last executing test programs: 4.727950302s ago: executing program 3 (id=374): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) getegid() 4.606972464s ago: executing program 1 (id=376): r0 = io_uring_setup(0x178e, &(0x7f00000000c0)={0x0, 0x52c1}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240)={0x27, r2, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abfe0055acc8ef039a5be42200000000000000000100", 0x38}, 0x60) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x4528}], 0x1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.59175292s ago: executing program 3 (id=377): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) pivot_root(&(0x7f0000000180)='./file0/file0\x00', 0x0) 4.301336116s ago: executing program 3 (id=382): r0 = socket(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, 0x0, &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) io_setup(0x200, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) 4.300109392s ago: executing program 0 (id=392): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0xa8, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x72, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) 4.178161466s ago: executing program 0 (id=385): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0xffffffffffffff7d, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x178}, 0x18) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 3.048228982s ago: executing program 1 (id=387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0xffffffffffffff20, &(0x7f00000002c0)={&(0x7f0000001740)={0x2c, r2, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) 2.895001253s ago: executing program 0 (id=389): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000005980)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000040a0102"], 0x14}}, 0x0) name_to_handle_at(r2, &(0x7f0000004740)='\x00', 0x0, 0x0, 0x1200) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'gre0\x00'}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x18) socket$packet(0x11, 0x2, 0x300) r6 = socket$netlink(0x10, 0x3, 0x14) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0x38}}, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@private1, @private2, [0x0, 0xffffff00], [0xffffffff, 0xff, 0x0, 0xffffff00], 'gre0\x00', 'veth0\x00', {}, {0xff}, 0x87, 0xe, 0x6, 0x9}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x4, 0x0, 0x2001000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x401, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) socket$inet6(0xa, 0x3, 0x3c) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 2.659712188s ago: executing program 1 (id=391): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xff2e) 2.325542068s ago: executing program 4 (id=393): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) 2.0662794s ago: executing program 0 (id=395): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYBLOB="6ec61eeb6d8210a7a3577fab1132f1b1cd64ac0be48d27247e3c1e367db92bcf6ae1ec88e0770172661efe0210938148fc81ad7963006a4bc088"], 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}, 0x1, 0xba01}, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r7, 0x1, &(0x7f00000012c0)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)="0500000093cb1faf16da39de706f646800580f02000000003f420f0000000000ff030f02000000003f420f00000000003bf81b05ff000000", 0x38}]) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x2, 0x4) 1.673158104s ago: executing program 3 (id=397): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000030400000000fcffffff00000400", @ANYRES32=0x0, @ANYBLOB="61040100000000002c0012800b00010067656e65766500001c000280050008000100000006000500"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x44004) 1.603991328s ago: executing program 0 (id=398): r0 = io_uring_setup(0x178e, &(0x7f00000000c0)={0x0, 0x52c1}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240)={0x27, r2, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abfe0055acc8ef039a5be42200000000000000000100", 0x38}, 0x60) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x4528}], 0x1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.589406409s ago: executing program 1 (id=399): r0 = io_uring_setup(0x178e, &(0x7f00000000c0)={0x0, 0x52c1}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240)={0x27, r2, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abfe0055acc8ef039a5be42200000000000000000100", 0x38}, 0x60) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x4528}], 0x1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.459833801s ago: executing program 4 (id=401): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 1.312293824s ago: executing program 4 (id=403): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0xffffffffffffff20, &(0x7f00000002c0)={&(0x7f0000001740)={0x2c, r0, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) 1.241176563s ago: executing program 3 (id=404): add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000540)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@mblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0x75a}}, {@data_ordered}, {@debug}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xa219}}]}, 0xea, 0x579, &(0x7f0000001480)="$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") add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r1, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc) 1.159010093s ago: executing program 4 (id=405): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085000000500000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) getegid() 1.071455059s ago: executing program 4 (id=407): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) tkill(0x0, 0x12) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x82cdf294989d1694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0xff, 0x2, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) readv(r2, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'geneve1\x00'}) 922.071835ms ago: executing program 2 (id=409): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 830.805123ms ago: executing program 2 (id=410): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) syz_open_dev$sg(0x0, 0x0, 0x181801) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) 665.070822ms ago: executing program 2 (id=411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) 664.147955ms ago: executing program 1 (id=412): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 604.446832ms ago: executing program 0 (id=413): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r2 = dup2(r1, r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) close_range(r3, 0xffffffffffffffff, 0x0) 509.630514ms ago: executing program 2 (id=414): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) getuid() syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x24c, &(0x7f0000000780)="$eJzs3TGIHFUcBvBvZndNLllC1EYQoyAiGjhiJ9jERiEgIYgIKkREbJRECAl2OSsbC61VrrI5xM7TUq45bBTB6tQrzkbQw8LDQouV2dnV427F011mxPn9YJiZu5n3f4+Z7802wwTorNNJzifpJTmbZJCk2H/APfVyerK7urR5ORmNnvypGB9X79em551MspLk4SQbZZGX+8mN9Wd3ftl6/P43rw/ue3/9maVGBzmxu7P9xN57F9/46MJDN7746oeLRc5nOB3XmT/HMXFqETWLGX/rF8lti2j8P6rot90DjuLSax9+XeX+9iT3jvM/SJn64r117ZaNQR5896/OffvHL+9ssq/A4o1Gg+oZuDICOqdMMkxRLiept8tyebn+Df9N70T5ytVrOf7S1etXXmx7pgIWZZhsP/bJsY9PHsj/9706/8D/V5X/py6tfVtt7/Xa7g3QiLvqVZX/s8/ffCDyD50j/9Bd8g/dJf/QXUfL//FG+wQ0w/Mfukv+obvkH7pL/qG75B+6a3/+AYBuGR1r+w1koC1tzz8AAAAAAAAAAAAAAAAAAMBhq0ubl6dLUzU/eyfZfTRJf1b93vh7xNNvEJz4uagO+0NRnzaX5+6es4E5fdDy29envmu3/udn2q1/80qy8nqSc/3+4fuvmNx//96tf/P/wQtzFviHigP7jzzdbP2Dfltrt/6FreTTav45N2v+KXPHeD17/hlW12/O+q/+OmcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANOb3AAAA//9+Bmzb") mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00002ce000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mlock(&(0x7f0000bfc000/0x3000)=nil, 0x3000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 353.360163ms ago: executing program 2 (id=415): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000000), 0xfd, 0x244, &(0x7f0000000680)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x103842, 0x0) pwritev2(r1, &(0x7f0000000200)=[{&(0x7f0000000600)="a7", 0x1}], 0x1, 0x800008, 0xe1c5, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000240)={0x3920e, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x3}) 247.88519ms ago: executing program 3 (id=416): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES16=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000580)='vnet_tx_trigger\x00', 0xffffffffffffffff, 0x0, 0x800000000000}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff1811", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) r4 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000680)="03", 0x1}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0x884) sendmmsg$inet_sctp(r4, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000002002b0388edb6556900"/50, @ANYRES32=0x0], 0x30}], 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0}, 0x18) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r5) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24008050) setuid(0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r7, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) unshare(0x2040400) r9 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 174.890912ms ago: executing program 1 (id=417): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000005980)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000040a0102"], 0x14}}, 0x0) name_to_handle_at(r2, &(0x7f0000004740)='\x00', 0x0, 0x0, 0x1200) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'gre0\x00'}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x18) socket$packet(0x11, 0x2, 0x300) r6 = socket$netlink(0x10, 0x3, 0x14) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0x38}}, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@private1, @private2, [0x0, 0xffffff00], [0xffffffff, 0xff, 0x0, 0xffffff00], 'gre0\x00', 'veth0\x00', {}, {0xff}, 0x87, 0xe, 0x6, 0x9}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x4, 0x0, 0x2001000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x401, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) socket$inet6(0xa, 0x3, 0x3c) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 87.191544ms ago: executing program 4 (id=418): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085000000500000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) getegid() 