last executing test programs: 36.184111058s ago: executing program 2 (id=163): r0 = socket$inet6(0xa, 0x802, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) 35.987997007s ago: executing program 2 (id=165): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 35.355009334s ago: executing program 2 (id=168): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xbd228beef318bda7, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x10000000000}, 0x18) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) 34.97005392s ago: executing program 2 (id=171): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x80000, 0x0) 34.714707192s ago: executing program 2 (id=174): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000000)) 34.220825563s ago: executing program 2 (id=177): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000600000806000000002cf"], &(0x7f0000000f80)=""/4090, 0x7a, 0xffa, 0x9}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) gettid() r1 = add_key$user(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$search(0xa, r1, &(0x7f00000003c0)='user\x00', 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2f", 0xf) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000940)={0x0, 0x0, 0x0, 'queue0\x00'}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r0, 0x58, &(0x7f00000004c0)}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r4, 0x0, 0x4004) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4113, 0x1011}], 0x1, 0xf0, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="17000000274d00000100010005000000000801", @ANYRES32=r4, @ANYBLOB], 0x50) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x4, 0x8, 0x6}) fcntl$lock(r4, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r4, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x2f, 0x401}) getitimer(0x1, &(0x7f00000006c0)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0xdfa}, 0xceba74f0cacfb05) 33.649397447s ago: executing program 32 (id=177): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000600000806000000002cf"], &(0x7f0000000f80)=""/4090, 0x7a, 0xffa, 0x9}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) gettid() r1 = add_key$user(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$search(0xa, r1, &(0x7f00000003c0)='user\x00', 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2f", 0xf) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000940)={0x0, 0x0, 0x0, 'queue0\x00'}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r0, 0x58, &(0x7f00000004c0)}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r4, 0x0, 0x4004) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4113, 0x1011}], 0x1, 0xf0, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="17000000274d00000100010005000000000801", @ANYRES32=r4, @ANYBLOB], 0x50) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x4, 0x8, 0x6}) fcntl$lock(r4, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r4, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x2f, 0x401}) getitimer(0x1, &(0x7f00000006c0)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0xdfa}, 0xceba74f0cacfb05) 6.540655859s ago: executing program 3 (id=337): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000110001002bbd7000fbdbdf2500000000", @ANYRES32=r4], 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) 5.711790365s ago: executing program 3 (id=343): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x1000) 5.555982172s ago: executing program 3 (id=345): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) 5.331980691s ago: executing program 3 (id=347): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) 5.176902398s ago: executing program 0 (id=349): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@remote, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0xffffffffffffffca, 0xfffc, 0x0, 0x7, 0x6, 0x0, @remote, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1, 0x8002, 0x0, 0xfffc}}}}}}, 0x0) 5.107919211s ago: executing program 3 (id=350): accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14, 0x80800) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="06000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000800)=""/18, 0x12, 0x40000000, &(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2, 0x0, 0x3}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x0) add_key(0x0, &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='n', 0x1, 0xfffffffffffffffe) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={r0, 0x15, 0xab}, &(0x7f0000000100)={'enc=', 'raw', ' hash=', {'rmd160-generic\x00'}}, &(0x7f0000000080)="31b480050add6beeab85af1a9ba8c56508c993796f", &(0x7f0000000180)=""/171) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) socket(0x10, 0x3, 0x0) ptrace$cont(0x20, r6, 0x0, 0x0) ptrace(0x11, r6) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000000)={0x0, 'geneve0\x00', {0x2}}) 3.609536215s ago: executing program 1 (id=361): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 3.175966633s ago: executing program 1 (id=364): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x3, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xffffffffffffff05}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.080107598s ago: executing program 4 (id=365): r0 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x24, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200080001400100000031007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) 3.0223928s ago: executing program 4 (id=366): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b40000000201010400000000000000000200ffff0c00198008000100020800009400018006"], 0xb4}}, 0x20044804) 2.907984575s ago: executing program 4 (id=367): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000000), 0x6, 0x507, &(0x7f0000000680)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@sr0, 0x0, &(0x7f00000000c0)='./file0\x00') 2.58402033s ago: executing program 4 (id=368): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ptrace(0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x4}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000039000900000000000000000001000000040000000c0001800600000005470000080002"], 0x38}}, 0x0) 2.009962224s ago: executing program 0 (id=369): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0x5}, 0x18) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) 1.995699285s ago: executing program 3 (id=370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x88a4) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r1, 0x5, 0x4) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE(r2, 0x0, 0x0) readv(r2, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 1.86804552s ago: executing program 1 (id=371): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/22, 0x16}}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) open(0x0, 0x145142, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) 1.798219773s ago: executing program 4 (id=372): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x1, 0xe, 0x2}, 0x14) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x170}, 0x1, 0x0, 0x0, 0x1}, 0x40010) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "68c4502393926b50", "09f700", "1ab6c0e5"}, 0x28) 1.790682563s ago: executing program 0 (id=373): r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 1.526982154s ago: executing program 1 (id=374): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) 1.260271466s ago: executing program 1 (id=375): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000080)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$eJzs3d9rW9cdAPDvla0sP5zZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYX/AYIy10Kc+9aXQP6BQ8ieUQqB9L21pKW3SPhTaRkVXUuI4UuwQWUqtzweOdO7Rvfqeo4uO7rn3cBVA3zoVEacj4kG1Wj0bEcON8kwjxWY91da7f+/WTC0lUa1e/SyJSOpltdXGtrznkcZmByPir3+K+EfyZNzy+sbidLFYWG0s5ytLK/ny+sa5haXp+cJ8YXlycuLi1KWpC1PjHWnnUERc/sNH///Pa3+8/Navbrx/7ZOxfyaN8ohH7ei0etOz6WfRNBgRq3sRrEcG0xYCAPB90DzO/3lEnI3hGEiP5gAAAID9pPrbofgmiagCAAAA+1YmnQObZHKNeQBDkcnkcvU5vD+Ow5liqVz55VxpbXm2Pld2JLKZuYViYbwxV3gksklteSLNP1o+v215MiKORcT/hg+ly7mZUnG21yc/AAAAoE8c2Tb+/3K4Pv7f4uueVQ4AAADonJFeVwAAAADYc8b/AAAAsP8Z/wMAAMC+9ucrV2qp2vz/69nr62uLpevnZgvlxdzS2kxuprS6kpsvlebTe/Yt7fR+xVJp5dexvHYzXymUK/ny+sa1pdLacuXawmN/gQ0AAAB00bGf3XkviYjN3xxKU82BXlcK6IrBZ1n5w72rB9B9A72uANAzz/T7D+wr2V5XAOi5ZIfX207eebvzdQEAAPbG6E9aX/8f2PHcwGamS1UE9ojzf9C/XP+H/uX6P/SvbAyEgTz0t51uAfr81/+r1WeqEAAA0HFDaUoyuYj0PMBQZDK5XMTRdEyQTeYWioXxiPhhRLw7nP1BbXki3TLZcc4wAAAAAAAAAAAAAAAAAAAAAAAAAFBXrSZRBQAAAPa1iMzHSXo3/4jR4TND288PHEi+Gk6fI+LGK1dfujldqaxO1Mo/f1heeblRfr4XZzAAAACA7Zrj9OY4HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA66f69WzPN1M24n/4+IkZaxR+Mg+nzwchGxOEvkhjcsl0SEQMdiL95OyKOt4qf1KoVI41atIp/qMfxj3QgPvSzO7X+53etvn+ZOJU+t/7+XUx7qOfXvv/LPOz/BlrEr5Ud3WWME3ffyLeNfzvixGDr/qcZP2nT/5zeZfy//21jo91r1VcjRlv+/iSPxcpXllby5fWNcwtL0/OF+cLy5OTExalLUxemxvNzC8VC47FljP/+9M0HT2v/4TbxR3Zo/5ldtv/buzfv/aiezT7cPHkUf+x06/1/vE38TGP//6KRr70+2sxv1vNbnXz9nZNPa/9sm/bvtP/Hdtn+s3/59we7XBUA6ILy+sbidLFYWO3rzHN9GrXDoheiFS9mpva5vgDVaJn51x68c+3IvNft6kSmp90SAACwB54cAwMAAAAAAAAAAAAAAAAAAADd1o3biWW3xdxMHztx93wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM75LgAA///6fNJN") openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x78f, &(0x7f00000007c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x3, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 711.976979ms ago: executing program 0 (id=376): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x58, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1015, &(0x7f0000000f40)=ANY=[], 0x0) 427.938552ms ago: executing program 0 (id=377): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x129242, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000100)) 285.780978ms ago: executing program 0 (id=378): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000057ab62c73a8731c19c01990007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000380)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000fbdbdf253800000008000300", @ANYRES32=r4, @ANYBLOB="0c0058000e000000008000000c0058115d000000008000000c00580054000000000000bef5cc000c00580079000000000000000c0058003d00000000"], 0x58}, 0x1, 0x0, 0x0, 0x400c0}, 0xc841) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000240)) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = gettid() r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f00000007c0)) readv(r6, &(0x7f00000002c0)=[{&(0x7f00000005c0)=""/59, 0x3b}, {&(0x7f0000000600)=""/85, 0x55}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0003"], 0xfdef) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRESOCT=r3, @ANYRES8=r4], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='sched_switch\x00', r8}, 0x18) tkill(r5, 0x8) 78.741636ms ago: executing program 1 (id=379): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f00000000c0)=0x18) 0s ago: executing program 4 (id=380): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20085e, &(0x7f00000107c0)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa32}}, {@acl}]}, 0x1, 0x53a, &(0x7f0000010280)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000010800)='+}[@\x00') socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) write$cgroup_int(r3, 0x0, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r1, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.98' (ED25519) to the list of known hosts. syzkaller login: [ 76.937348][ T5774] cgroup: Unknown subsys name 'net' [ 77.109735][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.864645][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.147208][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.156082][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.170887][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.191912][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.210914][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.218491][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.257500][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.265768][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.274100][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.312149][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.320008][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.327909][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.367071][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.384052][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.411707][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.432029][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.442661][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.461653][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.473267][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.487378][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.498252][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.499773][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.513733][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.521660][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.782562][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 