021q: adding VLAN 0 to HW filter on device bond3 [ 470.833497][T12793] bond2: (slave bond3): making interface the new active one [ 470.841452][T12793] bond2: (slave bond3): Enslaving as an active interface with an up link [ 471.765369][T12815] bond24 (unregistering): Released all slaves [ 472.112941][T12814] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.224698][T12822] netlink: 'syz.3.3138': attribute type 10 has an invalid length. [ 472.262282][T12822] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3138'. [ 472.280289][T12803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3135'. [ 472.292724][T12838] netlink: 'syz.1.3145': attribute type 2 has an invalid length. [ 472.367653][T12822] team0: Port device geneve0 added [ 472.377410][T12832] tipc: Started in network mode [ 472.382445][T12832] tipc: Node identity b2bb1175456e, cluster identity 4711 [ 472.394991][T12832] tipc: Enabled bearer , priority 0 [ 472.456195][T12814] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.590018][T12826] tipc: Resetting bearer [ 472.665845][T12814] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.691196][T12818] tipc: Resetting bearer [ 472.717953][T12846] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3148'. [ 472.766339][T12840] Set syz1 is full, maxelem 65536 reached [ 473.422638][ T1169] tipc: Node number set to 4157935989 [ 473.571533][ T4265] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 473.592394][ T4265] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 473.604542][ T4265] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 473.620649][ T4265] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 473.632407][ T4265] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 473.640676][ T4265] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 474.450158][T12868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3157'. [ 475.623606][T12818] tipc: Disabling bearer [ 475.634398][T12848] netlink: 'syz.1.3149': attribute type 4 has an invalid length. [ 475.656890][T12852] netlink: 'syz.1.3149': attribute type 4 has an invalid length. [ 475.703603][ T4265] Bluetooth: hci2: command 0x0409 tx timeout [ 475.768019][T12871] netlink: 'syz.2.3158': attribute type 1 has an invalid length. [ 475.860728][T12873] device veth7 entered promiscuous mode [ 475.921638][T12814] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.954604][T12855] lo speed is unknown, defaulting to 1000 [ 475.989284][T11898] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.067234][T11898] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.149834][T11898] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.202002][T12888] bond20 (unregistering): Released all slaves [ 476.241703][T12814] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.267899][T12814] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.291579][T11898] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.330374][T12814] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.364262][T12814] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.435635][T12855] chnl_net:caif_netlink_parms(): no params data found [ 476.588388][T11898] tipc: Left network mode [ 476.723708][T12855] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.730851][T12855] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.781918][T12855] device bridge_slave_0 entered promiscuous mode [ 476.892805][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3167'. [ 476.902137][T11898] bond8: (slave ip6gretap1): Removing an active aggregator [ 476.910259][T11898] bond8: (slave ip6gretap1): Releasing backup interface [ 476.916819][T12916] loop3: detected capacity change from 0 to 1024 [ 476.923985][T11898] bond8: (slave ip6gretap1): the permanent