0s ago: executing program 2 (id=419): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.181' (ED25519) to the list of known hosts. [ 81.981106][ T5817] cgroup: Unknown subsys name 'net' [ 82.113581][ T5817] cgroup: Unknown subsys name 'cpuset' [ 82.126079][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.697795][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.537905][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.546574][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.554351][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.563939][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.571569][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.581712][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.589231][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.597059][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.604619][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.609684][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.613714][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.628298][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.636987][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.642885][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.645072][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.653678][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.662210][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.666435][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.673926][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.680158][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.686793][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.694542][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.702748][ T5142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.710063][ T5848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 86.717914][ T5142] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.721397][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.737023][ T5142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.745068][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.745450][ T5142] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.762751][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.515078][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 87.618958][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 87.736866][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 87.902457][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 87.994665][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.003310][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.012572][ T5829] bridge_slave_0: entered allmulticast mode [ 88.020110][ T5829] bridge_slave_0: entered promiscuous mode [ 88.103156][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.110619][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.118706][ T5829] bridge_slave_1: entered allmulticast mode [ 88.126214][ T5829] bridge_slave_1: entered promiscuous mode [ 88.224532][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 88.239339][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.247221][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.254387][ T5834] bridge_slave_0: entered allmulticast mode [ 88.261949][ T5834] bridge_slave_0: entered promiscuous mode [ 88.277414][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.284582][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.292198][ T5830] bridge_slave_0: entered allmulticast mode [ 88.300558][ T5830] bridge_slave_0: entered promiscuous mode [ 88.334918][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.344373][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.351998][ T5834] bridge_slave_1: entered allmulticast mode [ 88.361262][ T5834] bridge_slave_1: entered promiscuous mode [ 88.374468][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.381902][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.389676][ T5830] bridge_slave_1: entered allmulticast mode [ 88.397814][ T5830] bridge_slave_1: entered promiscuous mode [ 88.409974][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.515997][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.585529][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.593294][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.601208][ T5831] bridge_slave_0: entered allmulticast mode [ 88.610467][ T5831] bridge_slave_0: entered promiscuous mode [ 88.621135][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.652192][ T5829] team0: Port device team_slave_0 added [ 88.670789][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.680740][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.688761][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.695954][ T5831] bridge_slave_1: entered allmulticast mode [ 88.703814][ T5831] bridge_slave_1: entered promiscuous mode [ 88.713922][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.744417][ T5829] team0: Port device team_slave_1 added [ 88.775132][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.798037][ T5142] Bluetooth: hci1: command tx timeout [ 88.803901][ T5142] Bluetooth: hci0: command tx timeout [ 88.806446][ T5836] Bluetooth: hci3: command tx timeout [ 88.835878][ T5830] team0: Port device team_slave_0 added [ 88.848306][ T5830] team0: Port device team_slave_1 added [ 88.878415][ T5836] Bluetooth: hci2: command tx timeout [ 88.878424][ T5142] Bluetooth: hci4: command tx timeout [ 88.912589][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.990156][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.004323][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.011852][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.038184][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.072179][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.079492][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.088391][ T5835] bridge_slave_0: entered allmulticast mode [ 89.095690][ T5835] bridge_slave_0: entered promiscuous mode [ 89.108751][ T5834] team0: Port device team_slave_0 added [ 89.128166][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.135148][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.161801][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.173934][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.184327][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.211621][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.223050][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.231018][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.238537][ T5835] bridge_slave_1: entered allmulticast mode [ 89.245760][ T5835] bridge_slave_1: entered promiscuous mode [ 89.271598][ T5834] team0: Port device team_slave_1 added [ 89.303881][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.311695][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.338802][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.385830][ T5831] team0: Port device team_slave_0 added [ 89.395859][ T5831] team0: Port device team_slave_1 added [ 89.414707][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.442066][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.449442][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.479464][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.525889][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.533036][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.559006][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.573044][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.627817][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.634800][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.660816][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.674221][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.681292][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.707318][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.784380][ T5829] hsr_slave_0: entered promiscuous mode [ 89.791676][ T5829] hsr_slave_1: entered promiscuous mode [ 89.844378][ T5835] team0: Port device team_slave_0 added [ 89.861028][ T5830] hsr_slave_0: entered promiscuous mode [ 89.868760][ T5830] hsr_slave_1: entered promiscuous mode [ 89.874957][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.882834][ T5830] Cannot create hsr debugfs directory [ 89.893011][ T5835] team0: Port device team_slave_1 added [ 90.052042][ T5831] hsr_slave_0: entered promiscuous mode [ 90.059323][ T5831] hsr_slave_1: entered promiscuous mode [ 90.065554][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.073272][ T5831] Cannot create hsr debugfs directory [ 90.128628][ T5834] hsr_slave_0: entered promiscuous mode [ 90.135037][ T5834] hsr_slave_1: entered promiscuous mode [ 90.142723][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.150361][ T5834] Cannot create hsr debugfs directory [ 90.209188][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.216164][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.243175][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.256553][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.263533][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.289588][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.536551][ T5835] hsr_slave_0: entered promiscuous mode [ 90.543289][ T5835] hsr_slave_1: entered promiscuous mode [ 90.549793][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.557891][ T5835] Cannot create hsr debugfs directory [ 90.876681][ T5836] Bluetooth: hci3: command tx timeout [ 90.877538][ T5142] Bluetooth: hci0: command tx timeout [ 90.882109][ T5836] Bluetooth: hci1: command tx timeout [ 90.956530][ T5836] Bluetooth: hci4: command tx timeout [ 90.956568][ T5142] Bluetooth: hci2: command tx timeout [ 