81.915154][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 81.979187][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.986572][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.994523][ T5783] bridge_slave_0: entered allmulticast mode [ 82.005132][ T5783] bridge_slave_0: entered promiscuous mode [ 82.114081][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.123932][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.131655][ T5783] bridge_slave_1: entered allmulticast mode [ 82.139142][ T5783] bridge_slave_1: entered promiscuous mode [ 82.229181][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.246015][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.395160][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 82.415577][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.423082][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.430323][ T5787] bridge_slave_0: entered allmulticast mode [ 82.438046][ T5787] bridge_slave_0: entered promiscuous mode [ 82.446893][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.454225][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.461603][ T5787] bridge_slave_1: entered allmulticast mode [ 82.469053][ T5787] bridge_slave_1: entered promiscuous mode [ 82.480059][ T5783] team0: Port device team_slave_0 added [ 82.487125][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 82.548888][ T5783] team0: Port device team_slave_1 added [ 82.602173][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.629601][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.636701][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.663550][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.695147][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.705042][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.712739][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.739027][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.853259][ T5787] team0: Port device team_slave_0 added [ 82.887729][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.895359][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.902959][ T5791] bridge_slave_0: entered allmulticast mode [ 82.909948][ T5791] bridge_slave_0: entered promiscuous mode [ 82.919946][ T5787] team0: Port device team_slave_1 added [ 82.942432][ T5783] hsr_slave_0: entered promiscuous mode [ 82.950726][ T5783] hsr_slave_1: entered promiscuous mode [ 82.968947][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.976295][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.984510][ T5791] bridge_slave_1: entered allmulticast mode [ 82.991971][ T5791] bridge_slave_1: entered promiscuous mode [ 83.011934][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.018922][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.045212][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.057133][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.064545][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.072001][ T5794] bridge_slave_0: entered allmulticast mode [ 83.078991][ T5794] bridge_slave_0: entered promiscuous mode [ 83.087478][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.094832][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.102257][ T5794] bridge_slave_1: entered allmulticast mode [ 83.109403][ T5794] bridge_slave_1: entered promiscuous mode [ 83.141343][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.148356][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.174573][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.220527][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.261579][ T5789] Bluetooth: hci0: command tx timeout [ 83.281758][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.307270][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.321200][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.353769][ T5787] hsr_slave_0: entered promiscuous mode [ 83.360305][ T5787] hsr_slave_1: entered promiscuous mode [ 83.366959][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.375595][ T5787] Cannot create hsr debugfs directory [ 83.421332][ T5789] Bluetooth: hci1: command tx timeout [ 83.454074][ T5794] team0: Port device team_slave_0 added [ 83.468250][ T5794] team0: Port device team_slave_1 added [ 83.477302][ T5791] team0: Port device team_slave_0 added [ 83.487389][ T5791] team0: Port device team_slave_1 added [ 83.571488][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.578518][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.605271][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.609743][ T5789] Bluetooth: hci2: command tx timeout [ 83.619175][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.622423][ T5101] Bluetooth: hci3: command tx timeout [ 83.629528][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.661122][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.678572][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.685763][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.711851][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.734220][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.741521][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.768240][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.924455][ T5794] hsr_slave_0: entered promiscuous mode [ 83.934603][ T5794] hsr_slave_1: entered promiscuous mode [ 83.940921][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.948526][ T5794] Cannot create hsr debugfs directory [ 83.994352][ T5791] hsr_slave_0: entered promiscuous mode [ 84.001453][ T5791] hsr_slave_1: entered promiscuous mode [ 84.007719][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.015568][ T5791] Cannot create hsr debugfs directory [ 84.171502][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.186428][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.196753][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.245197][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.375786][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.394654][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.406796][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.417926][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.510918][ T5791] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.527208][ T5791] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.538405][ T5791] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.561497][ T5791] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.679842][ T5794] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.707768][ T5794] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.726499][ T5794] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.737448][ T5794] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.783323][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.853308][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.863050][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.892941][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.904570][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.912002][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.959220][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.982384][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.009431][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.016696][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.036690][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.043922][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.057136][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.064384][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.073644][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.080845][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.103392][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.110596][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.238019][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.341255][ T5101] Bluetooth: hci0: command tx timeout [ 85.358215][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.386871][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.394106][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.425091][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.432352][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.501239][ T5101] Bluetooth: hci1: command tx timeout [ 85.621914][ T5794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.661538][ T5101] Bluetooth: hci2: command tx timeout [ 85.742396][ T5101] Bluetooth: hci3: command tx timeout [ 85.771585][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.857041][ T5787] veth0_vlan: entered promiscuous mode [ 85.907508][ T5787] veth1_vlan: entered promiscuous mode [ 85.943806][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.998485][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.016719][ T5787] veth0_macvtap: entered promiscuous mode [ 86.053815][ T5787] veth1_macvtap: entered promiscuous mode [ 86.085783][ T5783] veth0_vlan: entered promiscuous mode [ 86.121967][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.145851][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.166133][ T5783] veth1_vlan: entered promiscuous mode [ 86.197988][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.207546][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.216807][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.226480][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.260012][ T5791] veth0_vlan: entered promiscuous mode [ 86.290033][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.325328][ T5791] veth1_vlan: entered promiscuous mode [ 86.397999][ T5783] veth0_macvtap: entered promiscuous mode [ 86.434792][ T5783] veth1_macvtap: entered promiscuous mode [ 86.443071][ T3473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.455327][ T3473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.529885][ T3473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.540035][ T5794] veth0_vlan: entered promiscuous mode [ 86.546040][ T3473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.550703][ T5791] veth0_macvtap: entered promiscuous mode [ 86.566319][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.578657][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.590171][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.605577][ T5791] veth1_macvtap: entered promiscuous mode [ 86.638078][ T5794] veth1_vlan: entered promiscuous mode [ 86.649977][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.660817][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.673998][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.729002][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.738842][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.748706][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.758110][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.840215][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.853853][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.867046][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.878261][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.891674][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.892027][ T5873] loop9: detected capacity change from 0 to 7 [ 86.913055][ T5794] veth0_macvtap: entered promiscuous mode [ 86.918021][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 86.928187][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 86.936955][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 86.946212][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 86.968504][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 86.977836][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 86.985948][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 86.995188][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 87.008932][ T5794] veth1_macvtap: entered promiscuous mode [ 87.012021][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.021315][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.023860][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 87.041074][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.052704][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.061949][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 87.076002][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.078524][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.092259][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.095782][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 