HWaddr of slave - d6:51:fe:1b:8a:84 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 476.925836][T12916] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 476.959692][T12916] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c800e02c, mo2=0000] [ 476.969844][T12855] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.979556][T12855] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.980642][T12916] [ 476.988962][T12916] ====================================================== [ 476.995337][T12855] device bridge_slave_1 entered promiscuous mode [ 476.995972][T12916] WARNING: possible circular locking dependency detected [ 476.995992][T12916] 6.1.141-syzkaller #0 Not tainted [ 477.014424][T12916] ------------------------------------------------------ [ 477.021455][T12916] syz.3.3173/12916 is trying to acquire lock: [ 477.027524][T12916] ffff8880578d8288 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x903/0x1b60 [ 477.037070][T12916] [ 477.037070][T12916] but task is already holding lock: [ 477.044448][T12916] ffff88801c2c4208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x12b/0x190 [ 477.054049][T12916] [ 477.054049][T12916] which lock already depends on the new lock. [ 477.054049][T12916] [ 477.064466][T12916] [ 477.064466][T12916] the existing dependency chain (in reverse order) is: [ 477.073487][T12916] [ 477.073487][T12916] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 477.081587][T12916] down_read+0x42/0x2d0 [ 477.086278][T12916] v2_read_dquot+0x4a/0x110 [ 477.091315][T12916] dquot_acquire+0x152/0x520 [ 477.096419][T12916] ext4_acquire_dquot+0x2d9/0x4a0 [ 477.101957][T12916] dqget+0x778/0xeb0 [ 477.106365][T12916] __dquot_initialize+0x328/0xcb0 [ 477.111902][T12916] ext4_process_orphan+0x54/0x300 [ 477.117445][T12916] ext4_orphan_cleanup+0xbd3/0x1400 [ 477.123154][T12916] ext4_fill_super+0x7b78/0x8110 [ 477.128610][T12916] get_tree_bdev+0x3f1/0x610 [ 477.133716][T12916] vfs_get_tree+0x88/0x270 [ 477.138646][T12916] do_new_mount+0x24a/0xa40 [ 477.143666][T12916] __se_sys_mount+0x2d6/0x3c0 [ 477.148861][T12916] do_syscall_64+0x4c/0xa0 [ 477.153796][T12916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.160219][T12916] [ 477.160219][T12916] -> #1 (&dquot->dq_lock){+.+.}-{3:3}: [ 477.167869][T12916] __mutex_lock+0x120/0xaf0 [ 477.172888][T12916] dquot_commit+0x5a/0x410 [ 477.177818][T12916] ext4_write_dquot+0x1f0/0x360 [ 477.183187][T12916] mark_all_dquot_dirty+0x1e3/0x400 [ 477.188903][T12916] __dquot_free_space+0x7ec/0xbc0 [ 477.194440][T12916] ext4_free_blocks+0x1bab/0x2640 [ 477.199987][T12916] ext4_ext_remove_space+0x1f0d/0x4490 [ 477.205959][T12916] ext4_ext_truncate+0x211/0x370 [ 477.211412][T12916] ext4_truncate+0xa0b/0x1230 [ 477.216600][T12916] ext4_evict_inode+0xb35/0x1100 [ 477.222045][T12916] evict+0x485/0x870 [ 477.226460][T12916] ext4_orphan_cleanup+0xbd3/0x1400 [ 477.232176][T12916] ext4_fill_super+0x7b78/0x8110 [ 477.237653][T12916] get_tree_bdev+0x3f1/0x610 [ 477.242772][T12916] vfs_get_tree+0x88/0x270 [ 477.247721][T12916] do_new_mount+0x24a/0xa40 [ 477.252740][T12916] __se_sys_mount+0x2d6/0x3c0 [ 477.257929][T12916] do_syscall_64+0x4c/0xa0 [ 477.262866][T12916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.269282][T12916] [ 477.269282][T12916] -> #0 (&ei->i_data_sem/2){++++}-{3:3}: [ 477.277101][T12916] __lock_acquire+0x2cf8/0x7c50 [ 477.282475][T12916] lock_acquire+0x1b4/0x490 [ 477.287495][T12916] down_write+0x36/0x60 [ 477.292167][T12916] ext4_map_blocks+0x903/0x1b60 [ 477.297534][T12916] ext4_getblk+0x1ab/0x6d0 [ 477.302463][T12916] ext4_bread+0x26/0x170 [ 477.307234][T12916] ext4_quota_write+0x230/0x570 [ 477.312627][T12916] find_free_dqentry+0x673/0xc20 [ 477.318094][T12916] do_insert_tree+0x70d/0x1040 [ 