last executing test programs: 4.05948177s ago: executing program 1 (id=544): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000480)={0x1d, r2}, 0x10) close(r1) 3.790313085s ago: executing program 1 (id=545): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000900)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x240}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x6, 0x8, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.519458611s ago: executing program 1 (id=547): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0x77da, &(0x7f0000000240)={0x0, 0xdb5e, 0x40, 0x0, 0x12f}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x11}], 0x1) 3.262381106s ago: executing program 1 (id=549): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 2.907245783s ago: executing program 1 (id=553): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2.652403628s ago: executing program 1 (id=556): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) epoll_create1(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) 2.195280347s ago: executing program 0 (id=560): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$inet(0xa, 0x801, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) write$tun(r0, &(0x7f0000000440)={@val={0xa}, @void, @eth={@local, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x100, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x100, 0x0, @opaque="bba0d059b70f6019a2306552f56ece257a2edc856f78a7de9029c46734f76ddfcebab6fade148b10af2e20cd9715c211550bdebffde45028c28c220bbc5b038e59ca700eb83864f65554e371d506ec141644ca679d56d6e9752f93081954594aee67ae5552303f379cc9490e5aab3a42119f330ed085dd0dd47c992a2a050e02b8cda4f242fbc298b4a7b1b342764d6359cd77f8a8e7e2a5862ac75c3436b35649e3077ee157bed61753e026a88a8da58785d80c55942a128887d561f8b3272b5af3ab238682cfd118aa5a8fca13b32e684d2f67571e988b00f9801442ef16ef35cfaf31d97ae58516837896611825a41481035d9b24f5a6"}}}}}}}, 0x13a) 1.671476847s ago: executing program 0 (id=565): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000900)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x240}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x7, 0x8, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.574526589s ago: executing program 3 (id=566): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) close_range(r2, 0xffffffffffffffff, 0x0) 1.50360763s ago: executing program 0 (id=567): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)='\v', 0x1, 0x20008081, 0x0, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 1.319523494s ago: executing program 3 (id=569): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x10024) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000a40)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000004800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f00000024c0)="0e", 0x1}], 0x1, &(0x7f0000004740)=ANY=[@ANYBLOB="ac"], 0xa8}}], 0x2, 0x4004480) 1.306841824s ago: executing program 2 (id=570): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x10) 1.215764067s ago: executing program 0 (id=571): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 1.151393327s ago: executing program 3 (id=572): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0900000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.069265559s ago: executing program 2 (id=573): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) 1.03954987s ago: executing program 3 (id=574): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) getcwd(&(0x7f0000000280)=""/222, 0xde) 804.276764ms ago: executing program 2 (id=575): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000900)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x240}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x7, 0x8, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 804.009624ms ago: executing program 0 (id=576): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file0\x00', 0x100c085, &(0x7f0000001640)=ANY=[], 0x10, 0x7f4, &(0x7f0000000e40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 735.459956ms ago: executing program 3 (id=577): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pread64(r3, &(0x7f0000000080)=""/196, 0xc4, 0x3) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lstat(&(0x7f0000000440)='./file0\x00', 0x0) 569.998409ms ago: executing program 2 (id=578): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') lseek(r2, 0x2000, 0x0) 338.326374ms ago: executing program 0 (id=579): syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x5, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000240)={0x3ff, 0x100, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x75}, 0x0, 0x0) 263.440295ms ago: executing program 2 (id=580): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x18) getpgid(0xffffffffffffffff) 169.270577ms ago: executing program 2 (id=581): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000005800)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_io_uring_setup(0xbc3, &(0x7f0000000480)={0x0, 0x1060, 0x80, 0x0, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x47f8, 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x18) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030d0000002cbd7040fcdbdf2503000900800010001cdc0dca1d9f68846960e56de42944af030006000000000002004e2200000000000000000000000002000100000000000000070c0000008003000500000000000200"], 0x68}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001a0069ae26bd7000000000001c0088b9"], 0x1c}}, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x8a883, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000000080)={r10, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0x0, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_SET_BLOCK_SIZE(r9, 0x4c09, 0x6) 0s ago: executing program 3 (id=582): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x9}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r2}}, 0x48) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x2000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.162' (ED25519) to the list of known hosts. [ 79.710235][ T5776] cgroup: Unknown subsys name 'net' [ 79.861106][ T5776] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.536972][ T5776] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.749421][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.758354][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.772872][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.781110][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.793212][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.800648][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.872047][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.895850][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.922745][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.931218][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.953061][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.963733][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.976685][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.030083][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.041238][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.050011][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.057249][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.061299][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.065381][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.073153][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.081086][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.086455][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.093953][ T5800] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.107006][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.601237][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 84.644082][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 84.767653][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 84.779795][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.787123][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.795796][ T5787] bridge_slave_0: entered allmulticast mode [ 84.803117][ T5787] bridge_slave_0: entered promiscuous mode [ 84.811442][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 84.822361][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.829810][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.837715][ T5787] bridge_slave_1: entered allmulticast mode [ 84.844917][ T5787] bridge_slave_1: entered promiscuous mode [ 84.963188][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.002932][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.079412][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.087089][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.094823][ T5794] bridge_slave_0: entered allmulticast mode [ 85.101850][ T5794] bridge_slave_0: entered promiscuous mode [ 85.111484][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.118737][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.126043][ T5794] bridge_slave_1: entered allmulticast mode [ 85.133491][ T5794] bridge_slave_1: entered promiscuous mode [ 85.154495][ T5787] team0: Port device team_slave_0 added [ 85.160722][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.167935][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.175416][ T5792] bridge_slave_0: entered allmulticast mode [ 85.182661][ T5792] bridge_slave_0: entered promiscuous mode [ 85.218575][ T5787] team0: Port device team_slave_1 added [ 85.225394][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.233056][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.240248][ T5792] bridge_slave_1: entered allmulticast mode [ 85.247917][ T5792] bridge_slave_1: entered promiscuous mode [ 85.266777][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.273982][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.281144][ T5797] bridge_slave_0: entered allmulticast mode [ 85.288428][ T5797] bridge_slave_0: entered promiscuous mode [ 85.359907][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.367866][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.394712][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.406546][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.414222][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.421432][ T5797] bridge_slave_1: entered allmulticast mode [ 85.428598][ T5797] bridge_slave_1: entered promiscuous mode [ 85.449272][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.460979][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.479302][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.486356][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.512499][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.538483][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.550098][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.561390][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.603981][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.658179][ T5794] team0: Port device team_slave_0 added [ 85.667758][ T5794] team0: Port device team_slave_1 added [ 85.676749][ T5792] team0: Port device team_slave_0 added [ 85.687146][ T5792] team0: Port device team_slave_1 added [ 85.754352][ T5797] team0: Port device team_slave_0 added [ 85.800003][ T5797] team0: Port device team_slave_1 added [ 85.818814][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.826225][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.852275][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.864350][ T50] Bluetooth: hci0: command tx timeout [ 85.870793][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.877901][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.903850][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.921493][ T5787] hsr_slave_0: entered promiscuous mode [ 85.931301][ T5787] hsr_slave_1: entered promiscuous mode [ 85.939375][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.947445][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.973878][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.003926][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.010910][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.032748][ T50] Bluetooth: hci1: command tx timeout [ 86.041938][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.070033][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.077076][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.103138][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.114209][ T50] Bluetooth: hci2: command tx timeout [ 86.128096][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.135302][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.161283][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.182921][ T50] Bluetooth: hci3: command tx timeout [ 86.277808][ T5792] hsr_slave_0: entered promiscuous mode [ 86.284572][ T5792] hsr_slave_1: entered promiscuous mode [ 86.291122][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.298994][ T5792] Cannot create hsr debugfs directory [ 86.321714][ T5794] hsr_slave_0: entered promiscuous mode [ 86.329959][ T5794] hsr_slave_1: entered promiscuous mode [ 86.337527][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.345592][ T5794] Cannot create hsr debugfs directory [ 86.410423][ T5797] hsr_slave_0: entered promiscuous mode [ 86.416986][ T5797] hsr_slave_1: entered promiscuous mode [ 86.425006][ T5797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.432707][ T5797] Cannot create hsr debugfs directory [ 86.778622][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.790693][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.802195][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.837337][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.905635][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.927026][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.938365][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.967687][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.015477][ T5792] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.028923][ T5792] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.038982][ T5792] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.049932][ T5792] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.184405][ T5797] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.195832][ T5797] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.210183][ T5797] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.234123][ T5797] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.298226][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.363637][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.398888][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.409336][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.429295][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.448975][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.456548][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.485608][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.492864][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.505017][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.512152][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.529021][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.536182][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.586519][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.602518][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.609677][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.634974][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.677729][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.684937][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.764084][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.801250][ T987] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.808476][ T987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.866147][ T987] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.873558][ T987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.945160][ T50] Bluetooth: hci0: command tx timeout [ 88.102854][ T50] Bluetooth: hci1: command tx timeout [ 88.185019][ T50] Bluetooth: hci2: command tx timeout [ 88.247497][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.262963][ T50] Bluetooth: hci3: command tx timeout [ 88.334508][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.387719][ T5792] veth0_vlan: entered promiscuous mode [ 88.448436][ T5792] veth1_vlan: entered promiscuous mode [ 88.466371][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.505915][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.518512][ T5787] veth0_vlan: entered promiscuous mode [ 88.576139][ T5787] veth1_vlan: entered promiscuous mode [ 88.584278][ T5794] veth0_vlan: entered promiscuous mode [ 88.600269][ T5792] veth0_macvtap: entered promiscuous mode [ 88.612369][ T5792] veth1_macvtap: entered promiscuous mode [ 88.627060][ T5794] veth1_vlan: entered promiscuous mode [ 88.702409][ T5797] veth0_vlan: entered promiscuous mode [ 88.718113][ T5797] veth1_vlan: entered promiscuous mode [ 88.736560][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.747316][ T5787] veth0_macvtap: entered promiscuous mode [ 88.761202][ T5787] veth1_macvtap: entered promiscuous mode [ 88.777305][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.786766][ T5794] veth0_macvtap: entered promiscuous mode [ 88.801361][ T5794] veth1_macvtap: entered promiscuous mode [ 88.821003][ T5792] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.830379][ T5792] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.840419][ T5792] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.849448][ T5792] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.881397][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.893035][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.906401][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.929683][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.940613][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.952654][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.970591][ T5794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.979615][ T5794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.989034][ T5794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.998750][ T5794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.013091][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.023945][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.034479][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.045694][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.058175][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.082405][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.095742][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.106370][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.116983][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.128361][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.144484][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.153595][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.162305][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.171226][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.194697][ T5797] veth0_macvtap: entered promiscuous mode [ 89.233489][ T5797] veth1_macvtap: entered promiscuous mode [ 89.330287][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.339642][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.357632][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.360001][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.376189][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.377865][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.395629][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.406263][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.416501][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.429465][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.440912][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.468143][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.479104][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.489222][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.499990][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.510309][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.521046][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.535149][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.547653][ T5797] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.557194][ T5797] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.567471][ T5797] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.576480][ T5797] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.617539][ T3479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.649970][ T3479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.717199][ T3490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.732446][ T987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.750387][ T987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.761624][ T3490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.843182][ T3490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.851079][ T3490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.960966][ T987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.994245][ T987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.023389][ T50] Bluetooth: hci0: command tx timeout [ 90.137338][ T1328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.173665][ T1328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.183363][ T50] Bluetooth: hci1: command tx timeout [ 90.264352][ T50] Bluetooth: hci2: command tx timeout [ 90.300695][ T5881] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.343269][ T50] Bluetooth: hci3: command tx timeout [ 90.611366][ T5890] wg2: entered promiscuous mode [ 90.626970][ T5890] wg2: entered allmulticast mode [ 90.880187][ T5898] wg2: left promiscuous mode [ 90.892951][ T5898] wg2: left allmulticast mode [ 90.951044][ T5900] syzkaller0: entered promiscuous mode [ 90.960002][ T5900] syzkaller0: entered allmulticast mode [ 91.056532][ T5898] pim6reg1: entered promiscuous mode [ 91.061896][ T5898] pim6reg1: entered allmulticast mode [ 91.095938][ T5898] wg2: entered promiscuous mode [ 91.101751][ T5898] wg2: entered allmulticast mode [ 91.849593][ T5925] pim6reg1: entered promiscuous mode [ 91.858820][ T5925] pim6reg1: entered allmulticast mode [ 92.037033][ T23] cfg80211: failed to load regulatory.db [ 92.104257][ T50] Bluetooth: hci0: command tx timeout [ 92.205409][ T5934] pim6reg1: entered promiscuous mode [ 92.210772][ T5934] pim6reg1: entered allmulticast mode [ 92.263154][ T50] Bluetooth: hci1: command tx timeout [ 92.342846][ T50] Bluetooth: hci2: command tx timeout [ 92.423322][ T50] Bluetooth: hci3: command tx timeout [ 92.691580][ T5938] wg2: entered promiscuous mode [ 92.701389][ T5938] wg2: entered allmulticast mode [ 92.823779][ T5940] wg2: entered promiscuous mode [ 92.829049][ T5940] wg2: entered allmulticast mode [ 92.865854][ T5943] pim6reg1: entered promiscuous mode [ 92.881462][ T5943] pim6reg1: entered allmulticast mode [ 93.390309][ T5960] pim6reg1: entered promiscuous mode [ 93.416508][ T5960] pim6reg1: entered allmulticast mode [ 93.441804][ T5962] Driver unsupported XDP return value 0 on prog (id 38) dev N/A, expect packet loss! [ 93.572569][ T5964] pim6reg1: entered promiscuous mode [ 93.578072][ T5964] pim6reg1: entered allmulticast mode [ 94.592108][ T6000] wg2: left promiscuous mode [ 94.598403][ T6000] wg2: left allmulticast mode [ 94.770118][ T6000] pim6reg1: entered promiscuous mode [ 94.782774][ T6000] pim6reg1: entered allmulticast mode [ 94.818947][ T6000] wg2: entered promiscuous mode [ 94.835386][ T6000] wg2: entered allmulticast mode [ 95.583148][ T6018] pim6reg1: entered promiscuous mode [ 95.588773][ T6018] pim6reg1: entered allmulticast mode [ 96.446616][ T6043] pim6reg1: entered promiscuous mode [ 96.451996][ T6043] pim6reg1: entered allmulticast mode [ 96.746699][ T6053] wg2: entered promiscuous mode [ 96.762872][ T6053] wg2: entered allmulticast mode [ 96.780380][ T6046] pim6reg1: entered promiscuous mode [ 96.785908][ T6046] pim6reg1: entered allmulticast mode [ 97.860028][ T6081] wg2: left promiscuous mode [ 97.873838][ T6081] wg2: left allmulticast mode [ 97.924705][ T6081] wg2: entered promiscuous mode [ 97.941801][ T6081] wg2: entered allmulticast mode [ 100.527639][ T6147] pim6reg1: entered promiscuous mode [ 100.552670][ T6147] pim6reg1: entered allmulticast mode [ 100.682903][ T6148] pim6reg1: entered promiscuous mode [ 100.710742][ T6148] pim6reg1: entered allmulticast mode [ 104.383048][ T6250] fuse: Bad value for 'fd' [ 104.846501][ T6254] wg2: left promiscuous mode [ 104.852787][ T6254] wg2: left allmulticast mode [ 104.905167][ T6259] wg2: entered promiscuous mode [ 104.912332][ T6259] wg2: entered allmulticast mode [ 105.294213][ T6273] fuse: Bad value for 'fd' [ 107.531970][ T6319] veth0_vlan: entered allmulticast mode [ 110.313267][ T6404] pim6reg1: entered promiscuous mode [ 110.318637][ T6404] pim6reg1: entered allmulticast mode [ 110.475634][ T6413] pim6reg1: entered promiscuous mode [ 110.496534][ T6413] pim6reg1: entered allmulticast mode [ 111.011460][ T6431] pim6reg1: entered promiscuous mode [ 111.025466][ T6431] pim6reg1: entered allmulticast mode [ 111.216564][ T6434] fuse: Bad value for 'fd' [ 111.979607][ T6460] fuse: Bad value for 'fd' [ 112.778039][ T6486] fuse: Bad value for 'fd' [ 113.410155][ T6506] wg2: left promiscuous mode [ 113.416732][ T6506] wg2: left allmulticast mode [ 113.450926][ T6510] wg2: entered promiscuous mode [ 113.466398][ T6510] wg2: entered allmulticast mode [ 113.485953][ T6509] pim6reg1: entered promiscuous mode [ 113.491326][ T6509] pim6reg1: entered allmulticast mode [ 113.694876][ T6517] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.703950][ T6517] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.748201][ T6517] bridge0: entered allmulticast mode [ 113.834939][ T6520] bridge_slave_1: left allmulticast mode [ 113.842248][ T6520] bridge_slave_1: left promiscuous mode [ 113.890445][ T6520] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.954556][ T6520] bridge_slave_0: left allmulticast mode [ 113.970280][ T6520] bridge_slave_0: left promiscuous mode [ 113.986534][ T6520] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.391364][ T6534] pim6reg1: entered promiscuous mode [ 114.409114][ T6534] pim6reg1: entered allmulticast mode [ 114.833768][ T6553] pim6reg1: entered promiscuous mode [ 114.839141][ T6553] pim6reg1: entered allmulticast mode [ 115.006310][ T6559] pim6reg1: entered promiscuous mode [ 115.014647][ T6559] pim6reg1: entered allmulticast mode [ 115.217103][ T6568] wg2: left promiscuous mode [ 115.252553][ T6568] wg2: left allmulticast mode [ 115.360615][ T6568] wg2: entered promiscuous mode [ 115.388310][ T6568] wg2: entered allmulticast mode [ 116.138613][ T6601] syz.0.299[6601]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 116.170785][ T6601] loop0: detected capacity change from 0 to 128 [ 116.578463][ T6611] wg2: left promiscuous mode [ 116.600646][ T6611] wg2: left allmulticast mode [ 116.683295][ T6611] wg2: entered promiscuous mode [ 116.694725][ T6611] wg2: entered allmulticast mode [ 116.703530][ T6616] random: crng reseeded on system resumption [ 117.275937][ T6625] random: crng reseeded on system resumption [ 117.463513][ T28] audit: type=1326 audit(1757300690.842:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603b8ebe9 code=0x7ffc0000 [ 117.533452][ T28] audit: type=1326 audit(1757300690.842:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603b8ebe9 code=0x7ffc0000 [ 117.576311][ T28] audit: type=1326 audit(1757300690.842:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2603b8ebe9 code=0x7ffc0000 [ 117.621368][ T28] audit: type=1326 audit(1757300690.842:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603b8ebe9 code=0x7ffc0000 [ 117.683842][ T28] audit: type=1326 audit(1757300690.852:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2603b8ebe9 code=0x7ffc0000 [ 117.743679][ T28] audit: type=1326 audit(1757300690.852:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603b8ebe9 code=0x7ffc0000 [ 117.828613][ T28] audit: type=1326 audit(1757300690.852:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603b8ebe9 code=0x7ffc0000 [ 117.902648][ T28] audit: type=1326 audit(1757300690.852:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2603b8ebe9 code=0x7ffc0000 [ 117.944843][ T28] audit: type=1326 audit(1757300690.852:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603b8ebe9 code=0x7ffc0000 [ 117.992573][ T28] audit: type=1326 audit(1757300690.852:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2603b8ebe9 code=0x7ffc0000 [ 118.359034][ T786] kernel write not supported for file /sg0 (pid: 786 comm: kworker/0:2) [ 119.129070][ T6677] loop1: detected capacity change from 0 to 512 [ 119.287651][ T6677] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.326: casefold flag without casefold feature [ 119.291615][ T6683] loop2: detected capacity change from 0 to 512 [ 119.344388][ T6683] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 