87.117042][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.123815][ T5790] ldm_validate_partition_table(): Disk read failed. [ 87.135220][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.144455][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 87.153241][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.162442][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 87.170613][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.179875][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 87.197696][ T5790] Dev loop9: unable to read RDB block 0 [ 87.201440][ T5791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.207403][ T5790] loop9: unable to read partition table [ 87.214371][ T5791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.222679][ T5790] loop9: partition table beyond EOD, truncated [ 87.231166][ T5791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.243835][ T5791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.251242][ T5873] ldm_validate_partition_table(): Disk read failed. [ 87.266961][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.271182][ T5873] Dev loop9: unable to read RDB block 0 [ 87.279970][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.290548][ T5873] loop9: unable to read partition table [ 87.300007][ T5873] loop9: partition table beyond EOD, truncated [ 87.302942][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.317918][ T5873] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 87.317918][ T5873] ) failed (rc=-5) [ 87.327347][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.347827][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.359262][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.379349][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.422332][ T5101] Bluetooth: hci0: command tx timeout [ 87.464210][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.475123][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.486450][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.497383][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.507695][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.522072][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.534788][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.548410][ T5794] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.558006][ T5794] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.567509][ T5794] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.576785][ T5794] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.586414][ T5101] Bluetooth: hci1: command tx timeout [ 87.602257][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.610126][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.741338][ T5101] Bluetooth: hci2: command tx timeout [ 87.821476][ T5101] Bluetooth: hci3: command tx timeout [ 87.842200][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.856432][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.019231][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.037862][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.135925][ T3473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.158954][ T3473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.214331][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.241207][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.326005][ T5890] lo speed is unknown, defaulting to 1000 [ 88.335755][ T3473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.365336][ T5890] lo speed is unknown, defaulting to 1000 [ 88.372651][ T5892] syz_tun: entered allmulticast mode [ 88.377628][ T3473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.402220][ T5892] syz_tun: left allmulticast mode [ 88.427143][ T5890] lo speed is unknown, defaulting to 1000 [ 88.459512][ T5890] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 88.550532][ T5890] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 89.500288][ T5890] lo speed is unknown, defaulting to 1000 [ 89.501751][ T5101] Bluetooth: hci0: command tx timeout [ 89.516380][ T5890] lo speed is unknown, defaulting to 1000 [ 89.541451][ T5890] lo speed is unknown, defaulting to 1000 [ 89.555938][ T5890] lo speed is unknown, defaulting to 1000 [ 89.565243][ T5898] siw: device registration error -23 [ 89.669823][ T5101] Bluetooth: hci1: command tx timeout [ 89.821991][ T5101] Bluetooth: hci2: command tx timeout [ 89.902002][ T5101] Bluetooth: hci3: command tx timeout [ 89.982905][ T5919] netlink: 'syz.1.15': attribute type 1 has an invalid length. [ 90.520309][ T5932] netlink: 44 bytes leftover after parsing attributes in process `syz.0.19'. [ 90.557131][ T5934] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18'. [ 90.664384][ T5934] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18'. [ 90.888138][ T5934] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18'. [ 91.483421][ T5960] siw: device registration error -23 [ 92.289917][ T5953] loop9: detected capacity change from 0 to 7 [ 92.306256][ T788] cfg80211: failed to load regulatory.db [ 92.335120][ C1] blk_print_req_error: 23 callbacks suppressed [ 92.335139][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 92.350675][ C1] buffer_io_error: 23 callbacks suppressed [ 92.350690][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.364900][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 92.374173][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.388105][ T5964] siw: device registration error -23 [ 92.401412][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 92.410795][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.419178][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 92.428454][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.438050][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 92.447291][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.457955][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 92.467230][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.477255][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 92.486531][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.511146][ T5953] ldm_validate_partition_table(): Disk read failed. [ 92.527094][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 92.536458][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.545667][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 92.554929][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.566600][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 92.575968][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.587053][ T5953] Dev loop9: unable to read RDB block 0 [ 92.625355][ T5953] loop9: unable to read partition table [ 92.669056][ T5971] netlink: 32 bytes leftover after parsing attributes in process `syz.2.32'. [ 92.682135][ T5953] loop9: partition table beyond EOD, truncated [ 92.698855][ T5971] netlink: 'syz.2.32': attribute type 13 has an invalid length. [ 92.716665][ T5953] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 92.716665][ T5953] ) failed (rc=-5) [ 92.760546][ T5974] syz.2.32[5974]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 92.820346][ T5974] loop2: detected capacity change from 0 to 512 [ 92.859428][ T5974] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 92.985916][ T28] audit: type=1326 audit(1764579814.568:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356ed8f749 code=0x7ffc0000 [ 93.007879][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.081559][ T28] audit: type=1326 audit(1764579814.568:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356ed8f749 code=0x7ffc0000 [ 93.114578][ T5983] IPVS: set_ctl: invalid protocol: 24832 108.97.110.49:0 [ 93.166332][ T28] audit: type=1326 audit(1764579814.578:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f356ed8f749 code=0x7ffc0000 [ 93.188351][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.249795][ T5971] gretap0: refused to change device tx_queue_len [ 93.279897][ T5971] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 93.296040][ T28] audit: type=1326 audit(1764579814.578:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356ed8f749 code=0x7ffc0000 [ 93.345943][ T789] lo speed is unknown, defaulting to 1000 [ 93.348286][ T28] audit: type=1326 audit(1764579814.578:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356ed8f749 code=0x7ffc0000 [ 93.389714][ T28] audit: type=1326 audit(1764579814.628:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f356ed8f749 code=0x7ffc0000 [ 93.412361][ T28] audit: type=1326 audit(1764579814.628:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356ed8f749 code=0x7ffc0000 [ 93.443852][ T28] audit: type=1326 audit(1764579814.628:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356ed8f749 code=0x7ffc0000 [ 93.466541][ T28] audit: type=1326 audit(1764579814.638:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f356ed8f749 code=0x7ffc0000 [ 93.488246][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.495066][ T28] audit: type=1326 audit(1764579814.638:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356ed8f749 code=0x7ffc0000 [ 93.669433][ T5995] loop3: detected capacity change from 0 to 512 [ 93.710556][ T5995] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 93.786339][ T5995] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.40: couldn't read orphan inode 26 (err -116) [ 93.807348][ T5995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.820387][ T5995] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.943164][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.331594][ T6011] netlink: 256 bytes leftover after parsing attributes in process `syz.0.45'. [ 94.342677][ T6007] netlink: 24 bytes leftover after parsing attributes in process `syz.3.44'. [ 94.351641][ T6011] unsupported nlmsg_type 40 [ 94.376044][ T6011] syz_tun: entered allmulticast mode [ 94.386924][ T6007] loop3: detected capacity change from 0 to 128 [ 94.404799][ T6007] ======================================================= [ 94.404799][ T6007] WARNING: The mand mount option has been deprecated and [ 94.404799][ T6007] and is ignored by this kernel. Remove the mand [ 94.404799][ T6007] option from the mount to silence this warning. [ 94.404799][ T6007] ======================================================= [ 94.451652][ T6011] dvmrp8: entered allmulticast mode [ 94.478117][ T6010] syz_tun: left allmulticast mode [ 94.557037][ T6007] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.570597][ T6007] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.616729][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.730375][ T5791] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.785477][ T6021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.48'. [ 94.854766][ T6021] : entered promiscuous mode [ 94.909814][ T6017] lo speed is unknown, defaulting to 1000 [ 95.488638][ T6038] netlink: 16 bytes leftover after parsing attributes in process `syz.2.51'. [ 95.699156][ T6040] syz.0.55[6040] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.700016][ T6040] syz.0.55[6040] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.347805][ T6055] netlink: 68 bytes leftover after parsing attributes in process `syz.1.62'. [ 96.407049][ T6052] bond1: entered allmulticast mode [ 96.413083][ T6052] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.098709][ T6072] macvtap0: refused to change device tx_queue_len [ 97.381470][ T6074] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.389048][ T6074] IPv6: NLM_F_CREATE should be set when creating new route [ 97.711892][ T6085] 9pnet_fd: Insufficient options for proto=fd [ 98.609764][ T6110] loop1: detected capacity change from 0 to 512 [ 98.627642][ T6113] netlink: 24 bytes leftover after parsing attributes in process `syz.3.84'. [ 98.746931][ T6110] __quota_error: 61 callbacks suppressed [ 98.746948][ T6110] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 98.782042][ T6110] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 98.871186][ T6110] EXT4-fs (loop1): mount failed [ 99.369324][ T6138] lo speed is unknown, defaulting to 1000 [ 99.507335][ T6144] bridge0: entered promiscuous mode [ 99.510195][ T6144] bridge0: port 3(macsec1) entered blocking state [ 99.510385][ T6144] bridge0: port 3(macsec1) entered disabled state [ 99.510524][ T6144] macsec1: entered allmulticast mode [ 99.510540][ T6144] bridge0: entered allmulticast mode [ 99.518481][ T6144] macsec1: left allmulticast mode [ 99.518502][ T6144] bridge0: left allmulticast mode [ 99.530274][ T6144] bridge0: left promiscuous mode [ 99.742902][ T6142] lo speed is unknown, defaulting to 1000 [ 100.391287][ T6167] loop1: detected capacity change from 0 to 2048 [ 100.421675][ T6167] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.147746][ T6168] lo speed is unknown, defaulting to 1000 [ 101.204337][ T6167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.361448][ T6167] EXT4-fs error (device loop1): ext4_check_all_de:666: inode #12: block 5: comm syz.1.97: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=7952, size=124 fake=0 [ 101.372505][ T6178] syz.0.99[6178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.400587][ T6178] syz.0.99[6178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.500219][ T6167] EXT4-fs (loop1): Remounting filesystem read-only [ 101.535927][ T6182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.100'. [ 101.630510][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.082574][ T6195] syz.0.104[6195] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.082728][ T6195] syz.0.104[6195] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.825576][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 103.854213][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.885904][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.941222][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.964632][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.982807][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.010713][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.045875][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4 [ 104.059482][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.098724][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.107912][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.123240][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 104.133851][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.144583][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.154905][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.194788][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.226593][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.250172][ T6230] syz.1.115[6230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.250311][ T6230] syz.1.115[6230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.261802][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.303538][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.331057][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.360275][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.381105][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.409984][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.426299][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.443245][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.466630][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.482273][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.500471][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.528256][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.559062][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.579867][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.598245][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.638679][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.658921][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.690881][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.698358][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.740717][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.763510][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.796749][ T6238] sch_fq: defrate 0 ignored. [ 104.818220][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.838108][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.848209][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.893419][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz0 [ 105.106462][ T6251] netlink: 'syz.0.121': attribute type 1 has an invalid length. [ 105.119674][ T6247] loop3: detected capacity change from 0 to 1024 [ 105.160498][ T6244] fido_id[6244]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 105.246279][ T6251] bond2: entered promiscuous mode [ 105.254100][ T6251] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.254535][ T6247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.282592][ T6258] netlink: 75 bytes leftover after parsing attributes in process `syz.1.122'. [ 105.338201][ T6257] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 105.423170][ T28] audit: type=1326 audit(1764579827.018:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356ed8f749 code=0x7ffc0000 [ 105.459705][ T6257] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 105.483847][ T28] audit: type=1326 audit(1764579827.018:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f356ed8f749 code=0x7ffc0000 [ 105.527107][ T6257] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 105.560789][ T28] audit: type=1326 audit(1764579827.018:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356ed8f749 code=0x7ffc0000 [ 105.596651][ T28] audit: type=1326 audit(1764579827.028:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f356ed8f749 code=0x7ffc0000 [ 105.651630][ T28] audit: type=1326 audit(1764579827.028:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356ed8f749 code=0x7ffc0000 [ 105.687872][ T28] audit: type=1326 audit(1764579827.028:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f356ed8f749 code=0x7ffc0000 [ 105.693346][ T6247] bridge1: entered promiscuous mode [ 105.735635][ T6247] bridge1: entered allmulticast mode [ 105.758346][ T28] audit: type=1326 audit(1764579827.028:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356ed8f749 code=0x7ffc0000 [ 105.805289][ T6247] team0: Port device bridge1 added [ 105.820022][ T6263] bridge0: port 3(team0) entered blocking state [ 105.836505][ T28] audit: type=1326 audit(1764579827.038:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f356ed8f749 code=0x7ffc0000 [ 105.861697][ T6263] bridge0: port 3(team0) entered disabled state [ 105.870060][ T6263] team0: entered allmulticast mode [ 105.882400][ T6263] team_slave_0: entered allmulticast mode [ 105.892024][ T28] audit: type=1326 audit(1764579827.418:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356ed8f749 code=0x7ffc0000 [ 105.929813][ T6263] team_slave_1: entered allmulticast mode [ 105.954474][ T6263] team0: entered promiscuous mode [ 105.959610][ T28] audit: type=1326 audit(1764579827.418:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356ed8f749 code=0x7ffc0000 [ 105.965642][ T6263] team_slave_0: entered promiscuous mode [ 106.018840][ T6263] team_slave_1: entered promiscuous mode [ 106.034170][ T6263] bridge0: port 3(team0) entered blocking state [ 106.040929][ T6263] bridge0: port 3(team0) entered forwarding state [ 106.115060][ T6265] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 106.135833][ T6265] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 106.159068][ T6265] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 106.238928][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.522525][ T6287] xt_hashlimit: max too large, truncated to 1048576 [ 106.797822][ T6299] netlink: 40 bytes leftover after parsing attributes in process `syz.0.137'. [ 106.816434][ T6295] loop3: detected capacity change from 0 to 512 [ 106.849342][ T6295] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 106.924940][ T6295] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.988519][ T6303] syz.0.138 uses obsolete (PF_INET,SOCK_PACKET) [ 107.088003][ T6295] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4031: comm syz.3.133: Allocating blocks 41-42 which overlap fs metadata [ 107.194691][ T6295] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4031: comm syz.3.133: Allocating blocks 41-42 which overlap fs metadata [ 107.283523][ T6295] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.133: Failed to acquire dquot type 1 [ 107.349173][ T6295] EXT4-fs error (device loop3): mb_free_blocks:1938: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 107.406478][ T6295] EXT4-fs error (device loop3): ext4_do_update_inode:5244: inode #12: comm syz.3.133: corrupted inode contents [ 107.497953][ T6295] EXT4-fs error (device loop3): ext4_dirty_inode:6120: inode #12: comm syz.3.133: mark_inode_dirty error [ 107.561837][ T6295] EXT4-fs error (device loop3): ext4_do_update_inode:5244: inode #12: comm syz.3.133: corrupted inode contents [ 107.588535][ T6295] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz.3.133: mark_inode_dirty error [ 107.657540][ T6295] EXT4-fs error (device loop3): ext4_do_update_inode:5244: inode #12: comm syz.3.133: corrupted inode contents [ 107.749902][ T6295] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 107.795632][ T6295] EXT4-fs error (device loop3): ext4_do_update_inode:5244: inode #12: comm syz.3.133: corrupted inode contents [ 107.860441][ T6295] EXT4-fs error (device loop3): ext4_truncate:4294: inode #12: comm syz.3.133: mark_inode_dirty error [ 107.896543][ T6295] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 107.934687][ T6295] EXT4-fs (loop3): 1 truncate cleaned up [ 107.961257][ T6295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.353871][ T6327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.146'. [ 108.363970][ T6327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.146'. [ 108.975402][ T6293] syz.3.133: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 109.002448][ T6293] CPU: 0 PID: 6293 Comm: syz.3.133 Not tainted syzkaller #0 [ 109.009838][ T6293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 109.019956][ T6293] Call Trace: [ 109.023284][ T6293] [ 109.026261][ T6293] dump_stack_lvl+0x16c/0x230 [ 109.030992][ T6293] ? show_regs_print_info+0x20/0x20 [ 109.036239][ T6293] ? load_image+0x3b0/0x3b0 [ 109.040803][ T6293] ? __rcu_read_unlock+0x7c/0xd0 [ 109.045791][ T6293] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 109.052257][ T6293] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 109.058810][ T6293] warn_alloc+0x210/0x300 [ 109.063201][ T6293] ? zone_watermark_ok_safe+0x230/0x230 [ 109.068816][ T6293] ? _raw_spin_unlock+0x28/0x40 [ 109.073726][ T6293] __vmalloc_node_range+0x662/0x1320 [ 109.079092][ T6293] ? free_vm_area+0x50/0x50 [ 109.083665][ T6293] ? _raw_spin_unlock+0x28/0x40 [ 109.088587][ T6293] ? __kasan_kmalloc+0x8f/0xa0 [ 109.093403][ T6293] __vmalloc_node_range+0x568/0x1320 [ 109.098747][ T6293] ? hash_netiface_create+0x361/0xff0 [ 109.104172][ T6293] ? __asan_memset+0x22/0x40 [ 109.108835][ T6293] ? free_vm_area+0x50/0x50 [ 109.113386][ T6293] ? kvmalloc_node+0x70/0x180 [ 109.118107][ T6293] ? rcu_is_watching+0x15/0xb0 [ 109.122918][ T6293] ? kvmalloc_node+0x70/0x180 [ 109.127644][ T6293] ? trace_kmalloc+0x1f/0xa0 [ 109.132277][ T6293] kvmalloc_node+0x13f/0x180 [ 109.136891][ T6293] ? hash_netiface_create+0x361/0xff0 [ 109.142287][ T6293] hash_netiface_create+0x361/0xff0 [ 109.147513][ T6293] ? __lock_acquire+0x7c80/0x7c80 [ 109.152578][ T6293] ? __nla_parse+0x40/0x50 [ 109.157023][ T6293] ? hash_netport6_gc+0x570/0x570 [ 109.162082][ T6293] ip_set_create+0xa87/0x18e0 [ 109.166791][ T6293] ? ip_set_create+0x4b2/0x18e0 [ 109.171678][ T6293] ? ip_set_protocol+0x5d0/0x5d0 [ 109.176637][ T6293] ? trace_contention_end+0x39/0xe0 [ 109.181888][ T6293] nfnetlink_rcv_msg+0xb49/0x1130 [ 109.186933][ T6293] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.193021][ T6293] ? nfnetlink_rcv_msg+0x20e/0x1130 [ 109.198258][ T6293] ? nfnetlink_unbind+0x160/0x160 [ 109.203352][ T6293] ? __dev_queue_xmit+0x1a64/0x35a0 [ 109.208591][ T6293] ? __netlink_deliver_tap+0x5ab/0x830 [ 109.214073][ T6293] ? netlink_deliver_tap+0x19c/0x1b0 [ 109.219382][ T6293] ? netlink_unicast+0x72c/0x8d0 [ 109.224354][ T6293] ? netlink_sendmsg+0x8c1/0xbe0 [ 109.229313][ T6293] ? ____sys_sendmsg+0x5bf/0x950 [ 109.234271][ T6293] ? ___sys_sendmsg+0x220/0x290 [ 109.239139][ T6293] ? __se_sys_sendmsg+0x1a5/0x270 [ 109.244181][ T6293] ? do_syscall_64+0x55/0xb0 [ 109.248802][ T6293] netlink_rcv_skb+0x216/0x480 [ 109.253595][ T6293] ? nfnetlink_unbind+0x160/0x160 [ 109.258729][ T6293] ? netlink_ack+0x1110/0x1110 [ 109.263528][ T6293] ? apparmor_capable+0x137/0x1a0 [ 109.268569][ T6293] ? bpf_lsm_capable+0x9/0x10 [ 109.273266][ T6293] ? security_capable+0x89/0xb0 [ 109.278142][ T6293] nfnetlink_rcv+0x274/0x2180 [ 109.282849][ T6293] ? __local_bh_enable_ip+0x12e/0x1c0 [ 109.288242][ T6293] ? lockdep_hardirqs_on+0x98/0x150 [ 109.293492][ T6293] ? __local_bh_enable_ip+0x12e/0x1c0 [ 109.298880][ T6293] ? _local_bh_enable+0xa0/0xa0 [ 109.303754][ T6293] ? __dev_queue_xmit+0x245/0x35a0 [ 109.308888][ T6293] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 109.314488][ T6293] ? __dev_queue_xmit+0x245/0x35a0 [ 109.319624][ T6293] ? ref_tracker_free+0x634/0x7d0 [ 109.324666][ T6293] ? __copy_skb_header+0xa7/0x550 [ 