477.323373][T12916] do_insert_tree+0x9eb/0x1040 [ 477.328658][T12916] do_insert_tree+0x9eb/0x1040 [ 477.333939][T12916] do_insert_tree+0x9eb/0x1040 [ 477.339219][T12916] qtree_write_dquot+0x48d/0x5b0 [ 477.344670][T12916] v2_write_dquot+0x108/0x190 [ 477.349863][T12916] dquot_acquire+0x2d5/0x520 [ 477.354971][T12916] ext4_acquire_dquot+0x2d9/0x4a0 [ 477.360517][T12916] dqget+0x778/0xeb0 [ 477.364927][T12916] __dquot_initialize+0x3b6/0xcb0 [ 477.370466][T12916] ext4_process_orphan+0x54/0x300 [ 477.376004][T12916] ext4_orphan_cleanup+0xbd3/0x1400 [ 477.381739][T12916] ext4_fill_super+0x7b78/0x8110 [ 477.387800][T12916] get_tree_bdev+0x3f1/0x610 [ 477.392908][T12916] vfs_get_tree+0x88/0x270 [ 477.397834][T12916] do_new_mount+0x24a/0xa40 [ 477.402854][T12916] __se_sys_mount+0x2d6/0x3c0 [ 477.408060][T12916] do_syscall_64+0x4c/0xa0 [ 477.412992][T12916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.419403][T12916] [ 477.419403][T12916] other info that might help us debug this: [ 477.419403][T12916] [ 477.429639][T12916] Chain exists of: [ 477.429639][T12916] &ei->i_data_sem/2 --> &dquot->dq_lock --> &s->s_dquot.dqio_sem [ 477.429639][T12916] [ 477.443283][T12916] Possible unsafe locking scenario: [ 477.443283][T12916] [ 477.450722][T12916] CPU0 CPU1 [ 477.456076][T12916] ---- ---- [ 477.461429][T12916] lock(&s->s_dquot.dqio_sem); [ 477.466273][T12916] lock(&dquot->dq_lock); [ 477.473203][T12916] lock(&s->s_dquot.dqio_sem); [ 477.480567][T12916] lock(&ei->i_data_sem/2); [ 477.485159][T12916] [ 477.485159][T12916] *** DEADLOCK *** [ 477.485159][T12916] [ 477.493291][T12916] 3 locks held by syz.3.3173/12916: [ 477.498477][T12916] #0: ffff88801c2c40e0 (&type->s_umount_key#27/1){+.+.}-{3:3}, at: alloc_super+0x1fa/0x930 [ 477.508578][T12916] #1: ffff888053dac428 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_acquire+0x63/0x520 [ 477.517992][T12916] #2: ffff88801c2c4208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x12b/0x190 [ 477.527996][T12916] [ 477.527996][T12916] stack backtrace: [ 477.533890][T12916] CPU: 0 PID: 12916 Comm: syz.3.3173 Not tainted 6.1.141-syzkaller #0 [ 477.542035][T12916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 477.552105][T12916] Call Trace: [ 477.555378][T12916] [ 477.558303][T12916] dump_stack_lvl+0x168/0x22e [ 477.562991][T12916] ? load_image+0x3b0/0x3b0 [ 477.567492][T12916] ? show_regs_print_info+0x12/0x12 [ 477.572692][T12916] ? print_circular_bug+0x12b/0x1a0 [ 477.577895][T12916] check_noncircular+0x274/0x310 [ 477.582836][T12916] ? add_chain_block+0x940/0x940 [ 477.587773][T12916] ? lockdep_lock+0xdc/0x1e0 [ 477.592360][T12916] ? __lock_acquire+0x13c0/0x7c50 [ 477.597381][T12916] ? _find_first_zero_bit+0xcf/0x100 [ 477.602664][T12916] __lock_acquire+0x2cf8/0x7c50 [ 477.607526][T12916] ? mark_lock+0x94/0x320 [ 477.611852][T12916] ? verify_lock_unused+0x140/0x140 [ 477.617050][T12916] ? verify_lock_unused+0x140/0x140 [ 477.622253][T12916] lock_acquire+0x1b4/0x490 [ 477.626757][T12916] ? ext4_map_blocks+0x903/0x1b60 [ 477.631779][T12916] ? __might_sleep+0xd0/0xd0 [ 477.636369][T12916] ? read_lock_is_recursive+0x10/0x10 [ 477.641737][T12916] ? percpu_counter_add_batch+0x13b/0x160 [ 477.647453][T12916] ? rcu_is_watching+0x11/0xa0 [ 477.652216][T12916] ? ext4_es_lookup_extent+0x443/0xb20 [ 477.657673][T12916] down_write+0x36/0x60 [ 477.661830][T12916] ? ext4_map_blocks+0x903/0x1b60 [ 477.666852][T12916] ext4_map_blocks+0x903/0x1b60 [ 477.671705][T12916] ? ext4_es_lookup_extent+0x443/0xb20 [ 477.677171][T12916] ? ext4_issue_zeroout+0x250/0x250 [ 477.682363][T12916] ? kasan_set_track+0x4b/0x70 [ 477.687133][T12916] ? find_free_dqentry+0x55/0xc20 [ 477.692158][T12916] ? do_insert_tree+0x70d/0x1040 [ 477.697093][T12916] ? do_insert_tree+0x9eb/0x1040 [ 477.702030][T12916] ? ext4_issue_zeroout+0x250/0x250 [ 477.707222][T12916] ? v2_write_dquot+0x108/0x190 [ 477.712075][T12916] ext4_getblk+0x1ab/0x6d0 [ 477.716485][T12916] ? vfs_get_tree+0x88/0x270 [ 477.721069][T12916] ? do_new_mount+0x24a/0xa40 [ 477.725744][T12916] ? __se_sys_mount+0x2d6/0x3c0 [ 477.730594][T12916] ? ext4_get_block_unwritten+0x100/0x100 [ 477.736315][T12916] ? ext4_getblk+0x2a8/0x6d0 [ 477.740906][T12916] ? ext4_get_block_unwritten+0x100/0x100 [ 477.746624][T12916] ext4_bread+0x26/0x170 [ 477.750875][T12916] ext4_quota_write+0x230/0x570 [ 477.755725][T12916] ? ext4_quota_read+0x380/0x380 [ 477.760659][T12916] ? ext4_quota_read+0x305/0x380 [ 477.765593][T12916] ? check_dquot_block_header+0x212/0x2f0 [ 477.771310][T12916] ? ext4_quota_read+0x380/0x380 [ 477.776243][T12916] find_free_dqentry+0x673/0xc20 [ 477.781185][T12916] do_insert_tree+0x70d/0x1040 [ 477.785955][T12916] do_insert_tree+0x9eb/0x1040 [ 477.790727][T12916] do_insert_tree+0x9eb/0x1040 [ 477.795492][T12916] do_insert_tree+0x9eb/0x1040 [ 477.800260][T12916] qtree_write_dquot+0x48d/0x5b0 [ 477.805196][T12916] ? qtree_entry_unused+0xe0/0xe0 [ 477.810222][T12916] ? rwsem_write_trylock+0x12f/0x1b0 [ 477.815529][T12916] ? trace_contention_end+0x5f/0x170 [ 477.820808][T12916] ? preempt_count_add+0x8d/0x190 [ 477.825832][T12916] v2_write_dquot+0x108/0x190 [ 477.830515][T12916] dquot_acquire+0x2d5/0x520 [ 477.835108][T12916] ext4_acquire_dquot+0x2d9/0x4a0 [ 477.840134][T12916] dqget+0x778/0xeb0 [ 477.844028][T12916] __dquot_initialize+0x3b6/0xcb0 [ 477.849061][T12916] ? dquot_initialize+0x20/0x20 [ 477.853909][T12916] ? ext4_get_projid+0x140/0x140 [ 477.858859][T12916] ext4_process_orphan+0x54/0x300 [ 477.863880][T12916] ext4_orphan_cleanup+0xbd3/0x1400 [ 477.869075][T12916] ? ext4_orphan_del+0xb90/0xb90 [ 477.874006][T12916] ? errseq_check_and_advance+0x62/0x120 [ 477.879638][T12916] ext4_fill_super+0x7b78/0x8110 [ 477.884586][T12916] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 477.890914][T12916] ? snprintf+0xd7/0x120 [ 477.895151][T12916] ? preempt_count_add+0x8d/0x190 [ 477.900172][T12916] ? vscnprintf+0x80/0x80 [ 477.904501][T12916] ? set_blocksize+0x1d3/0x350 [ 477.909267][T12916] ? sb_set_blocksize+0xa5/0xe0 [ 477.914119][T12916] get_tree_bdev+0x3f1/0x610 [ 477.918712][T12916] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 477.924951][T12916] vfs_get_tree+0x88/0x270 [ 477.929364][T12916] do_new_mount+0x24a/0xa40 [ 477.933865][T12916] __se_sys_mount+0x2d6/0x3c0 [ 477.938538][T12916] ? __x64_sys_mount+0xc0/0xc0 [ 477.943315][T12916] ? lockdep_hardirqs_on+0x94/0x140 [ 477.948525][T12916] ? __x64_sys_mount+0x1c/0xc0 [ 477.953292][T12916] do_syscall_64+0x4c/0xa0 [ 477.957707][T12916] ? clear_bhb_loop+0x60/0xb0 [ 477.962423][T12916] ? clear_bhb_loop+0x60/0xb0 [ 477.967098][T12916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.973021][T12916] RIP: 0033:0x7f07155900ca [ 477.977449][T12916] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.997070][T12916] RSP: 002b:00007f0716424e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 478.005482][T12916] RAX: ffffffffffffffda RBX: 00007f0716424ef0 RCX: 00007f07155900ca [ 478.013451][T12916] RDX: 0000200000000140 RSI: 0000200000000040 RDI: 00007f0716424eb0 [ 478.021419][T12916] RBP: 0000200000000140 R08: 00007f0716424ef0 R09: 0000000001018e58 [ 478.029387][T12916] R10: 0000000001018e58 R11: 0000000000000246 R12: 0000200000000040 [ 478.037356][T12916] R13: 00007f0716424eb0 R14: 00000000000005fc R15: 000000000000002c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 478.045345][T12916] [ 478.054052][ T4265] Bluetooth: hci2: command 0x041b tx timeout [ 478.062734][T12911] netlink: 'syz.0.3171': attribute