119.393076][ T6677] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.326: couldn't read orphan inode 15 (err -117) [ 119.443981][ T6683] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.328: Failed to acquire dquot type 1 [ 119.480235][ T6677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.553259][ T6683] EXT4-fs (loop2): 1 truncate cleaned up [ 119.561790][ T6683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.674644][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.326'. [ 119.696444][ T6677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.715991][ T6677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.741505][ T6677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.755444][ T6677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.778878][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.013985][ T6699] loop3: detected capacity change from 0 to 1024 [ 120.021277][ T6699] ======================================================= [ 120.021277][ T6699] WARNING: The mand mount option has been deprecated and [ 120.021277][ T6699] and is ignored by this kernel. Remove the mand [ 120.021277][ T6699] option from the mount to silence this warning. [ 120.021277][ T6699] ======================================================= [ 120.164997][ T6699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.194462][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.388978][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.717403][ T6718] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.741142][ T6720] loop1: detected capacity change from 0 to 1024 [ 120.811432][ T6720] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.884939][ T6723] loop0: detected capacity change from 0 to 512 [ 120.925796][ T6718] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.959348][ T6723] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 121.019606][ T6723] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.071644][ T6723] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.344: invalid indirect mapped block 4294967295 (level 0) [ 121.096107][ T6723] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.344: invalid indirect mapped block 4294967295 (level 1) [ 121.123978][ T6723] EXT4-fs (loop0): 1 orphan inode deleted [ 121.129773][ T6723] EXT4-fs (loop0): 1 truncate cleaned up [ 121.143126][ T6723] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.187442][ T6718] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.284401][ T5797] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.366951][ T6718] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.433077][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.630886][ T6734] loop0: detected capacity change from 0 to 164 [ 121.632027][ T6718] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.657971][ T6734] rock: directory entry would overflow storage [ 121.678176][ T6734] rock: sig=0x66, size=4, remaining=3 [ 121.715711][ T6718] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.749516][ T6718] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.780527][ T6718] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.221538][ T6757] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 122.253646][ T6757] ip6erspan0: entered promiscuous mode [ 122.537730][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 122.537745][ T28] audit: type=1326 audit(1757300695.922:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.3.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99118ebe9 code=0x7ffc0000 [ 122.626280][ T28] audit: type=1326 audit(1757300695.962:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.3.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd99118ebe9 code=0x7ffc0000 [ 122.698462][ T28] audit: type=1326 audit(1757300695.962:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.3.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99118ebe9 code=0x7ffc0000 [ 122.746631][ T28] audit: type=1326 audit(1757300695.962:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.3.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99118ebe9 code=0x7ffc0000 [ 122.818248][ T28] audit: type=1326 audit(1757300695.972:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.3.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd99118ebe9 code=0x7ffc0000 [ 122.900649][ T28] audit: type=1326 audit(1757300695.972:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.3.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99118ebe9 code=0x7ffc0000 [ 122.954045][ T28] audit: type=1326 audit(1757300695.972:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.3.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99118ebe9 code=0x7ffc0000 [ 123.014687][ T28] audit: type=1326 audit(1757300695.972:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.3.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd99118ebe9 code=0x7ffc0000 [ 123.066271][ T28] audit: type=1326 audit(1757300695.972:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.3.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99118ebe9 code=0x7ffc0000 [ 123.102383][ T28] audit: type=1326 audit(1757300695.972:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.3.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99118ebe9 code=0x7ffc0000 [ 123.290172][ T6785] loop3: detected capacity change from 0 to 128 [ 123.405549][ T6785] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 123.432785][ T6785] FAT-fs (loop3): Filesystem has been set read-only [ 123.445653][ T6785] syz.3.367: attempt to access beyond end of device [ 123.445653][ T6785] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 123.463703][ T6785] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 123.474917][ T6785] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 123.490271][ T6784] syz.3.367: attempt to access beyond end of device [ 123.490271][ T6784] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 123.508272][ T6785] syz.3.367: attempt to access beyond end of device [ 123.508272][ T6785] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 123.525030][ T6785] syz.3.367: attempt to access beyond end of device [ 123.525030][ T6785] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 123.542046][ T6784] syz.3.367: attempt to access beyond end of device [ 123.542046][ T6784] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 123.558238][ T6785] syz.3.367: attempt to access beyond end of device [ 123.558238][ T6785] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 123.573213][ T6790] syz.3.367: attempt to access beyond end of device [ 123.573213][ T6790] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 123.638142][ T6785] syz.3.367: attempt to access beyond end of device [ 123.638142][ T6785] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 123.658358][ T6790] syz.3.367: attempt to access beyond end of device [ 123.658358][ T6790] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 123.673242][ T6785] syz.3.367: attempt to access beyond end of device [ 123.673242][ T6785] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 123.976345][ T6800] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.009696][ T6800] Zero length message leads to an empty skb [ 124.440332][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 124.464882][ T6817] IPVS: Error joining to the multicast group [ 124.796091][ T6832] loop3: detected capacity change from 0 to 512 [ 124.814511][ T6832] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.849217][ T6832] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 124.897472][ T6832] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 124.906153][ T6832] System zones: 1-12 [ 124.925232][ T6832] EXT4-fs (loop3): 1 truncate cleaned up [ 124.979151][ T6832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.198038][ T6845] loop1: detected capacity change from 0 to 128 [ 125.202163][ T6847] netlink: 104 bytes leftover after parsing attributes in process `syz.2.393'. [ 125.234408][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.748964][ T6863] loop0: detected capacity change from 0 to 128 [ 125.874132][ T6868] netlink: 48 bytes leftover after parsing attributes in process `syz.2.402'. [ 125.904965][ T6868] netlink: 80 bytes leftover after parsing attributes in process `syz.2.402'. [ 126.889593][ T6888] loop3: detected capacity change from 0 to 2048 [ 126.925953][ T6888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.006280][ T6895] loop2: detected capacity change from 0 to 512 [ 127.055979][ T6895] EXT4-fs (loop2): orphan cleanup on readonly fs [ 127.062728][ T6895] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 127.077769][ T6895] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 127.095913][ T6895] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.411: attempt to clear invalid blocks 2 len 1 [ 127.124883][ T6895] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.411: invalid indirect mapped block 1819239214 (level 0) [ 127.146279][ T6895] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.411: invalid indirect mapped block 1819239214 (level 1) [ 127.163597][ T6895] EXT4-fs (loop2): 1 truncate cleaned up [ 127.170686][ T6895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 127.308792][ T6900] loop0: detected capacity change from 0 to 512 [ 127.327216][ T6900] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.414: casefold flag without casefold feature [ 127.342051][ T6900] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.414: couldn't read orphan inode 15 (err -117) [ 127.356286][ T6900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.363305][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.502733][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.414'. [ 127.532250][ T6900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.574937][ T6900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.594311][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.639109][ T6900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.648953][ T6900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.994526][ T6918] capability: warning: `syz.1.422' uses deprecated v2 capabilities in a way that may be insecure [ 128.054266][ T28] kauditd_printk_skb: 119 callbacks suppressed [ 128.054280][ T28] audit: type=1326 audit(1757300701.442:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6917 comm="syz.1.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18bbf8ebe9 code=0x7ffc0000 [ 128.111477][ T28] audit: type=1326 audit(1757300701.472:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6917 comm="syz.1.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18bbf8ebe9 code=0x7ffc0000 [ 128.138213][ T5797] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.171385][ T28] audit: type=1326 audit(1757300701.482:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6917 comm="syz.1.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18bbf8ebe9 code=0x7ffc0000 [ 128.232634][ T28] audit: type=1326 audit(1757300701.482:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6917 comm="syz.1.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18bbf8ebe9 code=0x7ffc0000 [ 128.332613][ T28] audit: type=1326 audit(1757300701.482:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6917 comm="syz.1.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18bbf8ebe9 code=0x7ffc0000 [ 128.402853][ T28] audit: type=1326 audit(1757300701.482:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6917 comm="syz.1.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18bbf8ebe9 code=0x7ffc0000 [ 128.483329][ T28] audit: type=1326 audit(1757300701.482:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6917 comm="syz.1.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18bbf8ebe9 code=0x7ffc0000 [ 128.557895][ T28] audit: type=1326 audit(1757300701.482:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6917 comm="syz.1.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18bbf8ebe9 code=0x7ffc0000 [ 128.632591][ T28] audit: type=1326 audit(1757300701.502:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6917 comm="syz.1.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f18bbf8ebe9 code=0x7ffc0000 [ 128.708922][ T28] audit: type=1326 audit(1757300701.502:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6917 comm="syz.1.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18bbf8ebe9 code=0x7ffc0000 [ 129.455744][ T6952] loop1: detected capacity change from 0 to 128 [ 129.479768][ T6950] loop2: detected capacity change from 0 to 512 [ 129.510931][ T6952] bio_check_eod: 3388 callbacks suppressed [ 129.510947][ T6952] syz.1.436: attempt to access beyond end of device [ 129.510947][ T6952] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 129.589301][ T6950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.623126][ T6950] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.852980][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.975508][ T6964] macvlan1: entered promiscuous mode [ 130.005950][ T6964] ipvlan0: entered promiscuous mode [ 130.020728][ T6964] ipvlan0: left promiscuous mode [ 130.031911][ T6964] macvlan1: left promiscuous mode [ 130.137098][ T6968] netlink: 'syz.3.442': attribute type 10 has an invalid length. [ 130.166359][ T6971] sd 0:0:1:0: device reset [ 130.205731][ T6968] team0: Port device dummy0 added [ 130.222645][ T6969] netlink: 'syz.3.442': attribute type 10 has an invalid length. [ 130.337082][ T6969] team0: Port device dummy0 removed [ 130.352311][ T6969] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 130.379272][ T6968] syz.3.442 (6968) used greatest stack depth: 19080 bytes left [ 130.590026][ T6984] loop3: detected capacity change from 0 to 512 [ 130.845808][ T6990] random: crng reseeded on system resumption [ 130.904079][ T6988] syzkaller1: entered promiscuous mode [ 130.909672][ T6988] syzkaller1: entered allmulticast mode [ 131.264257][ T7001] fuse: Bad value for 'fd' [ 131.718536][ T7011] tipc: Started in network mode [ 131.739890][ T7011] tipc: Node identity 36875ac3ff4d, cluster identity 4711 [ 131.755253][ T7011] tipc: Enabled bearer , priority 0 [ 131.778577][ T7011] tipc: Disabling bearer [ 132.398226][ T7029] fuse: Bad value for 'group_id' [ 133.063387][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.070174][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.311319][ T7037] netlink: 80 bytes leftover after parsing attributes in process `syz.3.470'. [ 133.336314][ T7034] veth1_to_bond: entered allmulticast mode [ 133.392403][ T7034] bond_slave_1: entered promiscuous mode [ 133.399684][ T7034] bond_slave_1: left promiscuous mode [ 133.429155][ T7034] veth1_to_bond: left allmulticast mode [ 133.491065][ T7045] syz.3.473[7045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.491223][ T7045] syz.3.473[7045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.547852][ T7045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.473'. [ 133.608816][ T7045] netlink: 28 bytes leftover after parsing attributes in process `syz.3.473'. [ 133.628389][ T7045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.473'. [ 133.649532][ T7045] netlink: 28 bytes leftover after parsing attributes in process `syz.3.473'. [ 133.672609][ T7045] netlink: 'syz.3.473': attribute type 6 has an invalid length. [ 133.749252][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 133.749266][ T28] audit: type=1326 audit(1757300707.132:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.2.