109.329717][ T6293] ? refcount_inc+0x70/0x70 [ 109.334253][ T6293] ? __skb_clone+0x63/0x790 [ 109.338781][ T6293] ? __skb_clone+0x480/0x790 [ 109.343408][ T6293] ? __netlink_deliver_tap+0x7e8/0x830 [ 109.348905][ T6293] ? netlink_deliver_tap+0x2e/0x1b0 [ 109.354157][ T6293] ? __lock_acquire+0x7c80/0x7c80 [ 109.359219][ T6293] ? netlink_deliver_tap+0x2e/0x1b0 [ 109.364451][ T6293] netlink_unicast+0x751/0x8d0 [ 109.369248][ T6293] netlink_sendmsg+0x8c1/0xbe0 [ 109.374049][ T6293] ? netlink_getsockopt+0x580/0x580 [ 109.379272][ T6293] ? aa_sock_msg_perm+0x94/0x150 [ 109.384228][ T6293] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 109.389536][ T6293] ? security_socket_sendmsg+0x80/0xa0 [ 109.395012][ T6293] ? netlink_getsockopt+0x580/0x580 [ 109.400258][ T6293] ____sys_sendmsg+0x5bf/0x950 [ 109.405053][ T6293] ? __asan_memset+0x22/0x40 [ 109.409680][ T6293] ? __sys_sendmsg_sock+0x30/0x30 [ 109.414770][ T6293] ? __import_iovec+0x5f2/0x860 [ 109.419754][ T6293] ? import_iovec+0x73/0xa0 [ 109.424296][ T6293] ___sys_sendmsg+0x220/0x290 [ 109.429007][ T6293] ? __sys_sendmsg+0x270/0x270 [ 109.433841][ T6293] __se_sys_sendmsg+0x1a5/0x270 [ 109.438724][ T6293] ? __x64_sys_sendmsg+0x80/0x80 [ 109.443703][ T6293] ? lockdep_hardirqs_on+0x98/0x150 [ 109.448922][ T6293] do_syscall_64+0x55/0xb0 [ 109.453357][ T6293] ? clear_bhb_loop+0x40/0x90 [ 109.458051][ T6293] ? clear_bhb_loop+0x40/0x90 [ 109.462744][ T6293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.468650][ T6293] RIP: 0033:0x7f356ed8f749 [ 109.473101][ T6293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.492726][ T6293] RSP: 002b:00007f356fb9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.501167][ T6293] RAX: ffffffffffffffda RBX: 00007f356efe5fa0 RCX: 00007f356ed8f749 [ 109.509162][ T6293] RDX: 00000000000088a4 RSI: 00002000000008c0 RDI: 0000000000000003 [ 109.517181][ T6293] RBP: 00007f356ee13f91 R08: 0000000000000000 R09: 0000000000000000 [ 109.525183][ T6293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.533180][ T6293] R13: 00007f356efe6038 R14: 00007f356efe5fa0 R15: 00007ffcb21d8238 [ 109.541193][ T6293] [ 109.575721][ T6293] Mem-Info: [ 109.621154][ T6293] active_anon:5971 inactive_anon:0 isolated_anon:0 [ 109.621154][ T6293] active_file:1200 inactive_file:39926 isolated_file:0 [ 109.621154][ T6293] unevictable:768 dirty:118 writeback:0 [ 109.621154][ T6293] slab_reclaimable:10072 slab_unreclaimable:91969 [ 109.621154][ T6293] mapped:24208 shmem:1430 pagetables:526 [ 109.621154][ T6293] sec_pagetables:0 bounce:0 [ 109.621154][ T6293] kernel_misc_reclaimable:0 [ 109.621154][ T6293] free:1333767 free_pcp:11202 free_cma:0 [ 109.709176][ T6293] Node 0 active_anon:23784kB inactive_anon:0kB active_file:4800kB inactive_file:159504kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96832kB dirty:472kB writeback:0kB shmem:4184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11108kB pagetables:2004kB sec_pagetables:0kB all_unreclaimable? no [ 109.785956][ T6293] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 109.836801][ T6293] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 109.865904][ T6293] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 109.908734][ T6293] Node 0 DMA32 free:1430012kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:23840kB inactive_anon:0kB active_file:4800kB inactive_file:158180kB unevictable:1536kB writepending:472kB present:3129332kB managed:2589596kB mlocked:0kB bounce:0kB free_pcp:21864kB local_pcp:2168kB free_cma:0kB [ 109.965300][ T6293] lowmem_reserve[]: 0 0 1 1 1 [ 109.967475][ T6345] netlink: 88 bytes leftover after parsing attributes in process `syz.0.153'. [ 109.970101][ T6293] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 110.022636][ T6347] netlink: 'syz.1.154': attribute type 1 has an invalid length. [ 110.040881][ T6347] netlink: 224 bytes leftover after parsing attributes in process `syz.1.154'. [ 110.043235][ T6293] lowmem_reserve[]: 0 0 0 0 0 [ 110.060494][ T6293] Node 1 Normal free:3888316kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22688kB local_pcp:8704kB free_cma:0kB [ 110.103180][ T6293] lowmem_reserve[]: 0 0 0 0 0 [ 110.113268][ T6293] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 110.135024][ T6293] Node 0 DMA32: 1*4kB (U) 3*8kB (UME) 2*16kB (ME) 1*32kB (E) 13*64kB (UM) 23*128kB (ME) 14*256kB (ME) 12*512kB (M) 3*1024kB (ME) 4*2048kB (ME) 343*4096kB (M) = 1429788kB [ 110.164219][ T6293] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 110.178751][ T6293] Node 1 Normal: 233*4kB (UE) 67*8kB (UE) 42*16kB (UE) 37*32kB (UE) 19*64kB (UME) 6*128kB (UME) 0*256kB 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 947*4096kB (UM) = 3888316kB [ 110.204998][ T6293] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 110.268387][ T6293] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 110.287536][ T6293] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 110.298033][ T6293] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 110.356660][ T6293] 42556 total pagecache pages [ 110.361833][ T6293] 0 pages in swap cache [ 110.366033][ T6293] Free swap = 124996kB [ 110.376528][ T6293] Total swap = 124996kB [ 110.381095][ T6293] 2097051 pages RAM [ 110.385010][ T6293] 0 pages HighMem/MovableOnly [ 110.398065][ T6293] 416138 pages reserved [ 110.407702][ T6293] 0 pages cma reserved [ 110.451095][ T6356] loop2: detected capacity change from 0 to 512 [ 110.473123][ T6356] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 110.626065][ T6356] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 110.650749][ T6356] FAT-fs (loop2): Filesystem has been set read-only [ 110.662683][ T6356] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 110.734071][ T6356] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 110.752545][ T6356] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 111.091679][ T6370] veth2: entered promiscuous mode [ 111.107397][ T6370] veth2: entered allmulticast mode [ 111.625891][ T6373] syz.2.165[6373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.626050][ T6373] syz.2.165[6373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.731614][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 111.731630][ T28] audit: type=1326 audit(1764579833.328:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 111.772371][ T28] audit: type=1326 audit(1764579833.358:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 111.806233][ T28] audit: type=1326 audit(1764579833.398:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 111.868129][ T28] audit: type=1326 audit(1764579833.398:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 111.940922][ T28] audit: type=1326 audit(1764579833.398:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 111.995913][ T28] audit: type=1326 audit(1764579833.398:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 112.048937][ T28] audit: type=1326 audit(1764579833.428:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 112.164069][ T28] audit: type=1326 audit(1764579833.428:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 112.233054][ T28] audit: type=1326 audit(1764579833.458:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 112.304867][ T28] audit: type=1326 audit(1764579833.458:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 112.540562][ T6395] loop1: detected capacity change from 0 to 512 [ 112.575608][ T6395] EXT4-fs (loop1): filesystem is read-only [ 112.609960][ T6395] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 112.661177][ T6395] EXT4-fs (loop1): filesystem is read-only [ 112.668005][ T6395] EXT4-fs (loop1): orphan cleanup on readonly fs [ 112.681298][ T6395] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #16: comm syz.1.176: iget: bad i_size value: -504403158265486552 [ 112.711502][ T6395] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.176: couldn't read orphan inode 16 (err -117) [ 112.762320][ T6395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 112.933811][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.079397][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.242975][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.393083][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.538124][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.578413][ T6404] syz.1.180[6404] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.578557][ T6404] syz.1.180[6404] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.655385][ T6404] netlink: 'syz.1.180': attribute type 13 has an invalid length. [ 113.732643][ T6404] gretap0: refused to change device tx_queue_len [ 113.741089][ T6404] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 114.080518][ T6407] loop1: detected capacity change from 0 to 512 [ 114.131094][ T6407] EXT4-fs: Mount option(s) incompatible with ext3 [ 114.330083][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.781409][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.815190][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.877007][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.950980][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.981110][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 114.991792][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.296485][ T6410] lo speed is unknown, defaulting to 1000 [ 116.437534][ T6445] loop1: detected capacity change from 0 to 128 [ 116.641112][ T6410] chnl_net:caif_netlink_parms(): no params data found [ 116.744995][ T144] hsr_slave_0: left promiscuous mode [ 116.763568][ T144] hsr_slave_1: left promiscuous mode [ 116.815254][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.849468][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.864335][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 116.864351][ T28] audit: type=1326 audit(1764579838.458:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3918f749 code=0x7ffc0000 [ 116.899493][ T28] audit: type=1326 audit(1764579838.458:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3918f749 code=0x7ffc0000 [ 116.929012][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.938863][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.958246][ T28] audit: type=1326 audit(1764579838.518:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd3918f749 code=0x7ffc0000 [ 116.982580][ T144] bridge_slave_1: left allmulticast mode [ 116.988286][ T144] bridge_slave_1: left promiscuous mode [ 117.002248][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.018729][ T28] audit: type=1326 audit(1764579838.518:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3918f749 code=0x7ffc0000 [ 117.048387][ T28] audit: type=1326 audit(1764579838.518:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3918f749 code=0x7ffc0000 [ 117.095057][ T144] bridge_slave_0: left allmulticast mode [ 117.115229][ T5101] Bluetooth: hci0: command tx timeout [ 117.124484][ T144] bridge_slave_0: left promiscuous mode [ 117.130316][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.151839][ T28] audit: type=1326 audit(1764579838.528:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fbd3918f749 code=0x7ffc0000 [ 117.175749][ T28] audit: type=1326 audit(1764579838.528:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3918f749 code=0x7ffc0000 [ 117.209220][ T28] audit: type=1326 audit(1764579838.528:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3918f749 code=0x7ffc0000 [ 117.396223][ T144] veth1_macvtap: left promiscuous mode [ 117.426452][ T144] veth0_macvtap: left promiscuous mode [ 117.436494][ T144] veth1_vlan: left promiscuous mode [ 117.456429][ T144] veth0_vlan: left promiscuous mode [ 117.468316][ T6479] capability: warning: `syz.1.199' uses 32-bit capabilities (legacy support in use) [ 118.032565][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.204'. [ 118.594718][ T28] audit: type=1326 audit(1764579840.188:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.1.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 118.640760][ T28] audit: type=1326 audit(1764579840.208:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.1.