type 1 has an invalid length. [ 478.082908][T12916] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 2: comm syz.3.3173: lblock 2 mapped to illegal pblock 2 (length 1) [ 478.127931][T12913] netlink: 'syz.2.3172': attribute type 1 has an invalid length. [ 478.136912][T12916] EXT4-fs (loop3): Remounting filesystem read-only [ 478.144377][T12917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3171'. [ 478.145496][T12916] __quota_error: 84 callbacks suppressed [ 478.145508][T12916] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 478.170293][T12916] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 48: comm syz.3.3173: lblock 0 mapped to illegal pblock 48 (length 1) [ 478.224243][T12916] EXT4-fs (loop3): Remounting filesystem read-only [ 478.230807][T12916] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 478.263814][T12916] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.3173: Failed to acquire dquot type 0 [ 478.304329][T12916] EXT4-fs (loop3): Remounting filesystem read-only [ 478.310895][T12916] EXT4-fs (loop3): ext4_process_orphan: deleting unreferenced inode 11 [ 478.324084][T12921] device veth7 entered promiscuous mode [ 478.343807][T12916] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 478.363476][T12916] EXT4-fs (loop3): Remounting filesystem read-only [ 478.370043][T12916] EXT4-fs error (device loop3): ext4_evict_inode:279: inode #11: comm syz.3.3173: mark_inode_dirty error [ 478.433530][T12916] EXT4-fs (loop3): Remounting filesystem read-only [ 478.440090][T12916] EXT4-fs warning (device loop3): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 478.488719][T12916] EXT4-fs (loop3): 1 orphan inode deleted [ 478.496762][T12916] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 478.505763][ T4922] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 478.533440][ T4922] EXT4-fs (loop3): Remounting filesystem read-only [ 478.540069][ T4922] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 478.555881][ T4922] EXT4-fs error (device loop3): ext4_release_dquot:6850: comm kworker/u4:18: Failed to release dquot type 0 [ 478.580947][ T4922] EXT4-fs (loop3): Remounting filesystem read-only [ 478.588267][T12916] EXT4-fs (loop3): unmounting filesystem. [ 478.596906][T12916] EXT4-fs error (device loop3): __ext4_get_inode_loc:4507: comm syz.3.3173: Invalid inode table block 1 in block_group 0 [ 478.610637][T12916] EXT4-fs (loop3): Remounting filesystem read-only [ 478.619493][T12916] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 478.629298][T12916] EXT4-fs (loop3): Remounting filesystem read-only [ 478.639024][T12916] EXT4-fs error (device loop3): ext4_quota_off:7120: inode #3: comm syz.3.3173: mark_inode_dirty error [ 478.650348][T12916] EXT4-fs (loop3): Remounting filesystem read-only [ 479.286398][T11898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.294150][T11898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.302967][T11898] device veth1_macvtap left promiscuous mode [ 479.309077][T11898] device veth0_macvtap left promiscuous mode [ 479.315566][T11898] device veth1_vlan left promiscuous mode [ 479.321333][T11898] device veth0_vlan left promiscuous mode [ 479.376189][T11898] bond23 (unregistering): (slave veth11): Releasing backup interface [ 479.513093][T11898] bond23 (unregistering): Released all slaves [ 479.642917][T11898] bond21 (unregistering): (slave bond22): Releasing backup interface [ 479.652066][T11898] bond22 (unregistering): Released all slaves [ 479.661346][T11898] bond21 (unregistering): Released all slaves [ 479.670126][T11898] bond20 (unregistering): Released all slaves [ 479.678813][T11898] bond19 (unregistering): Released all slaves [ 479.703165][T11898] bond18 (unregistering): (slave veth9): Releasing