91.012254][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.025224][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.079688][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.115272][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.188375][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.204386][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.221712][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.250338][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.332313][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.359355][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.383760][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.434934][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.518273][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.547639][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.567877][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.583988][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.724535][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.759916][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.774575][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.785525][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.884179][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.911739][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.982816][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.047938][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.060659][ T1257] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.068008][ T1257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.092602][ T4467] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.099829][ T4467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.118248][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.184449][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.191624][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.230256][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.241722][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.248966][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.273283][ T23] cfg80211: failed to load regulatory.db [ 92.350261][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.403093][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.434201][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.445221][ T4467] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.452386][ T4467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.509591][ T4467] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.516861][ T4467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.541819][ T4467] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.549177][ T4467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.602723][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.621062][ T4467] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.628357][ T4467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.740733][ T4467] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.747983][ T4467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.808534][ T4467] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.815770][ T4467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.860265][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.959079][ T5142] Bluetooth: hci0: command tx timeout [ 92.959299][ T5836] Bluetooth: hci3: command tx timeout [ 92.964514][ T5142] Bluetooth: hci1: command tx timeout [ 92.977302][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.037625][ T54] Bluetooth: hci4: command tx timeout [ 93.043173][ T5142] Bluetooth: hci2: command tx timeout [ 93.114000][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.276564][ T5829] veth0_vlan: entered promiscuous mode [ 93.377296][ T5829] veth1_vlan: entered promiscuous mode [ 93.469337][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.491687][ T5831] veth0_vlan: entered promiscuous mode [ 93.570506][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.581641][ T5831] veth1_vlan: entered promiscuous mode [ 93.607711][ T5829] veth0_macvtap: entered promiscuous mode [ 93.652552][ T5829] veth1_macvtap: entered promiscuous mode [ 93.666161][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.755522][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.814643][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.833584][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.844517][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.856227][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.865748][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.885743][ T5831] veth0_macvtap: entered promiscuous mode [ 93.962747][ T5834] veth0_vlan: entered promiscuous mode [ 93.976174][ T5831] veth1_macvtap: entered promiscuous mode [ 94.042489][ T5835] veth0_vlan: entered promiscuous mode [ 94.069792][ T5834] veth1_vlan: entered promiscuous mode [ 94.109239][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.120959][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.134232][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.152187][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.163446][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.176511][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.189313][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.198757][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.209668][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.218550][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.255108][ T5835] veth1_vlan: entered promiscuous mode [ 94.311865][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.333691][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.395100][ T5830] veth0_vlan: entered promiscuous mode [ 94.444010][ T5830] veth1_vlan: entered promiscuous mode [ 94.472080][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.475560][ T5834] veth0_macvtap: entered promiscuous mode [ 94.502599][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.533909][ T5834] veth1_macvtap: entered promiscuous mode [ 94.589795][ T5835] veth0_macvtap: entered promiscuous mode [ 94.630047][ T5830] veth0_macvtap: entered promiscuous mode [ 94.661630][ T5835] veth1_macvtap: entered promiscuous mode [ 94.694023][ T5830] veth1_macvtap: entered promiscuous mode [ 94.695911][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.725285][ T4467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.739947][ T4467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.789399][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.802178][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.812831][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.823961][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.840569][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.865726][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.879895][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.892067][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.903983][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.915614][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.931695][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.944599][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.993217][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.016671][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.027396][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.037849][ T5142] Bluetooth: hci1: command tx timeout [ 95.043299][ T5142] Bluetooth: hci3: command tx timeout [ 95.048903][ T54] Bluetooth: hci0: command tx timeout [ 95.061365][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.072108][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.083628][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.100381][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.110448][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.122290][ T5836] Bluetooth: hci2: command tx timeout [ 95.122344][ T5836] Bluetooth: hci4: command tx timeout [ 95.135782][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.146047][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.157224][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.167917][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.178795][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.188969][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.203508][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.216038][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.233753][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.249795][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.260229][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.271911][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.282871][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.295324][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.311135][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.331233][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.340583][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.352394][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.368133][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.400619][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.416530][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.429468][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.442272][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.452710][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.463668][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.473986][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.484972][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.499304][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.531147][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.556027][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.576861][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.585607][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.655183][ T5830] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.669881][ T5830] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.683724][ T5830] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.693633][ T5830] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.893936][ T5925] sctp: [Deprecated]: syz.1.2 (pid 5925) Use of int in max_burst socket option. [ 95.893936][ T5925] Use struct sctp_assoc_value instead [ 96.014877][ T1257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.040505][ T1257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.159126][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.174050][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.225072][ T1257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.255342][ T1257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.366125][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.391638][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.439917][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.492395][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.564643][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.604242][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.625012][ T29] audit: type=1326 audit(1740265440.957:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702c18d169 code=0x7ffc0000 [ 96.717211][ T29] audit: type=1326 audit(1740265440.997:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f702c18d169 code=0x7ffc0000 [ 96.754697][ T29] audit: type=1326 audit(1740265440.997:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702c18d169 code=0x7ffc0000 [ 97.222846][ T5941] vlan2: entered allmulticast mode [ 97.256714][ T5941] bond0: entered allmulticast mode [ 97.261889][ T5941] bond_slave_0: entered allmulticast mode [ 97.272401][ T5943] rdma_op ffff88802802d9f0 conn xmit_rdma 0000000000000000 [ 97.331517][ T5941] bond_slave_1: entered allmulticast mode [ 97.417825][ T5941] bridge0: port 3(vlan2) entered blocking state [ 97.496188][ T5941] bridge0: port 3(vlan2) entered disabled state [ 97.539636][ T5941] vlan2: entered promiscuous mode [ 97.544725][ T5941] bond0: entered promiscuous mode [ 97.563843][ T5951] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8'. [ 97.626999][ T5941] bond_slave_0: entered promiscuous mode [ 97.664795][ T5941] bond_slave_1: entered promiscuous mode [ 97.700235][ T5941] bridge0: port 3(vlan2) entered blocking state [ 97.707013][ T5941] bridge0: port 3(vlan2) entered forwarding state [ 97.739041][ T5950] loop0: detected capacity change from 0 to 2048 [ 97.861103][ T5950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.940686][ T29] audit: type=1804 audit(1740265442.277:5): pid=5950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.11" name="/newroot/1/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 98.077819][ T29] audit: type=1804 audit(1740265442.377:6): pid=5950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.11" name="/newroot/1/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 98.333219][ T5960] netlink: 8280 bytes leftover after parsing attributes in process `syz.4.13'. [ 98.462420][ T5960] netlink: 8280 bytes leftover after parsing attributes in process `syz.4.13'. [ 98.621195][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.777462][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 99.125440][ T5978] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17'. [ 99.528718][ T5975] netlink: 'syz.1.20': attribute type 6 has an invalid length. [ 100.067220][ T29] audit: type=1326 audit(1740265444.407:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8d38d169 code=0x7ffc0000 [ 100.213024][ T29] audit: type=1326 audit(1740265444.547:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb8d38d169 code=0x7ffc0000 [ 100.362127][ T29] audit: type=1326 audit(1740265444.547:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8d38d169 code=0x7ffc0000 [ 100.562688][ T29] audit: type=1326 audit(1740265444.547:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8d38d169 code=0x7ffc0000 [ 100.718476][ T29] audit: type=1326 audit(1740265444.777:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fbb8d38d169 code=0x7ffc0000 [ 102.015842][ T6012] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.151800][ T6013] loop2: detected capacity change from 0 to 1024 [ 102.229747][ T6013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.466674][ T6019] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 102.496802][ T6019] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 172 with error 28 [ 102.551814][ T6019] EXT4-fs (loop2): This should not happen!! Data will be lost [ 102.551814][ T6019] [ 102.608249][ T6019] EXT4-fs (loop2): Total free blocks count 0 [ 102.640005][ T6019] EXT4-fs (loop2): Free/Dirty block details [ 102.684842][ T6019] EXT4-fs (loop2): free_blocks=68451041280 [ 102.706189][ T6019] EXT4-fs (loop2): dirty_blocks=848 [ 102.766388][ T6019] EXT4-fs (loop2): Block reservation details [ 102.843266][ T6019] EXT4-fs (loop2): i_reserved_data_blocks=72 [ 103.354122][ T5979] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 172 with max blocks 1256 with error 28 [ 103.429383][ T6029] netlink: 'syz.4.40': attribute type 10 has an invalid length. [ 103.540873][ T6033] loop0: detected capacity change from 0 to 1024 [ 103.561923][ T6029] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.687930][ T6029] bond0: (slave team0): Enslaving as an active interface with an up link [ 103.749071][ T6033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.834779][ T6034] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:74f2:2bff:fef2:828b error=-28 [ 103.915235][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 103.915252][ T29] audit: type=1800 audit(1740265448.247:17): pid=6033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.41" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 104.267068][ T6047] loop1: detected capacity change from 0 to 512 [ 104.288420][ T6047] ======================================================= [ 104.288420][ T6047] WARNING: The mand mount option has been deprecated and [ 104.288420][ T6047] and is ignored by this kernel. Remove the mand [ 104.288420][ T6047] option from the mount to silence this warning. [ 104.288420][ T6047] ======================================================= [ 104.388263][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.506754][ T6047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.568543][ T6047] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.779379][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.882644][ T6060] loop2: detected capacity change from 0 to 2048 [ 105.114533][ T6060] Alternate GPT is invalid, using primary GPT. [ 105.157877][ T6060] loop2: p2 p3 p7 [ 105.525036][ T6034] infiniband syz1: set active [ 105.558476][ T6034] infiniband syz1: added team_slave_0 [ 105.587001][ T6034] syz1: rxe_create_cq: returned err = -12 [ 105.593275][ T6034] infiniband syz1: Couldn't create ib_mad CQ [ 105.606751][ T6080] ipvlan2: entered promiscuous mode [ 105.624175][ T6034] infiniband syz1: Couldn't open port 1 [ 105.650851][ T6083] loop0: detected capacity change from 0 to 128 [ 105.675328][ T6083] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 105.734959][ T6034] RDS/IB: syz1: added [ 105.740123][ T6034] smc: adding ib device syz1 with port count 1 [ 105.747790][ T6034] smc: ib device syz1 port 1 has pnetid [ 105.791293][ T6083] loop0: detected capacity change from 0 to 128 [ 105.913501][ T6083] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.933427][ T6083] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.958655][ T6090] netlink: 300 bytes leftover after parsing attributes in process `syz.3.60'. [ 106.128784][ T29] audit: type=1326 audit(1740265450.467:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95e58d169 code=0x7ffc0000 [ 106.204066][ T6101] netlink: 44 bytes leftover after parsing attributes in process `syz.1.64'. [ 106.236529][ T29] audit: type=1326 audit(1740265450.467:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95e58d169 code=0x7ffc0000 [ 106.261862][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'. [ 106.323217][ T29] audit: type=1326 audit(1740265450.467:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fd95e58d169 code=0x7ffc0000 [ 106.386376][ T29] audit: type=1326 audit(1740265450.467:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95e58d169 code=0x7ffc0000 [ 106.446375][ T29] audit: type=1326 audit(1740265450.467:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd95e58d169 code=0x7ffc0000 [ 106.516370][ T29] audit: type=1326 audit(1740265450.467:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95e58d169 code=0x7ffc0000 [ 106.587232][ T29] audit: type=1326 audit(1740265450.467:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd95e58d169 code=0x7ffc0000 [ 106.656368][ T29] audit: type=1326 audit(1740265450.467:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95e58d169 code=0x7ffc0000 [ 106.716703][ T29] audit: type=1326 audit(1740265450.467:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd95e58d169 code=0x7ffc0000 [ 106.838041][ T6113] loop1: detected capacity change from 0 to 1024 [ 106.887468][ T6117] usb usb8: usbfs: process 6117 (syz.3.71) did not claim interface 0 before use [ 106.903672][ T6113] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.133140][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.247518][ T6126] syz.2.76 uses obsolete (PF_INET,SOCK_PACKET) [ 107.358165][ T6130] loop1: detected capacity change from 0 to 128 [ 107.382561][ T6130] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.438722][ T6130] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.525467][ T5831] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.234263][ T6168] vlan2: entered allmulticast mode [ 109.265408][ T6170] loop2: detected capacity change from 0 to 128 [ 109.271922][ T6168] bond0: entered allmulticast mode [ 109.278966][ T6168] bond_slave_0: entered allmulticast mode [ 109.284853][ T6168] bond_slave_1: entered allmulticast mode [ 109.292931][ T6168] bridge0: port 3(vlan2) entered blocking state [ 109.299519][ T6168] bridge0: port 3(vlan2) entered disabled state [ 109.330063][ T6168] vlan2: entered promiscuous mode [ 109.335673][ T6168] bond0: entered promiscuous mode [ 109.347472][ T6168] bond_slave_0: entered promiscuous mode [ 109.367865][ T6168] bond_slave_1: entered promiscuous mode [ 109.368693][ T6170] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.377597][ T6168] bridge0: port 3(vlan2) entered blocking state [ 109.392065][ T6168] bridge0: port 3(vlan2) entered forwarding state [ 109.408578][ T6170] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.537765][ T29] kauditd_printk_skb: 358 callbacks suppressed [ 109.537782][ T29] audit: type=1800 audit(1740265453.877:385): pid=6170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.95" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 109.621973][ T29] audit: type=1800 audit(1740265453.917:386): pid=6170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.95" name="file2" dev="loop2" ino=13 res=0 errno=0 [ 109.692629][ T29] audit: type=1326 audit(1740265454.007:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.3.