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 118.874303][ T144] team0 (unregistering): Port device team_slave_1 removed [ 118.927586][ T144] team0 (unregistering): Port device team_slave_0 removed [ 118.967766][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.020271][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.181198][ T5101] Bluetooth: hci0: command tx timeout [ 119.474307][ T144] bond0 (unregistering): Released all slaves [ 119.603369][ T6499] netlink: 32 bytes leftover after parsing attributes in process `syz.0.208'. [ 119.630783][ T6499] Zero length message leads to an empty skb [ 119.903222][ T6410] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.948845][ T6410] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.981053][ T6410] bridge_slave_0: entered allmulticast mode [ 119.988696][ T6410] bridge_slave_0: entered promiscuous mode [ 120.014827][ T6410] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.037365][ T6410] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.052341][ T6410] bridge_slave_1: entered allmulticast mode [ 120.070075][ T6410] bridge_slave_1: entered promiscuous mode [ 120.249840][ T6526] loop1: detected capacity change from 0 to 1024 [ 121.174100][ T6410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.194893][ T6534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.216'. [ 121.267575][ T5101] Bluetooth: hci0: command tx timeout [ 121.298320][ T6410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.388464][ T6410] team0: Port device team_slave_0 added [ 121.473330][ T6410] team0: Port device team_slave_1 added [ 121.577165][ T6539] netlink: 2 bytes leftover after parsing attributes in process `syz.1.217'. [ 121.602871][ T6539] netlink: 2 bytes leftover after parsing attributes in process `syz.1.217'. [ 121.630708][ T6542] netlink: 2 bytes leftover after parsing attributes in process `syz.1.217'. [ 121.639564][ T6542] netlink: 2 bytes leftover after parsing attributes in process `syz.1.217'. [ 121.685520][ T6410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.703962][ T6410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.779809][ T6410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.803132][ T6410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.810129][ T6410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.842395][ T6547] netlink: 40 bytes leftover after parsing attributes in process `syz.1.218'. [ 121.873033][ T6410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.018174][ T6554] loop1: detected capacity change from 0 to 512 [ 122.069190][ T6554] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 122.082946][ T6410] hsr_slave_0: entered promiscuous mode [ 122.091359][ T6554] EXT4-fs (loop1): orphan cleanup on readonly fs [ 122.129472][ T6554] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #16: comm syz.1.220: corrupted inode contents [ 122.149336][ T6410] hsr_slave_1: entered promiscuous mode [ 122.156519][ T6554] EXT4-fs (loop1): Remounting filesystem read-only [ 122.165018][ T6554] EXT4-fs (loop1): 1 truncate cleaned up [ 122.183197][ T2895] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 122.230908][ T2895] __quota_error: 3 callbacks suppressed [ 122.230924][ T2895] Quota error (device loop1): write_blk: dquota write failed [ 122.300982][ T2895] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 122.330955][ T2895] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 122.350836][ T2895] Quota error (device loop1): write_blk: dquota write failed [ 122.363806][ T2895] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 122.381992][ T2895] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 122.398304][ T2895] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 122.409114][ T2895] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 122.433783][ T6554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.598575][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.897659][ T6410] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 122.906346][ T28] audit: type=1326 audit(1764579844.498:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6563 comm="syz.1.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 122.935200][ T6410] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 122.962591][ T6410] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 122.980271][ T28] audit: type=1326 audit(1764579844.498:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6563 comm="syz.1.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 123.002778][ T6568] loop3: detected capacity change from 0 to 512 [ 123.018233][ T28] audit: type=1326 audit(1764579844.518:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6563 comm="syz.1.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 123.027276][ T6568] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 123.048743][ T6568] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 123.057871][ T6568] EXT4-fs (loop3): orphan cleanup on readonly fs [ 123.064681][ T6568] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 123.075407][ T6568] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 123.086863][ T6410] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 123.090197][ T6568] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 123.140685][ T6568] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.222: bg 0: block 40: padding at end of block bitmap is not set [ 123.177945][ T6568] EXT4-fs (loop3): Remounting filesystem read-only [ 123.201492][ T6568] EXT4-fs (loop3): 1 truncate cleaned up [ 123.208750][ T6568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 123.345809][ T5101] Bluetooth: hci0: command tx timeout [ 123.395694][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.548554][ T6586] netlink: 648 bytes leftover after parsing attributes in process `syz.1.226'. [ 123.576865][ T6410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.670114][ T6410] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.717232][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.724502][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.790193][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.797509][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.964574][ T6410] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.258609][ T6611] syz.3.233[6611] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.258753][ T6611] syz.3.233[6611] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.323901][ T6612] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.460158][ T6612] bridge_slave_0: left allmulticast mode [ 124.501515][ T6612] bridge_slave_0: left promiscuous mode [ 124.507625][ T6612] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.595318][ T6612] bridge_slave_1: left allmulticast mode [ 124.630725][ T6612] bridge_slave_1: left promiscuous mode [ 124.662147][ T6612] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.732866][ T6612] bond0: (slave bond_slave_0): Releasing backup interface [ 124.784880][ T6612] bond0: (slave bond_slave_1): Releasing backup interface [ 124.874647][ T6612] team0: Port device team_slave_0 removed [ 124.933293][ T6612] team0: Port device team_slave_1 removed [ 124.960529][ T6612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.969629][ T6612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.980037][ T6612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.993514][ T6612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.219327][ T6410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.407339][ T6630] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 125.419053][ T6630] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 125.512326][ T6631] tipc: Started in network mode [ 125.517372][ T6631] tipc: Node identity 4e868c125362, cluster identity 4711 [ 125.549304][ T6631] tipc: Enabled bearer , priority 0 [ 125.706183][ T11] tipc: Resetting bearer [ 125.762221][ T6626] tipc: Resetting bearer [ 126.162301][ T6648] loop1: detected capacity change from 0 to 8192 [ 127.478802][ T6664] netlink: 36 bytes leftover after parsing attributes in process `syz.1.243'. [ 128.928647][ T6626] tipc: Disabling bearer [ 128.942421][ T6649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.240'. [ 128.952516][ T6649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.240'. [ 128.962057][ T6649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.240'. [ 128.972458][ T6649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.240'. [ 128.982270][ T6649] netlink: 'syz.0.240': attribute type 6 has an invalid length. [ 128.993468][ T9] tipc: Node number set to 501517330 [ 129.364821][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 129.364836][ T28] audit: type=1326 audit(1764579850.958:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6674 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356ed8f749 code=0x7ffc0000 [ 129.405390][ T6410] veth0_vlan: entered promiscuous mode [ 129.456410][ T28] audit: type=1326 audit(1764579851.008:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6674 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f356ed8f749 code=0x7ffc0000 [ 129.517777][ T28] audit: type=1326 audit(1764579851.008:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6674 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356ed8f749 code=0x7ffc0000 [ 129.554980][ T6410] veth1_vlan: entered promiscuous mode [ 129.589448][ T28] audit: type=1326 audit(1764579851.008:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6674 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f356ed8f749 code=0x7ffc0000 [ 129.614525][ T28] audit: type=1326 audit(1764579851.008:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6674 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356ed8f749 code=0x7ffc0000 [ 129.642064][ T28] audit: type=1326 audit(1764579851.008:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6674 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f356ed8f749 code=0x7ffc0000 [ 129.809561][ T28] audit: type=1326 audit(1764579851.008:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6674 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356ed8f749 code=0x7ffc0000 [ 129.949093][ T28] audit: type=1326 audit(1764579851.008:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6674 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356ed8f749 code=0x7ffc0000 [ 130.299726][ T28] audit: type=1326 audit(1764579851.008:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6674 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f356ed8f749 code=0x7ffc0000 [ 130.326802][ T28] audit: type=1326 audit(1764579851.008:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6674 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356ed8f749 code=0x7ffc0000 [ 130.486670][ T6410] veth0_macvtap: entered promiscuous mode [ 130.502168][ T6410] veth1_macvtap: entered promiscuous mode [ 130.530499][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.551516][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.561625][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.572433][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.593874][ T6410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.723253][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.755395][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.777112][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.796091][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.814585][ T6410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.825337][ T6700] netlink: '': attribute type 21 has an invalid length. [ 130.834197][ T6700] netlink: '': attribute type 1 has an invalid length. [ 130.841428][ T6700] netlink: 144 bytes leftover after parsing attributes in process `'. [ 130.884052][ T6410] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.920755][ T6410] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.929537][ T6410] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.958051][ T6410] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.273928][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.320739][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.374251][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.390118][ T5903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.404760][ T23] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 131.427482][ T5903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.617301][ T6716] fido_id[6716]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 131.963812][ T6732] 9pnet_fd: Insufficient options for proto=fd [ 132.199642][ T6741] capability: warning: `syz.1.266' uses deprecated v2 capabilities in a way that may be insecure [ 132.384918][ T6747] process 'syz.1.268' launched '/dev/fd/3' with NULL argv: empty string added [ 133.190084][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.200846][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.269769][ T6754] loop1: detected capacity change from 0 to 512 [ 133.338306][ T6754] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 133.464858][ T6754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.494188][ T6754] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.640541][ T6754] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 133.685840][ T6754] EXT4-fs (loop1): changing journal_checksum during remount not supported; ignoring [ 133.726263][ T6754] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 