backup interface [ 479.715173][T11898] bond18 (unregistering): Released all slaves [ 479.739891][T11898] bond17 (unregistering): (slave veth7): Releasing backup interface [ 479.750685][T11898] bond17 (unregistering): Released all slaves [ 479.880375][T11898] bond16 (unregistering): Released all slaves [ 480.006979][T11898] bond15 (unregistering): Released all slaves [ 480.128295][T11898] bond14 (unregistering): Released all slaves [ 480.252035][T11898] bond13 (unregistering): Released all slaves [ 480.260735][T11898] bond12 (unregistering): Released all slaves [ 480.270054][T11898] bond11 (unregistering): Released all slaves [ 480.391348][T11898] bond9 (unregistering): (slave bond10): Releasing backup interface [ 480.400310][T11898] bond10 (unregistering): Released all slaves [ 480.409062][T11898] bond9 (unregistering): Released all slaves [ 480.432587][T11898] bond8 (unregistering): (slave veth3): Releasing backup interface [ 480.446387][T11898] bond8 (unregistering): Released all slaves [ 480.455066][T11898] bond7 (unregistering): Released all slaves [ 480.463982][T11898] bond6 (unregistering): Released all slaves [ 480.472504][T11898] bond5 (unregistering): Released all slaves [ 480.481566][T11898] bond4 (unregistering): Released all slaves [ 480.610656][T11898] bond3 (unregistering): Released all slaves [ 480.737726][T11898] bond2 (unregistering): Released all slaves [ 480.855863][T11898] bond1 (unregistering): Released all slaves [ 480.874979][T11898] team0 (unregistering): Port device geneve0 removed [ 480.928783][T11898] team0 (unregistering): Port device team_slave_1 removed [ 480.956778][T11898] team0 (unregistering): Port device team_slave_0 removed [ 480.967372][T11898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.996527][T11898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.298682][T11898] bond0 (unregistering): Released all slaves [ 483.347929][T11898] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.395665][T11898] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.445767][T11898] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.514805][T11898] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.598413][T11898] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.635060][T11898] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.705469][T11898] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.754723][T11898] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.818904][T11898] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.866418][T11898] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.906977][T11898] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.966070][T11898] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.022668][T11898] tipc: Left network mode [ 484.956592][T11898] device hsr_slave_0 left promiscuous mode [ 484.962779][T11898] device hsr_slave_1 left promiscuous mode [ 484.969153][T11898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.976814][T11898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.984488][T11898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.991894][T11898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.999500][T11898] device bridge_slave_1 left promiscuous mode [ 485.006980][T11898] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.015081][T11898] device bridge_slave_0 left promiscuous mode [ 485.021225][T11898] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.031251][T11898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.038779][T11898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.046347][T11898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.053822][T11898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.061291][T11898] device