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8d38d169 code=0x7ffc0000 [ 109.751820][ T29] audit: type=1326 audit(1740265454.007:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.3.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8d38d169 code=0x7ffc0000 [ 109.806489][ T29] audit: type=1326 audit(1740265454.017:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.3.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fbb8d38d169 code=0x7ffc0000 [ 109.856489][ T29] audit: type=1326 audit(1740265454.017:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.3.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8d38d169 code=0x7ffc0000 [ 109.888955][ T29] audit: type=1326 audit(1740265454.017:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.3.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8d38d169 code=0x7ffc0000 [ 109.985056][ T29] audit: type=1326 audit(1740265454.047:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.3.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fbb8d38d169 code=0x7ffc0000 [ 110.039838][ T29] audit: type=1326 audit(1740265454.047:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.3.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8d38d169 code=0x7ffc0000 [ 110.155989][ T29] audit: type=1326 audit(1740265454.057:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.3.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8d38d169 code=0x7ffc0000 [ 110.751021][ T5829] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.952012][ T6200] loop3: detected capacity change from 0 to 1024 [ 110.978151][ T6201] loop1: detected capacity change from 0 to 512 [ 111.050983][ T6201] EXT4-fs warning (device loop1): ext4_enable_quotas:7130: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 111.061626][ T6200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.090396][ T6201] EXT4-fs (loop1): mount failed [ 111.135319][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 111.184058][ T6200] netlink: 'syz.3.108': attribute type 13 has an invalid length. [ 111.245228][ T6213] loop4: detected capacity change from 0 to 2048 [ 111.304104][ T6213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.428687][ T6200] bridge0: port 3(vlan2) entered disabled state [ 111.435627][ T6200] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.445185][ T6200] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.502436][ T5835] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.567703][ T6222] loop2: detected capacity change from 0 to 128 [ 111.603968][ T6200] bond0: left allmulticast mode [ 111.624133][ T6222] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.637563][ T6200] bond_slave_0: left allmulticast mode [ 111.653648][ T6200] bond_slave_1: left allmulticast mode [ 111.665067][ T6200] bond0: left promiscuous mode [ 111.693312][ T6200] bond_slave_0: left promiscuous mode [ 111.700272][ T6200] bond_slave_1: left promiscuous mode [ 111.707071][ T6222] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.132062][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.133345][ T6200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.176117][ T6200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.407685][ T6200] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.425774][ T6200] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.434857][ T6200] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.450310][ T6200] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.693265][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.913859][ T6251] loop1: detected capacity change from 0 to 512 [ 112.924918][ T5829] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.980282][ T6251] EXT4-fs warning (device loop1): ext4_enable_quotas:7130: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 113.017670][ T6251] EXT4-fs (loop1): mount failed [ 113.042007][ T6256] loop0: detected capacity change from 0 to 128 [ 113.054824][ T6259] loop2: detected capacity change from 0 to 2048 [ 113.076726][ T6256] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 113.103269][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.124'. [ 113.135718][ T6259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.391657][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.427246][ T6274] loop0: detected capacity change from 0 to 2048 [ 113.555338][ T6274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.623781][ T6284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.135'. [ 114.265186][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.406970][ T6315] loop4: detected capacity change from 0 to 512 [ 114.455732][ T6315] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.150: casefold flag without casefold feature [ 114.523976][ T6315] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.150: couldn't read orphan inode 15 (err -117) [ 114.580392][ T29] kauditd_printk_skb: 786 callbacks suppressed [ 114.580410][ T29] audit: type=1326 audit(1740265458.917:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6326 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb8d3bfa25 code=0x7ffc0000 [ 114.588457][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.151'. [ 114.622814][ T6315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.667860][ T29] audit: type=1326 audit(1740265458.917:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8d38d169 code=0x7ffc0000 [ 114.697572][ T29] audit: type=1326 audit(1740265458.917:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8d38d169 code=0x7ffc0000 [ 114.772547][ T29] audit: type=1326 audit(1740265458.987:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fbb8d38d169 code=0x7ffc0000 [ 114.815648][ T29] audit: type=1326 audit(1740265458.987:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8d38d169 code=0x7ffc0000 [ 114.821304][ T6331] capability: warning: `syz.0.155' uses 32-bit capabilities (legacy support in use) [ 114.847247][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.888680][ T29] audit: type=1326 audit(1740265458.987:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb8d329359 code=0x7ffc0000 [ 114.888801][ T29] audit: type=1326 audit(1740265458.987:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fbb8d38d169 code=0x7ffc0000 [ 114.923174][ T6331] syz.0.155 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 114.965605][ T29] audit: type=1326 audit(1740265458.987:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8d38d169 code=0x7ffc0000 [ 114.989504][ T29] audit: type=1326 audit(1740265459.057:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6326 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fbb8d3bfa25 code=0x7ffc0000 [ 115.012747][ T29] audit: type=1326 audit(1740265459.067:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6326 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fbb8d38d169 code=0x7ffc0000 [ 115.236470][ T6339] loop3: detected capacity change from 0 to 2048 [ 115.638469][ T6339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.052943][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.359771][ T46] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.393268][ T6373] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 116.396025][ T5886] IPVS: starting estimator thread 0... [ 116.404467][ T6377] netlink: 80 bytes leftover after parsing attributes in process `syz.4.173'. [ 116.520841][ T6379] IPVS: using max 27 ests per chain, 64800 per kthread [ 116.663381][ T46] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 116.703132][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.737060][ T46] usb 1-1: Product: syz [ 116.747601][ T46] usb 1-1: Manufacturer: syz [ 116.752254][ T46] usb 1-1: SerialNumber: syz [ 116.829800][ T6386] vlan2: entered allmulticast mode [ 116.834982][ T6386] bond0: entered allmulticast mode [ 116.853156][ T46] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 116.859821][ T6393] netlink: 28 bytes leftover after parsing attributes in process `syz.4.179'. [ 116.870560][ T6386] bond_slave_0: entered allmulticast mode [ 116.886161][ T6386] bond_slave_1: entered allmulticast mode [ 116.907203][ T6386] bridge0: port 3(vlan2) entered blocking state [ 116.928779][ T6386] bridge0: port 3(vlan2) entered disabled state [ 116.941113][ T5820] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 116.949610][ T6386] vlan2: entered promiscuous mode [ 116.965529][ T6386] bond0: entered promiscuous mode [ 116.978346][ T6386] bond_slave_0: entered promiscuous mode [ 116.999560][ T6386] bond_slave_1: entered promiscuous mode [ 117.023505][ T6386] bridge0: port 3(vlan2) entered blocking state [ 117.030048][ T6386] bridge0: port 3(vlan2) entered forwarding state [ 117.064581][ T6396] loop3: detected capacity change from 0 to 2048 [ 117.121131][ T6396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.236090][ T46] usb 1-1: USB disconnect, device number 2 [ 117.452778][ T6409] netlink: 80 bytes leftover after parsing attributes in process `syz.1.185'. [ 117.479287][ T6411] loop4: detected capacity change from 0 to 512 [ 117.533646][ T6411] EXT4-fs: Ignoring removed bh option [ 117.560269][ T6411] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 117.576472][ T6411] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 117.610230][ T6411] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 117.633656][ T6411] EXT4-fs (loop4): 1 truncate cleaned up [ 117.652621][ T6411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.728213][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.868839][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.082696][ T5820] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 118.105056][ T5820] ath9k_htc: Failed to initialize the device [ 118.117072][ T46] usb 1-1: ath9k_htc: USB layer deinitialized [ 118.229509][ T6432] netlink: 'syz.4.195': attribute type 10 has an invalid length. [ 118.259560][ T6432] syz1: rxe_newlink: already configured on team_slave_0 [ 118.768913][ T6455] netem: change failed [ 118.899734][ T6458] loop4: detected capacity change from 0 to 2048 [ 118.930845][ T6437] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 118.991426][ T6458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.109465][ T6473] loop0: detected capacity change from 0 to 512 [ 119.192273][ T6473] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 119.246949][ T6473] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.320791][ T6484] netlink: 'syz.3.209': attribute type 10 has an invalid length. [ 119.351712][ T6484] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.382376][ T6484] bond0: (slave team0): Enslaving as an active interface with an up link [ 119.391934][ T6486] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 119.438910][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 119.590447][ T29] kauditd_printk_skb: 676 callbacks suppressed [ 119.590464][ T29] audit: type=1326 audit(1740265463.927:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6481 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd95e584127 code=0x7ffc0000 [ 119.628154][ T29] audit: type=1326 audit(1740265463.927:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6481 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd95e529359 code=0x7ffc0000 [ 119.655743][ T29] audit: type=1326 audit(1740265463.927:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6481 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fd95e58d169 code=0x7ffc0000 [ 119.725968][ T29] audit: type=1326 audit(1740265463.967:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6481 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd95e584127 code=0x7ffc0000 [ 119.739157][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.750883][ T29] audit: type=1326 audit(1740265463.967:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6481 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd95e529359 code=0x7ffc0000 [ 119.790634][ T29] audit: type=1326 audit(1740265463.967:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6481 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd95e584127 code=0x7ffc0000 [ 119.815193][ T29] audit: type=1326 audit(1740265463.967:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6481 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd95e529359 code=0x7ffc0000 [ 119.847312][ T29] audit: type=1326 audit(1740265463.967:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6481 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fd95e58d169 code=0x7ffc0000 [ 119.872666][ T29] audit: type=1326 audit(1740265463.997:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6481 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd95e584127 code=0x7ffc0000 [ 119.895958][ T29] audit: type=1326 audit(1740265463.997:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6481 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd95e529359 code=0x7ffc0000 [ 120.468356][ T6521] netlink: 'syz.0.222': attribute type 10 has an invalid length. [ 120.506968][ T6521] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.534537][ T6522] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 120.553484][ T6521] bond0: (slave team0): Enslaving as an active interface with an up link [ 121.104517][ T6510] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 121.111341][ T6510] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 121.152367][ T6510] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 121.167494][ T6510] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.207937][ T6510] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 121.250148][ T6510] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 121.278710][ T6510] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.290314][ T6510] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 121.301803][ T6510] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 121.315285][ T6510] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 121.326524][ T6510] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 121.353791][ T6510] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 121.373226][ T6510] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.386572][ T6510] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 121.416702][ T6510] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 122.157277][ T6566] loop0: detected capacity change from 0 to 8192 [ 122.270992][ T6566] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 122.285068][ T6570] netlink: 'syz.2.242': attribute type 10 has an invalid length. [ 122.307569][ T6566] FAT-fs (loop0): Filesystem has been set read-only [ 122.326015][ T6570] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.338118][ T6574] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 122.353933][ T6566] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 122.365620][ T6566] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 122.375852][ T6570] team0: entered promiscuous mode [ 122.382290][ T6570] team_slave_0: entered promiscuous mode [ 122.396563][ T5142] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.417953][ T6570] team_slave_1: entered promiscuous mode [ 122.423772][ T6566] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 122.442914][ T6570] team0: entered allmulticast mode [ 122.450160][ T6566] syz.0.238: attempt to access beyond end of device [ 122.450160][ T6566] loop0: rw=0, sector=35211, nr_sectors = 1 limit=8192 [ 122.466998][ T6570] team_slave_0: entered allmulticast mode [ 122.472780][ T6570] team_slave_1: entered allmulticast mode [ 122.502846][ T6566] Buffer I/O error on dev loop0, logical block 35211, async page read [ 122.512401][ T6570] bond0: (slave team0): Enslaving as an active interface with an up link [ 122.524223][ T6566] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 122.538378][ T6566] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 122.546550][ T6566] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 122.554568][ T6566] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 122.564642][ T6566] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 122.595036][ T6566] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 122.620239][ T6566] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 122.643174][ T6566] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 122.675535][ T6566] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 122.713927][ T6566] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 122.760930][ T6566] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 122.808502][ T6566] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 122.965580][ T6566] syz.0.238 (6566) used greatest stack depth: 17872 bytes left [ 123.037838][ T6591] Zero length message leads to an empty skb [ 123.208017][ T5142] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.358263][ T5142] Bluetooth: hci4: command 0x0c1a tx timeout [ 123.358274][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.437586][ T5142] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.546696][ T6613] vlan2: entered allmulticast mode [ 123.551871][ T6613] bond0: entered allmulticast mode [ 123.561465][ T6615] netlink: 'syz.1.256': attribute type 10 has an invalid length. [ 123.586433][ T6613] bond_slave_0: entered allmulticast mode [ 123.592225][ T6613] bond_slave_1: entered allmulticast mode [ 123.618146][ T6613] team0: entered allmulticast mode [ 123.626195][ T6622] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 123.650279][ T6613] team_slave_0: entered allmulticast mode [ 123.679789][ T6613] team_slave_1: entered allmulticast mode [ 123.784583][ T6615] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.805619][ T6615] team0: entered promiscuous mode [ 123.812331][ T6615] team_slave_0: entered promiscuous mode [ 123.823144][ T6615] team_slave_1: entered promiscuous mode [ 123.838436][ T6615] team0: entered allmulticast mode [ 123.843621][ T6615] team_slave_0: entered allmulticast mode [ 123.855288][ T6632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.258'. [ 123.896352][ T6615] team_slave_1: entered allmulticast mode [ 123.908216][ T6615] bond0: (slave team0): Enslaving as an active interface with an up link [ 123.933804][ T6632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.962935][ T6632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.032442][ T6634] netlink: 20 bytes leftover after parsing attributes in process `syz.2.260'. [ 124.303079][ T6647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'. [ 124.349768][ T6647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'. [ 124.465687][ T6654] sd 0:0:1:0: device reset [ 124.476626][ T5142] Bluetooth: hci0: command 0x0c1a tx timeout [ 124.592350][ T6662] netlink: 72 bytes leftover after parsing attributes in process `syz.4.274'. [ 124.710651][ T6666] Driver unsupported XDP return value 0 on prog (id 112) dev N/A, expect packet loss! [ 124.842773][ T6670] loop4: detected capacity change from 0 to 4096 [ 124.871430][ T6673] vlan3: entered promiscuous mode [ 124.911939][ T6670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.026212][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.069346][ T6683] loop1: detected capacity change from 0 to 128 [ 125.126442][ T6683] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 125.189705][ T6685] loop3: detected capacity change from 0 to 1024 [ 125.199758][ T6685] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.247958][ T6685] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c119, mo2=0002] [ 125.262943][ T6685] System zones: 0-1, 3-12 [ 125.276738][ T5142] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.284124][ T6685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.317727][ T6698] netlink: 72 bytes leftover after parsing attributes in process `syz.2.286'. [ 125.436497][ T5142] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.442585][ T5142] Bluetooth: hci4: command 0x0c1a tx timeout [ 125.520145][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.574517][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.684813][ T6706] loop4: detected capacity change from 0 to 2048 [ 125.759719][ T6710] lo speed is unknown, defaulting to 1000 [ 125.768594][ T6710] lo speed is unknown, defaulting to 1000 [ 125.776668][ T6710] lo speed is unknown, defaulting to 1000 [ 125.778523][ T6706] Alternate GPT is invalid, using primary GPT. [ 125.823261][ T6706] loop4: p1 p2 p3 [ 125.874568][ T6711] loop0: detected capacity change from 0 to 2048 [ 126.047201][ T6711] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.049195][ T6710] infiniband sz1: set active [ 126.063979][ T6710] infiniband sz1: added lo [ 126.076992][ T5885] lo speed is unknown, defaulting to 1000 [ 126.111930][ T29] kauditd_printk_skb: 661 callbacks suppressed [ 126.111947][ T29] audit: type=1800 