133.861994][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.265330][ T6782] bridge_slave_0: left allmulticast mode [ 134.287391][ T6782] bridge_slave_0: left promiscuous mode [ 134.307871][ T6782] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.325462][ T6782] bridge_slave_1: left allmulticast mode [ 134.335187][ T6782] bridge_slave_1: left promiscuous mode [ 134.346231][ T6782] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.377411][ T6782] bond0: (slave bond_slave_0): Releasing backup interface [ 134.387033][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 134.387049][ T28] audit: type=1326 audit(1764579855.978:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6776 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470818f749 code=0x7ffc0000 [ 134.439974][ T28] audit: type=1326 audit(1764579855.978:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6776 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f470818df90 code=0x7ffc0000 [ 134.472204][ T6782] bond0: (slave bond_slave_1): Releasing backup interface [ 134.510981][ T28] audit: type=1326 audit(1764579856.008:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6776 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f470818f34b code=0x7ffc0000 [ 134.565477][ T28] audit: type=1326 audit(1764579856.008:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6776 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f470818f34b code=0x7ffc0000 [ 134.591835][ T6782] team0: Port device team_slave_0 removed [ 134.597831][ T28] audit: type=1326 audit(1764579856.028:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6776 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f470818f34b code=0x7ffc0000 [ 134.654532][ T6782] team0: Port device team_slave_1 removed [ 134.665103][ T28] audit: type=1326 audit(1764579856.028:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6776 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f470818f34b code=0x7ffc0000 [ 134.696690][ T6782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.724838][ T6782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.741328][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 134.769945][ T6782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.779169][ T28] audit: type=1326 audit(1764579856.358:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6776 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f470818f34b code=0x7ffc0000 [ 134.802960][ T6782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.811095][ T28] audit: type=1326 audit(1764579856.358:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6776 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f470818f34b code=0x7ffc0000 [ 134.837434][ T6792] 9pnet_fd: Insufficient options for proto=fd [ 134.931875][ T23] usb 5-1: device descriptor read/64, error -71 [ 135.103698][ T6799] netlink: 3 bytes leftover after parsing attributes in process `syz.0.284'. [ 135.112953][ T6799] 0ªX¹¦À: renamed from caif0 [ 135.121580][ T6799] 0ªX¹¦À: entered allmulticast mode [ 135.136477][ T6799] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 135.156614][ T6800] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 135.201257][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 135.224248][ T28] audit: type=1326 audit(1764579856.808:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6776 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f470818f34b code=0x7ffc0000 [ 135.290027][ T28] audit: type=1326 audit(1764579856.818:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6776 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f470818f34b code=0x7ffc0000 [ 135.401844][ T23] usb 5-1: device descriptor read/64, error -71 [ 135.425755][ T6811] netlink: 64 bytes leftover after parsing attributes in process `syz.0.286'. [ 135.532341][ T23] usb usb5-port1: attempt power cycle [ 135.826027][ T6824] mmap: syz.0.291 (6824) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 135.957544][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 136.002040][ T23] usb 5-1: device descriptor read/8, error -71 [ 136.038914][ T6832] loop1: detected capacity change from 0 to 2048 [ 136.127749][ T6832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.300907][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 136.311987][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.342412][ T23] usb 5-1: device descriptor read/8, error -71 [ 136.481572][ T23] usb usb5-port1: unable to enumerate USB device [ 137.154398][ T6864] netlink: 76 bytes leftover after parsing attributes in process `syz.3.301'. [ 137.322224][ T6870] sd 0:0:1:0: device reset [ 137.525486][ T6877] Driver unsupported XDP return value 0 on prog (id 216) dev N/A, expect packet loss! [ 138.052308][ T6888] netlink: 56 bytes leftover after parsing attributes in process `syz.1.311'. [ 138.579067][ T6889] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 138.892581][ T5882] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 138.978710][ T6912] netlink: 'syz.4.322': attribute type 4 has an invalid length. [ 138.992792][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.322'. [ 139.066273][ T6914] netlink: 96 bytes leftover after parsing attributes in process `syz.4.324'. [ 139.112651][ T5882] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 139.133036][ T5882] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 139.166108][ T5882] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.191101][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.218889][ T5882] usb 4-1: Product: syz [ 139.229091][ T5882] usb 4-1: Manufacturer: syz [ 139.238603][ T5882] usb 4-1: SerialNumber: syz [ 139.297802][ T6918] loop4: detected capacity change from 0 to 512 [ 139.342087][ T6918] ext4: Unknown parameter 'smackfsdef' [ 139.388571][ T5792] blk_print_req_error: 9 callbacks suppressed [ 139.388588][ T5792] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 139.494798][ T5882] cdc_ncm 4-1:1.0: bind() failure [ 139.520950][ T5882] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 139.527932][ T5882] cdc_ncm 4-1:1.1: bind() failure [ 139.588252][ T5882] usb 4-1: USB disconnect, device number 2 [ 139.601394][ T6925] loop1: detected capacity change from 0 to 128 [ 139.646006][ T6925] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 139.668460][ T6925] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.842504][ T5794] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.885399][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.333'. [ 140.027957][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 140.027973][ T28] audit: type=1326 audit(1764579861.618:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 140.076129][ T28] audit: type=1326 audit(1764579861.618:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 140.104044][ T28] audit: type=1326 audit(1764579861.618:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 140.128684][ T28] audit: type=1326 audit(1764579861.618:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 140.150990][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.158173][ T6935] bond0: (slave bond_slave_1): Releasing backup interface [ 140.212062][ T28] audit: type=1326 audit(1764579861.618:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 140.234259][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.241712][ T28] audit: type=1326 audit(1764579861.618:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 140.274283][ T28] audit: type=1326 audit(1764579861.638:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 140.307473][ T6947] netlink: 28 bytes leftover after parsing attributes in process `syz.3.335'. [ 140.313619][ T28] audit: type=1326 audit(1764579861.638:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 140.339220][ T28] audit: type=1326 audit(1764579861.648:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 140.348723][ T6947] netlink: 28 bytes leftover after parsing attributes in process `syz.3.335'. [ 140.362145][ T28] audit: type=1326 audit(1764579861.648:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 140.398897][ T6947] bridge0: entered promiscuous mode [ 140.421268][ T6947] ip6gretap0: entered promiscuous mode [ 140.678731][ T6952] netlink: 'syz.3.337': attribute type 1 has an invalid length. [ 140.730504][ T6952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.193189][ T6955] bond1 (unregistering): Released all slaves [ 141.511024][ T6966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.342'. [ 141.964322][ T6982] bridge: RTM_NEWNEIGH with invalid ether address [ 142.031503][ T6988] netlink: 'syz.3.350': attribute type 13 has an invalid length. [ 142.449173][ T7000] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 142.751905][ T6988] bridge0: port 3(team0) entered disabled state [ 142.760210][ T6988] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.767994][ T6988] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.339884][ T7027] loop4: detected capacity change from 0 to 1024 [ 143.374761][ T7027] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 143.403834][ T7027] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 143.431287][ T7027] JBD2: no valid journal superblock found [ 143.437320][ T7027] EXT4-fs (loop4): Could not load journal inode [ 143.458077][ T7027] nfs: Bad value for 'source' [ 143.779524][ T7036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.363'. [ 144.137620][ T7043] netlink: 136 bytes leftover after parsing attributes in process `syz.4.366'. [ 144.251392][ T7045] loop4: detected capacity change from 0 to 512 [ 144.324095][ T7045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.354837][ T7045] ext4 filesystem being mounted at /35/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.376821][ T6988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.469431][ T6410] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.484385][ T6988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.621893][ T7052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.368'. [ 144.845056][ T6988] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.857249][ T6988] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.867868][ T6988] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.877313][ T6988] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.076129][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.364'. [ 145.129766][ T7052] : entered promiscuous mode [ 145.378316][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 145.378332][ T28] audit: type=1326 audit(1764579866.968:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 145.455945][ T28] audit: type=1326 audit(1764579867.008:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 145.512177][ T28] audit: type=1326 audit(1764579867.008:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 145.541231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 145.597194][ T28] audit: type=1326 audit(1764579867.008:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 145.663494][ T28] audit: type=1326 audit(1764579867.008:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 145.744212][ T28] audit: type=1326 audit(1764579867.008:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 145.797525][ T28] audit: type=1326 audit(1764579867.008:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 145.852008][ T28] audit: type=1326 audit(1764579867.008:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 145.899552][ T28] audit: type=1326 audit(1764579867.008:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 145.964006][ T28] audit: type=1326 audit(1764579867.008:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d33b8f749 code=0x7ffc0000 [ 146.006342][ T7081] loop1: detected capacity change from 0 to 512 [ 146.074802][ T7081] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 146.125489][ T7081] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 146.182066][ T7081] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4031: comm syz.1.375: Allocating blocks 41-42 which overlap fs metadata [ 146.197850][ T7081] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4031: comm syz.1.375: Allocating blocks 41-42 which overlap fs metadata [ 146.236892][ T7081] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.375: Failed to acquire dquot type 1 [ 146.248865][ T7081] EXT4-fs error (device loop1): mb_free_blocks:1938: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 146.264717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 146.279286][ T7081] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #12: comm syz.1.375: corrupted inode contents [ 146.325111][ T7081] EXT4-fs error (device loop1): ext4_dirty_inode:6120: inode #12: comm syz.1.375: mark_inode_dirty error [ 