bridge_slave_1 left promiscuous mode [ 485.067837][T11898] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.075669][T11898] device bridge_slave_0 left promiscuous mode [ 485.081816][T11898] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.089958][T11898] device bridge_slave_1 left promiscuous mode [ 485.096311][T11898] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.103968][T11898] device bridge_slave_0 left promiscuous mode [ 485.110104][T11898] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.119559][T11898] device hsr_slave_0 left promiscuous mode [ 485.125956][T11898] device hsr_slave_1 left promiscuous mode [ 485.132148][T11898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.139697][T11898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.147254][T11898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.155999][T11898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.163632][T11898] device bridge_slave_1 left promiscuous mode [ 485.169770][T11898] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.177991][T11898] device bridge_slave_0 left promiscuous mode [ 485.184427][T11898] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.195620][T11898] device veth1_macvtap left promiscuous mode [ 485.201632][T11898] device veth0_macvtap left promiscuous mode [ 485.207711][T11898] device veth1_vlan left promiscuous mode [ 485.213494][T11898] device veth0_vlan left promiscuous mode [ 485.219764][T11898] device veth1_macvtap left promiscuous mode [ 485.225909][T11898] device veth0_macvtap left promiscuous mode [ 485.231939][T11898] device veth1_vlan left promiscuous mode [ 485.237709][T11898] device veth0_vlan left promiscuous mode [ 485.244222][T11898] device veth1_macvtap left promiscuous mode [ 485.250221][T11898] device veth0_macvtap left promiscuous mode [ 485.256363][T11898] device veth1_vlan left promiscuous mode [ 485.262117][T11898] device veth0_vlan left promiscuous mode [ 485.399771][T11898] team0 (unregistering): Port device geneve0 removed [ 485.492956][T11898] team0 (unregistering): Port device team_slave_1 removed [ 485.518573][T11898] team0 (unregistering): Port device team_slave_0 removed [ 485.542982][T11898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.571983][T11898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.614120][T11898] bond0 (unregistering): Released all slaves [ 485.679525][T11898] bond1 (unregistering): (slave veth3): Releasing backup interface [ 485.795022][T11898] bond1 (unregistering): Released all slaves [ 485.812811][T11898] team0 (unregistering): Port device geneve0 removed [ 485.895665][T11898] team0 (unregistering): Port device team_slave_1 removed [ 485.920395][T11898] team0 (unregistering): Port device team_slave_0 removed [ 485.944835][T11898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.971030][T11898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.012874][T11898] bond0 (unregistering): Released all slaves [ 486.102265][T11898] bond0 (unregistering): Released all slaves [ 486.246942][T11898] bond2 (unregistering): (slave bond3): Releasing backup interface [ 486.255845][T11898] bond3 (unregistering): Released all slaves [ 486.265540][T11898] bond2 (unregistering): Released all slaves [ 486.288023][T11898] bond1 (unregistering): (slave veth3): Releasing backup interface [ 486.299835][T11898] bond1 (unregistering): Released all slaves [ 486.375602][T11898] team0 (unregistering): Port device team_slave_1 removed [ 486.400384][T11898] team0 (unregistering): Port device team_slave_0 removed [ 486.410345][T11898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.422144][T11898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.466478][T11898] bond0 (unregistering): Released all slaves