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603b8ebe9 code=0x7ffc0000 [ 133.800976][ T28] audit: type=1326 audit(1757300707.162:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.2.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603b8ebe9 code=0x7ffc0000 [ 133.834063][ T28] audit: type=1326 audit(1757300707.222:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.2.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2603b8ebe9 code=0x7ffc0000 [ 133.871718][ T28] audit: type=1326 audit(1757300707.222:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.2.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603b8ebe9 code=0x7ffc0000 [ 133.883181][ T7053] netlink: 5 bytes leftover after parsing attributes in process `syz.2.476'. [ 133.916745][ T28] audit: type=1326 audit(1757300707.222:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.2.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603b8ebe9 code=0x7ffc0000 [ 133.932660][ T7053] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 133.961926][ T28] audit: type=1326 audit(1757300707.242:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.2.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2603b8ebe9 code=0x7ffc0000 [ 133.987763][ T28] audit: type=1326 audit(1757300707.242:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.2.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603b8ebe9 code=0x7ffc0000 [ 133.990820][ T7053] 0ªî{X¹¦: entered allmulticast mode [ 134.010344][ T28] audit: type=1326 audit(1757300707.242:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.2.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603b8ebe9 code=0x7ffc0000 [ 134.045399][ T28] audit: type=1326 audit(1757300707.252:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.2.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2603b8ebe9 code=0x7ffc0000 [ 134.049344][ T7053] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 134.068192][ T28] audit: type=1326 audit(1757300707.252:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.2.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603b8ebe9 code=0x7ffc0000 [ 134.126758][ T7061] capability: warning: `syz.1.479' uses 32-bit capabilities (legacy support in use) [ 134.427537][ T7064] mmap: syz.3.478 (7064) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 134.436305][ T7068] loop0: detected capacity change from 0 to 1024 [ 134.488837][ T7068] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 134.507024][ T7068] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 134.527063][ T7068] JBD2: no valid journal superblock found [ 134.552838][ T7068] EXT4-fs (loop0): Could not load journal inode [ 134.976877][ T7076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.486'. [ 135.088531][ T7076] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.165091][ T7078] macvlan2: entered promiscuous mode [ 135.183092][ T7082] syz.2.486[7082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.183230][ T7082] syz.2.486[7082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.223668][ T7078] macvlan2: entered allmulticast mode [ 135.275914][ T7078] bond1: entered promiscuous mode [ 135.294595][ T7078] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 135.356686][ T7078] bond1: left promiscuous mode [ 135.670139][ T7076] syz.2.486 (7076) used greatest stack depth: 17960 bytes left [ 135.807588][ T7098] netlink: 180 bytes leftover after parsing attributes in process `syz.1.494'. [ 136.346180][ T7091] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 136.354380][ T7091] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 136.404287][ T7091] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 136.416178][ T7091] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 136.434016][ T7091] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 136.449522][ T7091] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 136.464999][ T7091] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 136.472060][ T7091] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 136.512268][ T7091] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 136.527843][ T7091] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 136.536707][ T7091] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 136.570801][ T7091] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 136.839775][ T7118] loop3: detected capacity change from 0 to 1024 [ 136.860435][ T7118] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.890013][ T7118] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 136.957669][ T7118] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 136.984315][ T7118] System zones: 0-1, 3-36 [ 137.040987][ T7118] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.219449][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.315169][ T7129] loop1: detected capacity change from 0 to 512 [ 137.383239][ T7129] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.408676][ T7129] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.596099][ T7140] syz.3.510[7140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.596231][ T7140] syz.3.510[7140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.622706][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 137.686176][ T12] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 137.729531][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1029 with error 28 [ 137.742662][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 137.742662][ T12] [ 137.756203][ T12] EXT4-fs (loop1): Total free blocks count 0 [ 137.762238][ T12] EXT4-fs (loop1): Free/Dirty block details [ 137.768284][ T12] EXT4-fs (loop1): free_blocks=65280 [ 137.773706][ T12] EXT4-fs (loop1): dirty_blocks=1029 [ 137.779019][ T12] EXT4-fs (loop1): Block reservation details [ 137.785141][ T12] EXT4-fs (loop1): i_reserved_data_blocks=1029 [ 137.916652][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.995395][ T7146] syz.3.514[7146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.995534][ T7146] syz.3.514[7146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.027132][ T7146] loop3: detected capacity change from 0 to 164 [ 138.299994][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.516'. [ 138.433063][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 138.502835][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.582848][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 138.828897][ T28] kauditd_printk_skb: 108 callbacks suppressed [ 138.828911][ T28] audit: type=1326 audit(1757300712.212:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99118ebe9 code=0x7ffc0000 [ 138.866537][ T7168] loop3: detected capacity change from 0 to 128 [ 138.909073][ T28] audit: type=1326 audit(1757300712.242:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd99118ebe9 code=0x7ffc0000 [ 138.989281][ T28] audit: type=1326 audit(1757300712.242:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99118ebe9 code=0x7ffc0000 [ 139.045185][ T7171] geneve2: entered promiscuous mode [ 139.054932][ T7171] geneve2: entered allmulticast mode [ 139.059457][ T28] audit: type=1326 audit(1757300712.242:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd99118ebe9 code=0x7ffc0000 [ 139.102583][ T28] audit: type=1326 audit(1757300712.242:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99118ebe9 code=0x7ffc0000 [ 139.127367][ T28] audit: type=1326 audit(1757300712.252:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd99118ebe9 code=0x7ffc0000 [ 139.150239][ T28] audit: type=1326 audit(1757300712.252:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd99118ec23 code=0x7ffc0000 [ 139.176078][ T28] audit: type=1326 audit(1757300712.252:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd99118d69f code=0x7ffc0000 [ 139.213088][ T28] audit: type=1326 audit(1757300712.252:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd99118ec77 code=0x7ffc0000 [ 139.299115][ T28] audit: type=1326 audit(1757300712.252:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd99118d550 code=0x7ffc0000 [ 139.703792][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.505674][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 140.582791][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 140.662812][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 141.265037][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.541'. [ 141.321126][ T7214] loop3: detected capacity change from 0 to 512 [ 141.477405][ T7214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.639265][ T7210] $Hÿ: renamed from bond0 (while UP) [ 141.707079][ T7210] $Hÿ: entered promiscuous mode [ 141.712267][ T7210] bond_slave_0: entered promiscuous mode [ 141.743984][ T7210] bond_slave_1: entered promiscuous mode [ 141.749890][ T7210] dummy0: entered promiscuous mode [ 141.782668][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 141.935293][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.323730][ T7230] loop3: detected capacity change from 0 to 512 [ 142.401563][ T7230] EXT4-fs (loop3): too many log groups per flexible block group [ 142.436261][ T7230] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 142.445320][ T7230] EXT4-fs (loop3): mount failed [ 142.467299][ T7096] Set syz1 is full, maxelem 65536 reached [ 142.585570][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 142.671656][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 142.742542][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 142.859564][ T7243] loop2: detected capacity change from 0 to 512 [ 142.867646][ T7243] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 142.889885][ T7243] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.554: invalid indirect mapped block 4294967295 (level 0) [ 142.917980][ T7243] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.554: invalid indirect mapped block 4294967295 (level 1) [ 142.965435][ T7243] EXT4-fs (loop2): 1 orphan inode deleted [ 142.971227][ T7243] EXT4-fs (loop2): 1 truncate cleaned up [ 143.057462][ T7243] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.333964][ T7253] process 'syz.3.557' launched './file1' with NULL argv: empty string added [ 143.366099][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.621512][ T7261] syz.0.560 uses obsolete (PF_INET,SOCK_PACKET) [ 144.656770][ T7285] loop0: detected capacity change from 0 to 512 [ 144.688807][ T7285] journal_path: Lookup failure for './bus' [ 144.708952][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 144.708965][ T28] audit: type=1326 audit(1757300718.092:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7289 comm="syz.3.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99118ebe9 code=0x7ffc0000 [ 144.709119][ T7285] EXT4-fs: error: could not find journal device path [ 144.715156][ T28] audit: type=1326 audit(1757300718.092:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7289 comm="syz.3.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99118ebe9 code=0x7ffc0000 [ 144.789549][ T28] audit: type=1326 audit(1757300718.172:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7289 comm="syz.3.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd99118ebe9 code=0x7ffc0000 [ 144.843076][ T28] audit: type=1326 audit(1757300718.172:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7289 comm="syz.3.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99118ebe9 code=0x7ffc0000 [ 144.902586][ T28] audit: type=1326 audit(1757300718.172:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7289 comm="syz.3.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99118ebe9 code=0x7ffc0000 [ 145.007248][ T28] audit: type=1326 audit(1757300718.202:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7289 comm="syz.3.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd99118ebe9 code=0x7ffc0000 [ 145.050122][ T7293] loop0: detected capacity change from 0 to 764 [ 145.072547][ T28] audit: type=1326 audit(1757300718.202:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7289 comm="syz.3.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99118ebe9 code=0x7ffc0000 [ 145.118384][ T28] audit: type=1326 audit(1757300718.202:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7289 comm="syz.3.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd99118ebe9 code=0x7ffc0000 [ 145.142225][ T7293] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 145.182162][ T7293] Symlink component flag not implemented [ 145.192098][ T7293] Symlink component flag not implemented (7) [ 145.204114][ T28] audit: type=1326 audit(1757300718.202:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7289 comm="syz.3.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99118ebe9 code=0x7ffc0000 [ 145.302704][ T28] audit: type=1326 audit(1757300718.202:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7289 comm="syz.3.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99118ebe9 code=0x7ffc0000 [ 145.758652][ T7309] loop7: detected capacity change from 0 to 7 [ 145.814156][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 145.825477][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.834981][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 145.845187][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.854442][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 145.864100][ T7309] [ 145.866459][ T7309] ================================================ [ 145.872967][ T7309] WARNING: lock held when returning to user space! [ 145.879498][ T7309] syzkaller #0 Not tainted [ 145.883943][ T7309] ------------------------------------------------ [ 145.890464][ T7309] syz.2.581/7309 is leaving the kernel with locks still held! [ 145.897950][ T7309] 1 lock held by syz.2.581/7309: [ 145.902915][ T7309] #0: ffff88802129fb60 (&lo->lo_mutex){+.+.}-{3:3}, at: loop_set_block_size+0x7c/0x480