146.380966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 146.389825][ T7081] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #12: comm syz.1.375: corrupted inode contents [ 146.428124][ T7081] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz.1.375: mark_inode_dirty error [ 146.460987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 146.496454][ T7081] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #12: comm syz.1.375: corrupted inode contents [ 146.529232][ T7081] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 146.553455][ T7081] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #12: comm syz.1.375: corrupted inode contents [ 146.588553][ T7081] EXT4-fs error (device loop1): ext4_truncate:4294: inode #12: comm syz.1.375: mark_inode_dirty error [ 146.625551][ T7081] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 146.646264][ T7081] EXT4-fs (loop1): 1 truncate cleaned up [ 146.669681][ T7081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.026583][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.468315][ T7107] ------------[ cut here ]------------ [ 147.474115][ T7107] WARNING: CPU: 1 PID: 7107 at mm/page_alloc.c:4433 __alloc_pages+0x2de/0x460 [ 147.483950][ T7107] Modules linked in: [ 147.487910][ T7107] CPU: 1 PID: 7107 Comm: syz.1.379 Not tainted syzkaller #0 [ 147.495445][ T7107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 147.505514][ T7061] warn_alloc: 3 callbacks suppressed [ 147.505529][ T7061] syz.3.370: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3 [ 147.510991][ T7107] RIP: 0010:__alloc_pages+0x2de/0x460 [ 147.525334][ T7061] ,mems_allowed=0-1 [ 147.527405][ T7107] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 2e ff 63 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 147.547600][ T7061] [ 147.556742][ T7107] RSP: 0018:ffffc9000dfefa00 EFLAGS: 00010246 [ 147.556776][ T7107] RAX: ffffc9000dfefa00 RBX: 1ffff92001bfdf44 RCX: 0000000000000000 [ 147.556793][ T7107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000dfefa68 [ 147.556807][ T7107] RBP: ffffc9000dfefb00 R08: ffffc9000dfefa67 R09: 0000000000000000 [ 147.556821][ T7107] R10: ffffc9000dfefa40 R11: fffff52001bfdf4d R12: 0000000000000013 [ 147.556837][ T7107] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000 [ 147.556862][ T7107] FS: 00007f1d34aaf6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 147.556880][ T7107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.556894][ T7107] CR2: 000000110c4493ae CR3: 0000000053cf6000 CR4: 00000000003506e0 [ 147.556911][ T7107] Call Trace: [ 147.556919][ T7107] [ 147.556932][ T7107] ? zone_statistics+0x170/0x170 [ 147.556975][ T7107] ? __might_fault+0xaa/0x120 [ 147.556994][ T7107] ? __lock_acquire+0x7c80/0x7c80 [ 147.557016][ T7107] __kmalloc_large_node+0x8c/0x1e0 [ 147.601939][ T7061] CPU: 0 PID: 7061 Comm: syz.3.370 Not tainted syzkaller #0 [ 147.607019][ T7107] ? raw_ioctl+0x1944/0x3b70 [ 147.615870][ T7061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 147.615887][ T7061] Call Trace: [ 147.615897][ T7061] [ 147.615906][ T7061] dump_stack_lvl+0x16c/0x230 [ 147.615943][ T7061] ? show_regs_print_info+0x20/0x20 [ 147.615972][ T7061] ? load_image+0x3b0/0x3b0 [ 147.615999][ T7061] ? __rcu_read_unlock+0x7c/0xd0 [ 147.616026][ T7061] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 147.616054][ T7061] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 147.616082][ T7061] warn_alloc+0x210/0x300 [ 147.622796][ T7107] __kmalloc+0x111/0x240 [ 147.630680][ T7061] ? zone_watermark_ok_safe+0x230/0x230 [ 147.630725][ T7061] ? _raw_spin_unlock+0x28/0x40 [ 147.630760][ T7061] __vmalloc_node_range+0x662/0x1320 [ 147.634080][ T7107] raw_ioctl+0x1944/0x3b70 [ 147.637046][ T7061] ? free_vm_area+0x50/0x50 [ 147.642053][ T7107] ? tomoyo_path_number_perm+0x477/0x590 [ 147.646626][ T7061] ? _raw_spin_unlock+0x28/0x40 [ 147.651900][ T7107] ? __kmem_cache_free+0xba/0x1f0 [ 147.656933][ T7061] ? __kasan_kmalloc+0x8f/0xa0 [ 147.664284][ T7107] ? tomoyo_path_number_perm+0x4dc/0x590 [ 147.668799][ T7061] __vmalloc_node_range+0x568/0x1320 [ 147.678934][ T7107] ? tomoyo_path_number_perm+0x1ba/0x590 [ 147.682158][ T7061] ? hash_netiface_create+0x361/0xff0 [ 147.682189][ T7061] ? __asan_memset+0x22/0x40 [ 147.682243][ T7061] ? free_vm_area+0x50/0x50 [ 147.686031][ T7107] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 147.689830][ T7061] ? kvmalloc_node+0x70/0x180 [ 147.695252][ T7107] ? make_qualifier+0x250/0x250 [ 147.699528][ T7061] ? rcu_is_watching+0x15/0xb0 [ 147.704603][ T7107] ? __fget_files+0x28/0x4d0 [ 147.710909][ T7061] ? kvmalloc_node+0x70/0x180 [ 147.710936][ T7061] ? trace_kmalloc+0x1f/0xa0 [ 147.717469][ T7107] ? bpf_lsm_file_ioctl+0x9/0x10 [ 147.721808][ T7061] kvmalloc_node+0x13f/0x180 [ 147.721858][ T7061] ? hash_netiface_create+0x361/0xff0 [ 147.721886][ T7061] hash_netiface_create+0x361/0xff0 [ 147.726143][ T7107] ? security_file_ioctl+0x80/0xa0 [ 147.731701][ T7061] ? __lock_acquire+0x7c80/0x7c80 [ 147.731733][ T7061] ? __nla_parse+0x40/0x50 [ 147.731764][ T7061] ? hash_netport6_gc+0x570/0x570 [ 147.736616][ T7107] ? make_qualifier+0x250/0x250 [ 147.741896][ T7061] ip_set_create+0xa87/0x18e0 [ 147.741935][ T7061] ? ip_set_create+0x4b2/0x18e0 [ 147.741978][ T7061] ? ip_set_protocol+0x5d0/0x5d0 [ 147.746382][ T7107] __se_sys_ioctl+0xfd/0x170 [ 147.750873][ T7061] ? trace_contention_end+0x39/0xe0 [ 147.750946][ T7061] nfnetlink_rcv_msg+0xb49/0x1130 [ 147.756541][ T7107] do_syscall_64+0x55/0xb0 [ 147.761388][ T7061] ? nfnetlink_rcv_msg+0x20e/0x1130 [ 147.761438][ T7061] ? nfnetlink_unbind+0x160/0x160 [ 147.766477][ T7107] ? clear_bhb_loop+0x40/0x90 [ 147.771291][ T7061] netlink_rcv_skb+0x216/0x480 [ 147.776916][ T7107] ? clear_bhb_loop+0x40/0x90 [ 147.782199][ T7061] ? nfnetlink_unbind+0x160/0x160 [ 147.782232][ T7061] ? netlink_ack+0x1110/0x1110 [ 147.788713][ T7107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.793240][ T7061] ? apparmor_capable+0x137/0x1a0 [ 147.793267][ T7061] ? bpf_lsm_capable+0x9/0x10 [ 147.793295][ T7061] ? security_capable+0x89/0xb0 [ 147.793329][ T7061] nfnetlink_rcv+0x274/0x2180 [ 147.793362][ T7061] ? mark_lock+0x94/0x320 [ 147.793396][ T7061] ? mark_lock+0x94/0x320 [ 147.797973][ T7107] RIP: 0033:0x7f1d33b8f749 [ 147.802498][ T7061] ? __lock_acquire+0x1260/0x7c80 [ 147.802537][ T7061] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 147.802573][ T7061] ? kmalloc_reserve+0x95/0x240 [ 147.808036][ T7107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.812902][ T7061] ? verify_lock_unused+0x140/0x140 [ 147.812942][ T7061] ? __netlink_lookup+0xbe/0x810 [ 147.817861][ T7107] RSP: 002b:00007f1d34aaf038 EFLAGS: 00000246 [ 147.822649][ T7061] ? netlink_deliver_tap+0x2e/0x1b0 [ 147.822684][ T7061] ? __lock_acquire+0x7c80/0x7c80 [ 147.827265][ T7107] ORIG_RAX: 0000000000000010 [ 147.831934][ T7061] ? net_generic+0x1e/0x240 [ 147.831967][ T7061] ? netlink_deliver_tap+0x2e/0x1b0 [ 147.832001][ T7061] netlink_unicast+0x751/0x8d0 [ 147.836597][ T7107] RAX: ffffffffffffffda RBX: 00007f1d33de5fa0 RCX: 00007f1d33b8f749 [ 147.841570][ T7061] netlink_sendmsg+0x8c1/0xbe0 [ 147.841613][ T7061] ? netlink_getsockopt+0x580/0x580 [ 147.846208][ T7107] RDX: 00002000000000c0 RSI: 00000000c0085508 RDI: 0000000000000003 [ 147.851604][ T7061] ? aa_sock_msg_perm+0x94/0x150 [ 147.851635][ T7061] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 147.856828][ T7107] RBP: 00007f1d33c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 147.861932][ T7061] ? security_socket_sendmsg+0x80/0xa0 [ 147.861958][ T7061] ? netlink_getsockopt+0x580/0x580 [ 147.861988][ T7061] ____sys_sendmsg+0x5bf/0x950 [ 147.862029][ T7061] ? __asan_memset+0x22/0x40 [ 147.867153][ T7107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.871567][ T7061] ? __sys_sendmsg_sock+0x30/0x30 [ 147.871599][ T7061] ? __import_iovec+0x5f2/0x860 [ 147.871640][ T7061] ? import_iovec+0x73/0xa0 [ 147.876639][ T7107] R13: 00007f1d33de6038 R14: 00007f1d33de5fa0 R15: 00007fff42aed008 [ 147.881489][ T7061] ___sys_sendmsg+0x220/0x290 [ 147.881529][ T7061] ? __sys_sendmsg+0x270/0x270 [ 147.886247][ T7107] [ 147.891136][ T7061] __se_sys_sendmsg+0x1a5/0x270 [ 147.891173][ T7061] ? __x64_sys_sendmsg+0x80/0x80 [ 147.891223][ T7061] ? lockdep_hardirqs_on+0x98/0x150 [ 147.891249][ T7061] do_syscall_64+0x55/0xb0 [ 147.891277][ T7061] ? clear_bhb_loop+0x40/0x90 [ 147.891301][ T7061] ? clear_bhb_loop+0x40/0x90 [ 147.891327][ T7061] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.891351][ T7061] RIP: 0033:0x7f356ed8f749 [ 147.891370][ T7061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.891388][ T7061] RSP: 002b:00007f356fb9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.891412][ T7061] RAX: ffffffffffffffda RBX: 00007f356efe5fa0 RCX: 00007f356ed8f749 [ 147.891428][ T7061] RDX: 00000000000088a4 RSI: 00002000000008c0 RDI: 0000000000000003 [ 147.891443][ T7061] RBP: 00007f356ee13f91 R08: 0000000000000000 R09: 0000000000000000 [ 147.891456][ T7061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.891469][ T7061] R13: 00007f356efe6038 R14: 00007f356efe5fa0 R15: 00007ffcb21d8238 [ 147.891503][ T7061] [ 148.159334][ T7105] loop4: detected capacity change from 0 to 512 [ 148.162597][ T7107] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 148.162610][ T7107] CPU: 1 PID: 7107 Comm: syz.1.379 Not tainted syzkaller #0 [ 148.162630][ T7107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 148.162641][ T7107] Call Trace: [ 148.162650][ T7107] [ 148.162659][ T7107] dump_stack_lvl+0x16c/0x230 [ 148.162696][ T7107] ? show_regs_print_info+0x20/0x20 [ 148.162726][ T7107] ? load_image+0x3b0/0x3b0 [ 148.162762][ T7107] panic+0x2c0/0x710 [ 148.162788][ T7107] ? bpf_jit_dump+0xd0/0xd0 [ 148.162837][ T7107] __warn+0x2e0/0x470 [ 148.162861][ T7107] ? __alloc_pages+0x2de/0x460 [ 148.162901][ T7107] ? __alloc_pages+0x2de/0x460 [ 148.162934][ T7107] report_bug+0x2be/0x4f0 [ 148.162970][ T7107] ? __alloc_pages+0x2de/0x460 [ 148.163006][ T7107] ? __alloc_pages+0x2de/0x460 [ 148.163045][ T7107] ? __alloc_pages+0x2e0/0x460 [ 148.163079][ T7107] handle_bug+0xcf/0x120 [ 148.163112][ T7107] exc_invalid_op+0x1a/0x50 [ 148.163145][ T7107] asm_exc_invalid_op+0x1a/0x20 [ 148.163171][ T7107] RIP: 0010:__alloc_pages+0x2de/0x460 [ 148.163209][ T7107] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 2e ff 63 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 148.163227][ T7107] RSP: 0018:ffffc9000dfefa00 EFLAGS: 00010246 [ 148.163250][ T7107] RAX: ffffc9000dfefa00 RBX: 1ffff92001bfdf44 RCX: 0000000000000000 [ 148.163267][ T7107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000dfefa68 [ 148.163283][ T7107] RBP: ffffc9000dfefb00 R08: ffffc9000dfefa67 R09: 0000000000000000 [ 148.163300][ T7107] R10: ffffc9000dfefa40 R11: fffff52001bfdf4d R12: 0000000000000013 [ 148.163317][ T7107] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000 [ 148.163354][ T7107] ? zone_statistics+0x170/0x170 [ 148.163400][ T7107] ? __might_fault+0xaa/0x120 [ 148.163423][ T7107] ? __lock_acquire+0x7c80/0x7c80 [ 148.163453][ T7107] __kmalloc_large_node+0x8c/0x1e0 [ 148.163491][ T7107] ? raw_ioctl+0x1944/0x3b70 [ 148.163513][ T7107] __kmalloc+0x111/0x240 [ 148.163549][ T7107] raw_ioctl+0x1944/0x3b70 [ 148.163572][ T7107] ? tomoyo_path_number_perm+0x477/0x590 [ 148.163606][ T7107] ? __kmem_cache_free+0xba/0x1f0 [ 148.163647][ T7107] ? tomoyo_path_number_perm+0x4dc/0x590 [ 148.163678][ T7107] ? tomoyo_path_number_perm+0x1ba/0x590 [ 148.163714][ T7107] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 148.163748][ T7107] ? make_qualifier+0x250/0x250 [ 148.163817][ T7107] ? __fget_files+0x28/0x4d0 [ 148.163861][ T7107] ? bpf_lsm_file_ioctl+0x9/0x10 [ 148.163885][ T7107] ? security_file_ioctl+0x80/0xa0 [ 148.163917][ T7107] ? make_qualifier+0x250/0x250 [ 148.163943][ T7107] __se_sys_ioctl+0xfd/0x170 [ 148.163975][ T7107] do_syscall_64+0x55/0xb0 [ 148.164005][ T7107] ? clear_bhb_loop+0x40/0x90 [ 148.164031][ T7107] ? clear_bhb_loop+0x40/0x90 [ 148.164059][ T7107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.164084][ T7107] RIP: 0033:0x7f1d33b8f749 [ 148.164104][ T7107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.164123][ T7107] RSP: 002b:00007f1d34aaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.164146][ T7107] RAX: ffffffffffffffda RBX: 00007f1d33de5fa0 RCX: 00007f1d33b8f749 [ 148.164164][ T7107] RDX: 00002000000000c0 RSI: 00000000c0085508 RDI: 0000000000000003 [ 148.164179][ T7107] RBP: 00007f1d33c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 148.164193][ T7107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.164208][ T7107] R13: 00007f1d33de6038 R14: 00007f1d33de5fa0 R15: 00007fff42aed008 [ 148.164242][ T7107] [ 148.171051][ T7107] Kernel Offset: disabled