audit(1740265470.447:2538): pid=6711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.290" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 126.142886][ T29] audit: type=1800 audit(1740265470.447:2539): pid=6711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.290" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 126.171413][ T6710] RDS/IB: sz1: added [ 126.175520][ T6710] smc: adding ib device sz1 with port count 1 [ 126.181779][ T6710] smc: ib device sz1 port 1 has pnetid [ 126.189310][ T6710] lo speed is unknown, defaulting to 1000 [ 126.337452][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 126.363067][ T6727] netlink: 'syz.3.296': attribute type 10 has an invalid length. [ 126.488315][ T6710] lo speed is unknown, defaulting to 1000 [ 126.557861][ T5142] Bluetooth: hci0: command 0x0c1a tx timeout [ 126.709564][ T5885] lo speed is unknown, defaulting to 1000 [ 126.718333][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.805853][ T6710] lo speed is unknown, defaulting to 1000 [ 126.947132][ T6734] netlink: 72 bytes leftover after parsing attributes in process `syz.4.299'. [ 127.112134][ T6710] lo speed is unknown, defaulting to 1000 [ 127.356880][ T5142] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.415519][ T6710] lo speed is unknown, defaulting to 1000 [ 127.516570][ T5142] Bluetooth: hci4: command 0x0c1a tx timeout [ 127.522817][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.596662][ T5142] Bluetooth: hci3: command 0x0c1a tx timeout [ 127.703885][ T6751] loop4: detected capacity change from 0 to 128 [ 127.729591][ T6727] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 127.785881][ T6751] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.834601][ T6751] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 127.912383][ T6754] loop2: detected capacity change from 0 to 164 [ 127.964148][ T6754] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿ' [ 127.985895][ T29] audit: type=1800 audit(1740265472.317:2540): pid=6751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.304" name="file2" dev="loop4" ino=12 res=0 errno=0 [ 128.039145][ T6754] loop2: detected capacity change from 0 to 164 [ 128.073427][ T6754] process 'syz.2.305' launched '/dev/fd/4' with NULL argv: empty string added [ 128.093134][ T6760] loop1: detected capacity change from 0 to 2048 [ 128.154524][ T6760] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.200767][ T5830] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.252782][ T6770] netlink: 72 bytes leftover after parsing attributes in process `syz.2.311'. [ 128.297825][ T29] audit: type=1800 audit(1740265472.607:2541): pid=6760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.308" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 128.411938][ T29] audit: type=1800 audit(1740265472.617:2542): pid=6760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.308" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 128.811882][ T6787] netlink: 'syz.4.317': attribute type 10 has an invalid length. [ 128.830209][ T6787] syz1: rxe_newlink: already configured on team_slave_0 [ 128.924639][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.024387][ T6795] loop3: detected capacity change from 0 to 512 [ 129.060721][ T6795] EXT4-fs (loop3): failed to initialize system zone (-117) [ 129.072157][ T6795] EXT4-fs (loop3): mount failed [ 129.143792][ T6802] netlink: 72 bytes leftover after parsing attributes in process `syz.0.323'. [ 129.225628][ T6801] loop1: detected capacity change from 0 to 512 [ 129.445607][ T6801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.462412][ T6814] loop0: detected capacity change from 0 to 1024 [ 129.504045][ T6801] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.753971][ T6814] EXT4-fs: Ignoring removed bh option [ 130.203653][ T6801] EXT4-fs error (device loop1): ext4_do_update_inode:5173: inode #2: comm syz.1.321: corrupted inode contents [ 130.240885][ T6814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.284324][ T6801] EXT4-fs error (device loop1): ext4_dirty_inode:6061: inode #2: comm syz.1.321: mark_inode_dirty error [ 130.322198][ T6801] EXT4-fs error (device loop1): ext4_do_update_inode:5173: inode #2: comm syz.1.321: corrupted inode contents [ 130.439354][ T6801] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.321: mark_inode_dirty error [ 130.579127][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.623703][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.627727][ T6829] loop4: detected capacity change from 0 to 2048 [ 131.229394][ T6829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.373804][ T29] audit: type=1800 audit(1740265475.707:2543): pid=6829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.332" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 131.431724][ T29] audit: type=1800 audit(1740265475.707:2544): pid=6829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.332" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 131.472412][ T6838] netlink: 'syz.1.334': attribute type 10 has an invalid length. [ 131.504613][ T6838] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 131.700717][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.736062][ T6850] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 131.764081][ T6850] loop0: detected capacity change from 0 to 512 [ 131.825951][ T6850] EXT4-fs (loop0): failed to initialize system zone (-117) [ 131.880885][ T6850] EXT4-fs (loop0): mount failed [ 131.899414][ T6853] loop1: detected capacity change from 0 to 1024 [ 132.215612][ T6869] loop4: detected capacity change from 0 to 256 [ 132.224270][ T6853] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.257383][ T6853] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.175288][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.206983][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.213819][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.330070][ T29] audit: type=1326 audit(1740265477.667:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95e58d169 code=0x7ffc0000 [ 133.412069][ T29] audit: type=1326 audit(1740265477.697:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95e58d169 code=0x7ffc0000 [ 133.502310][ T29] audit: type=1326 audit(1740265477.697:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd95e58d169 code=0x7ffc0000 [ 133.554891][ T6889] netlink: 'syz.2.352': attribute type 10 has an invalid length. [ 133.567110][ T29] audit: type=1326 audit(1740265477.697:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95e58d169 code=0x7ffc0000 [ 133.602302][ T6889] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 133.634050][ T29] audit: type=1326 audit(1740265477.697:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95e58d169 code=0x7ffc0000 [ 133.731402][ T29] audit: type=1326 audit(1740265477.697:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd95e58d169 code=0x7ffc0000 [ 133.769362][ T29] audit: type=1326 audit(1740265477.697:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95e58d169 code=0x7ffc0000 [ 133.826147][ T6901] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 133.839590][ T29] audit: type=1326 audit(1740265477.697:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95e58d169 code=0x7ffc0000 [ 133.872436][ T6901] loop4: detected capacity change from 0 to 512 [ 133.959174][ T6901] EXT4-fs (loop4): failed to initialize system zone (-117) [ 133.971537][ T6901] EXT4-fs (loop4): mount failed [ 134.124886][ T6913] syz.2.360 (6913) used greatest stack depth: 17296 bytes left [ 134.227770][ T6911] loop0: detected capacity change from 0 to 512 [ 134.323941][ T6911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.581625][ T6911] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.201199][ T6911] EXT4-fs error (device loop0): ext4_do_update_inode:5173: inode #2: comm syz.0.358: corrupted inode contents [ 135.282484][ T6911] EXT4-fs error (device loop0): ext4_dirty_inode:6061: inode #2: comm syz.0.358: mark_inode_dirty error [ 135.337452][ T6911] EXT4-fs error (device loop0): ext4_do_update_inode:5173: inode #2: comm syz.0.358: corrupted inode contents [ 135.383046][ T6911] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.358: mark_inode_dirty error [ 135.492992][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.672300][ T6944] netlink: 'syz.0.371': attribute type 10 has an invalid length. [ 135.712991][ T6944] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 136.072983][ T6968] capability: warning: `syz.2.380' uses deprecated v2 capabilities in a way that may be insecure [ 136.320145][ T6981] netlink: 24 bytes leftover after parsing attributes in process `syz.3.382'. [ 137.566885][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.387'. [ 137.626963][ T6989] netlink: 28 bytes leftover after parsing attributes in process `syz.4.386'. [ 137.680022][ T6989] netlink: 28 bytes leftover after parsing attributes in process `syz.4.386'. [ 137.803962][ T6996] netlink: 'syz.0.389': attribute type 10 has an invalid length. [ 137.851060][ T6996] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 137.916584][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 137.916608][ T29] audit: type=1326 audit(1740265482.207:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95e58d169 code=0x7ffc0000 [ 138.119278][ T29] audit: type=1326 audit(1740265482.207:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95e58d169 code=0x7ffc0000 [ 138.284045][ T29] audit: type=1326 audit(1740265482.237:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd95e58d169 code=0x7ffc0000 [ 138.445870][ T29] audit: type=1326 audit(1740265482.237:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95e58d169 code=0x7ffc0000 [ 138.588384][ T29] audit: type=1326 audit(1740265482.237:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95e58d169 code=0x7ffc0000 [ 138.695671][ T29] audit: type=1326 audit(1740265482.247:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd95e58d169 code=0x7ffc0000 [ 138.834958][ T29] audit: type=1326 audit(1740265482.247:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95e58d169 code=0x7ffc0000 [ 138.879049][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.397'. [ 138.920756][ T29] audit: type=1326 audit(1740265482.247:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95e58d169 code=0x7ffc0000 [ 138.944360][ T7013] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 4352 - 0 [ 138.981047][ T7013] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 4352 - 0 [ 138.989993][ T7013] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 4352 - 0 [ 139.004018][ T7013] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 4352 - 0 [ 139.013579][ T29] audit: type=1326 audit(1740265482.247:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fd95e58d169 code=0x7ffc0000 [ 139.044677][ T29] audit: type=1326 audit(1740265482.247:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95e58d169 code=0x7ffc0000 [ 139.193022][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'. [ 139.213183][ T7032] loop3: detected capacity change from 0 to 1024 [ 139.227062][ T7032] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.233941][ T7032] EXT4-fs: Invalid want_extra_isize 41497 [ 139.511416][ T7048] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.519044][ T7048] IPv6: NLM_F_CREATE should be set when creating new route [ 139.526357][ T7048] IPv6: NLM_F_CREATE should be set when creating new route [ 139.533623][ T7048] IPv6: NLM_F_CREATE should be set when creating new route [ 139.967674][ T7059] loop2: detected capacity change from 0 to 128 [ 139.977909][ T7059] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 140.163248][ T7061] loop2: detected capacity change from 0 to 128 [ 140.209046][ T7061] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.234526][ T7061] ext4 filesystem being mounted at /88/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 140.277660][ T7063] lo speed is unknown, defaulting to 1000 [ 140.283812][ T7063] lo speed is unknown, defaulting to 1000 [ 140.329835][ T7063] lo speed is unknown, defaulting to 1000 [ 140.356894][ T7066] x_tables: unsorted underflow at hook 3 [ 140.369381][ T7063] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 140.393632][ T7063] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 140.395216][ T7068] netlink: 'syz.1.417': attribute type 10 has an invalid length. [ 140.424250][ T7066] [ 140.429937][ T7066] ============================= [ 140.434859][ T7066] WARNING: suspicious RCU usage [ 140.439917][ T7066] 6.14.0-rc3-next-20250218-syzkaller #0 Not tainted [ 140.446582][ T7066] ----------------------------- [ 140.451689][ T7066] fs/kernfs/mount.c:243 suspicious rcu_dereference_check() usage! [ 140.459772][ T7066] [ 140.459772][ T7066] other info that might help us debug this: [ 140.459772][ T7066] [ 140.470240][ T7066] [ 140.470240][ T7066] rcu_scheduler_active = 2, debug_locks = 1 [ 140.478384][ T7066] 3 locks held by syz.3.416/7066: [ 140.483433][ T7066] #0: ffff888029335070 (&fc->uapi_mutex){+.+.}-{4:4}, at: __se_sys_fsconfig+0x9b2/0xf60 [ 140.493470][ T7066] #1: ffff88807c04a0e0 (&type->s_umount_key#57){+.+.}-{4:4}, at: super_lock+0x196/0x400 [ 140.503454][ T7066] #2: ffff88801bef7148 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_node_dentry+0xc3/0x2d0 [ 140.513777][ T7066] [ 140.513777][ T7066] stack backtrace: [ 140.519753][ T7066] CPU: 1 UID: 0 PID: 7066 Comm: syz.3.416 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0 [ 140.519779][ T7066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 140.519788][ T7066] Call Trace: [ 140.519795][ T7066] [ 140.519803][ T7066] dump_stack_lvl+0x241/0x360 [ 140.519833][ T7066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.519853][ T7066] ? __pfx__printk+0x10/0x10 [ 140.519867][ T7066] ? do_raw_spin_lock+0x14f/0x370 [ 140.519910][ T7066] lockdep_rcu_suspicious+0x226/0x340 [ 140.519934][ T7066] kernfs_node_dentry+0x24b/0x2d0 [ 140.519963][ T7066] cgroup_do_get_tree+0x248/0x390 [ 140.519992][ T7066] cgroup_get_tree+0xbb/0x230 [ 140.520018][ T7066] vfs_get_tree+0x90/0x2b0 [ 140.520049][ T7066] vfs_cmd_create+0xa0/0x1f0 [ 140.520066][ T7066] ? __se_sys_fsconfig+0xa29/0xf60 [ 140.520099][ T7066] __se_sys_fsconfig+0xa33/0xf60 [ 140.520129][ T7066] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 140.520146][ T7066] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 140.520179][ T7066] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 140.520208][ T7066] ? do_syscall_64+0x100/0x230 [ 140.520238][ T7066] ? __x64_sys_fsconfig+0x20/0xc0 [ 140.520265][ T7066] do_syscall_64+0xf3/0x230 [ 140.520292][ T7066] ? clear_bhb_loop+0x45/0xa0 [ 140.520323][ T7066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.520348][ T7066] RIP: 0033:0x7fbb8d38d169 [ 140.520373][ T7066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.520389][ T7066] RSP: 002b:00007fbb8e19c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 140.520409][ T7066] RAX: ffffffffffffffda RBX: 00007fbb8d5a6080 RCX: 00007fbb8d38d169 [ 140.520423][ T7066] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000d [ 140.520434][ T7066] RBP: 00007fbb8d40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 140.520445][ T7066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.520455][ T7066] R13: 0000000000000000 R14: 00007fbb8d5a6080 R15: 00007fff4f90df08 [ 140.520492][ T7066] [ 140.536679][ T7066] [ 140.548372][ T5829] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.549786][ T7066] ============================================ [ 140.549795][ T7066] WARNING: possible recursive locking detected [ 140.752332][ T7066] 6.14.0-rc3-next-20250218-syzkaller #0 Not tainted [ 140.758919][ T7066] -------------------------------------------- [ 140.765065][ T7066] syz.3.416/7066 is trying to acquire lock: [ 140.770947][ T7066] ffff88801bef7148 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0xa2/0x5d0 [ 140.780966][ T7066] [ 140.780966][ T7066] but task is already holding lock: [ 140.788336][ T7066] ffff88801bef7148 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_node_dentry+0xc3/0x2d0 [ 140.798078][ T7066] [ 140.798078][ T7066] other info that might help us debug this: [ 140.806182][ T7066] Possible unsafe locking scenario: [ 140.806182][ T7066] [ 140.813634][ T7066] CPU0 [ 140.816903][ T7066] ---- [ 140.820167][ T7066] lock(&root->kernfs_rwsem); [ 140.824921][ T7066] lock(&root->kernfs_rwsem); [ 140.829671][ T7066] [ 140.829671][ T7066] *** DEADLOCK *** [ 140.829671][ T7066] [ 140.837797][ T7066] May be due to missing lock nesting notation [ 140.837797][ T7066] [ 140.846097][ T7066] 3 locks held by syz.3.416/7066: [ 140.851101][ T7066] #0: ffff888029335070 (&fc->uapi_mutex){+.+.}-{4:4}, at: __se_sys_fsconfig+0x9b2/0xf60 [ 140.860929][ T7066] #1: ffff88807c04a0e0 (&type->s_umount_key#57){+.+.}-{4:4}, at: super_lock+0x196/0x400 [ 140.870762][ T7066] #2: ffff88801bef7148 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_node_dentry+0xc3/0x2d0 [ 140.880938][ T7066] [ 140.880938][ T7066] stack backtrace: [ 140.886814][ T7066] CPU: 0 UID: 0 PID: 7066 Comm: syz.3.416 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0 [ 140.886830][ T7066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 140.886838][ T7066] Call Trace: [ 140.886844][ T7066] [ 140.886850][ T7066] dump_stack_lvl+0x241/0x360 [ 140.886867][ T7066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.886880][ T7066] ? __pfx__printk+0x10/0x10 [ 140.886892][ T7066] ? lockdep_unlock+0x16a/0x300 [ 140.886913][ T7066] print_deadlock_bug+0x483/0x620 [ 140.886930][ T7066] validate_chain+0x15e2/0x5920 [ 140.886951][ T7066] ? validate_chain+0x15c0/0x5920 [ 140.886965][ T7066] ? __pfx_validate_chain+0x10/0x10 [ 140.886987][ T7066] ? __pfx_validate_chain+0x10/0x10 [ 140.887000][ T7066] ? __lock_acquire+0x1397/0x2100 [ 140.887018][ T7066] ? __pfx_validate_chain+0x10/0x10 [ 140.887034][ T7066] ? mark_lock+0x9a/0x360 [ 140.887047][ T7066] __lock_acquire+0x1397/0x2100 [ 140.887072][ T7066] lock_acquire+0x1ed/0x550 [ 140.887088][ T7066] ? kernfs_dop_revalidate+0xa2/0x5d0 [ 140.887106][ T7066] ? __pfx_lock_acquire+0x10/0x10 [ 140.887126][ T7066] ? __pfx___might_resched+0x10/0x10 [ 140.887148][ T7066] down_read+0xb1/0xa40 [ 140.887165][ T7066] ? kernfs_dop_revalidate+0xa2/0x5d0 [ 140.887179][ T7066] ? __pfx_lock_acquire+0x10/0x10 [ 140.887196][ T7066] ? kernfs_root+0x1c/0x230 [ 140.887207][ T7066] ? __pfx_down_read+0x10/0x10 [ 140.887229][ T7066] ? kernfs_root+0x1c/0x230 [ 140.887242][ T7066] kernfs_dop_revalidate+0xa2/0x5d0 [ 140.887259][ T7066] lookup_one_unlocked+0x23b/0x2d0 [ 140.887274][ T7066] ? __pfx_lookup_one_unlocked+0x10/0x10 [ 140.887288][ T7066] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 140.887305][ T7066] ? nbcon_cpu_emergency_exit+0x6e/0xd0 [ 140.887318][ T7066] ? nbcon_cpu_emergency_exit+0x77/0xd0 [ 140.887332][ T7066] lookup_positive_unlocked+0x2b/0xb0 [ 140.887346][ T7066] kernfs_node_dentry+0x139/0x2d0 [ 140.887369][ T7066] cgroup_do_get_tree+0x248/0x390 [ 140.887385][ T7066] cgroup_get_tree+0xbb/0x230 [ 140.887402][ T7066] vfs_get_tree+0x90/0x2b0 [ 140.887419][ T7066] vfs_cmd_create+0xa0/0x1f0 [ 140.887433][ T7066] ? __se_sys_fsconfig+0xa29/0xf60 [ 140.887448][ T7066] __se_sys_fsconfig+0xa33/0xf60 [ 140.887474][ T7066] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 140.887488][ T7066] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 140.887507][ T7066] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 140.887530][ T7066] ? do_syscall_64+0x100/0x230 [ 140.887547][ T7066] ? __x64_sys_fsconfig+0x20/0xc0 [ 140.887563][ T7066] do_syscall_64+0xf3/0x230 [ 140.887579][ T7066] ? clear_bhb_loop+0x45/0xa0 [ 140.887597][ T7066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.887613][ T7066] RIP: 0033:0x7fbb8d38d169 [ 140.887626][ T7066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.887637][ T7066] RSP: 002b:00007fbb8e19c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 140.887650][ T7066] RAX: ffffffffffffffda RBX: 00007fbb8d5a6080 RCX: 00007fbb8d38d169 [ 140.887659][ T7066] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000d [ 140.887667][ T7066] RBP: 00007fbb8d40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 140.887675][ T7066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.887683][ T7066] R13: 0000000000000000 R14: 00007fbb8d5a6080 R15: 00007fff4f90df08 [ 140.887698][ T7066] [ 141.253287][ T7063] lo speed is unknown, defaulting to 1000 [ 141.260344][ T7063] lo speed is unknown, defaulting to 1000 [ 141.279190][ T7063] lo speed is unknown, defaulting to 1000 [ 141.286396][ T7063] lo speed is unknown, defaulting to 1000 [ 141.293109][ T7063] lo speed is unknown, defaulting to 1000 [ 141.299378][ T7068] rdma_rxe: rxe_newlink: failed to add team_slave_0