last executing test programs: 1m25.379934875s ago: executing program 3 (id=93): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x1c, r3, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 1m25.023038447s ago: executing program 3 (id=99): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00'}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 1m24.783907412s ago: executing program 3 (id=103): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8c}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x3}, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = epoll_create1(0x0) listen(0xffffffffffffffff, 0x3) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x10000005}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) r6 = syz_pidfd_open(r0, 0x0) setns(r6, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 1m21.464301453s ago: executing program 3 (id=118): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x5, 0x80a, &(0x7f0000000340)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="31042801700000000000160000001800018013ffe0006e657464657673696d30200000000000ef06050000000000"], 0x34}}, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000240)={'ip6gre0\x00', 0x3}) 1m20.3114875s ago: executing program 3 (id=125): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) unshare(0x22020400) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14337f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@gettclass={0x24, 0x2a, 0x315, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x3, 0xf}, {0xb}, {0xffe0, 0x1}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002306000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000140)=[{0x64, 0x0, 0x3, 0x1}, {0x6, 0x0, 0x0, 0x7ffffffd}]}) socket$l2tp6(0xa, 0x2, 0x73) r7 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) renameat(r7, &(0x7f0000000400)='./file0\x00', r7, &(0x7f0000000440)='./file1\x00') statx(r7, &(0x7f0000000080)='./control\x00', 0x2000, 0x400, &(0x7f0000000180)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r8) mkdir(&(0x7f0000000100)='./control\x00', 0x0) flock(r1, 0x5) 1m19.809219742s ago: executing program 3 (id=131): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8c}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x3}, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = epoll_create1(0x0) listen(0xffffffffffffffff, 0x3) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x10000005}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) r6 = syz_pidfd_open(r0, 0x0) setns(r6, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 1m19.439167679s ago: executing program 32 (id=131): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8c}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x3}, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = epoll_create1(0x0) listen(0xffffffffffffffff, 0x3) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x10000005}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) r6 = syz_pidfd_open(r0, 0x0) setns(r6, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 1m17.994605094s ago: executing program 5 (id=156): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0) 1m17.743909971s ago: executing program 5 (id=158): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r3, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) 1m17.343973825s ago: executing program 5 (id=161): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x1c, r3, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 1m16.354846083s ago: executing program 5 (id=162): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x5, 0x80a, &(0x7f0000000340)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000240)={'ip6gre0\x00', 0x3}) 1m15.764804693s ago: executing program 5 (id=168): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffec5, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3, 0xfffffffc, 0x1}) close(r1) 1m10.16369544s ago: executing program 5 (id=187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() sigaltstack(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000c00)=ANY=[@ANYBLOB="18080000feffff3f000000000000001c85100000060000008510000004000000660800000000000018000000000000000000000000000000950000000000000095000000000000009500"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000a334625215feb3080b8749a22377a1344fc773854ebebd3f3a36248532ae6e312c0080430c21b2dad957214289bae450fe07122ab3adfa15bc43243b8b204a1b8ada9bad1a51a7a2121dc92a5d20fb5794c0950b25b7333953d6d0b28b42e3b5b7e2d5e92e6a836efd91a594f992de1e21db4152d60815e732e0b3ac8f98ea0d503428c6ef534e0cde4015392b8dd7d0f5b9731d0e9486ba7fb278bff2f36fa210c86a76c34acf4006524c66fc130d54091552947ed3edfc8dd2b620b3a34f49c2a512af39c39ef812ce0ec919f1df875221a9dc638c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'veth1\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r9, 0x0, 0x3}, 0x18) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x80, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00'}, 0x10) 1m9.64325027s ago: executing program 33 (id=187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() sigaltstack(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000c00)=ANY=[@ANYBLOB="18080000feffff3f000000000000001c85100000060000008510000004000000660800000000000018000000000000000000000000000000950000000000000095000000000000009500"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000a334625215feb3080b8749a22377a1344fc773854ebebd3f3a36248532ae6e312c0080430c21b2dad957214289bae450fe07122ab3adfa15bc43243b8b204a1b8ada9bad1a51a7a2121dc92a5d20fb5794c0950b25b7333953d6d0b28b42e3b5b7e2d5e92e6a836efd91a594f992de1e21db4152d60815e732e0b3ac8f98ea0d503428c6ef534e0cde4015392b8dd7d0f5b9731d0e9486ba7fb278bff2f36fa210c86a76c34acf4006524c66fc130d54091552947ed3edfc8dd2b620b3a34f49c2a512af39c39ef812ce0ec919f1df875221a9dc638c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'veth1\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r9, 0x0, 0x3}, 0x18) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x80, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00'}, 0x10) 13.552573448s ago: executing program 2 (id=473): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x0) 12.542089562s ago: executing program 2 (id=476): mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='udf\x00', 0x1000040, 0x0) socket$unix(0x1, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000300)=ANY=[], 0x8, 0x2eb, &(0x7f00000004c0)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 10.543933516s ago: executing program 2 (id=487): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x800, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$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") rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') unlink(&(0x7f0000000000)='./file0/file0\x00') creat(&(0x7f0000000040)='./file1\x00', 0x82) 9.936921175s ago: executing program 2 (id=493): r0 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, &(0x7f0000001580)={0x0, [0x0, 0x100], [{}, {}, {}, {0x1000000, 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) 9.744360525s ago: executing program 0 (id=497): syz_mount_image$udf(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000500)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x100}]}) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) read(r4, &(0x7f00000003c0)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000080)={{0x2, 0x0, 0x800, 0x3, 0xfffffffe}}) r5 = syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x1, 0x80000, 0x200}, &(0x7f0000000180), &(0x7f0000000700)) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x4}, &(0x7f0000000200), &(0x7f00000000c0)) io_uring_enter(r5, 0x32b, 0xbc78, 0x0, 0x0, 0x0) io_uring_enter(r5, 0x42, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 9.657496063s ago: executing program 2 (id=498): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x200, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = open(0x0, 0x20aa01, 0x13d) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_settime(r2, 0x2, &(0x7f0000000200)={{0x77359400}, {0x77359400}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, 0x0) 9.46166124s ago: executing program 1 (id=500): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000030400000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500340012800b00010062726964676500002400028005002e"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 9.296217681s ago: executing program 6 (id=502): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 9.087906216s ago: executing program 1 (id=503): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x51d0174}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@cswp={0x58, 0x114, 0x7, {{0x4, 0x7f72}, &(0x7f0000000280)=0x67af, 0x0, 0x765, 0x81, 0x5, 0xfffffffffffeffff, 0x54, 0x5}}], 0x58}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) r7 = gettid() sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4040080) bpf$LINK_DETACH(0x22, &(0x7f00000001c0), 0x4) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 9.015010951s ago: executing program 4 (id=504): socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) read$msr(0xffffffffffffffff, &(0x7f00000003c0)=""/49, 0x31) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x2008800, &(0x7f00000002c0), 0x1, 0x641, &(0x7f00000003c0)="$eJzs3d9rFNsdAPDvbDa/2yZKaWsfaqAUhdbERC1SCtV3EfvjrX1JTRRrNGJS2ohgBAul0Lc+CH3qQ+2fUcFX/4E+FNo+lQtyudeH60Wue5nJzmbczCabbDYbN58PjDlnJjvnTMw358zZc2YDOLKmImI6Ik5ExL0kYqJwrJr9W8m+Kf2+1588vJ5uSdRqP/84iYePkvXiuZL61/H6i7+Y2Nh1fGBruStrD27PLy0t3q/nZ1bv3JtZWXtw5tad+ZuLNxfvzv1w7uKF8xcuzp7t5PL+WMxcefKb30386eov//7Xt8nsP/59NYlL6dVl0utqfvFwJyVnP9upqG14U9yf/lwvdnjuw+Kzifz3ZFPSvINDLY2BwYj4ZkzEQOF/cyL+8NOeVgzoqloSeRsFHDnJnuJ/ZP8rAhywvB+Q39uX3QeXKLmjBz40ry5vDEhtxP5gROTxX83G/CJGsrGBsdfJe+M8SUR0NDJXl5bx8sXVJ+kWLcbhgO5Yf5yPcje3/0kWm5MxkuXGXlfei/9KYUv3/2w3hQ5tJqeaDm2N/9GyM4zspjig3PrjiPhWvf0fit3EfzUK8f/rPZa/c/wDAAAAAAAA7Xp+OSJ+UDb/r9KY/zNUMv9nPCIu7UP5O7//V8mX6CX7UBxQ8OpyxI9L5//mYReTA/XcV7P5AIPJjVtLi2cj4msRcToGh9P8bNN5K4X0mT8ff9qq/OL8v3RLy3/5oji9uPJRtWkh7sL86ry/BtC5V48jvp3N/z1Z3/P+/J+0/U9K2v80vu+1Wcbx7z27VszXarVHebo8/jfmAgPdVftbxKnS9n+zgU22fz7HTNYfmMl7BVt9521hoVET8Q+9k7b/Y63jv9HzbjyvZ2V35x+KiHNr1Vbh30b8l/f/h5JfDERhKcHv51dX789GDCVXtu6f212doV/l8ZDHSxr/p7+7/fhfo/9fiMPRiFhvs8xvvBv/X6tj2n/onTT+F7bv/08m9fY/sva/0RFoOzH3bPKf2ZlKngt3ra32/3zWpp+u78nG/4C6ypY97QZoT6oLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+4SkR8JZLKdCNdqUxPR4xHxNdjrLK0vLL6/RvLv727kB7LPv+/kn/S78RGPsk//3+ykJ9ryp+LiGMR8ZeB0Sw/fX15aaHXFw8AAAAAAAAAAAAAAAAAAACHxHi25r823Lz+P/X/gV7XDui6av3rDvE+chB1AQ5Wdc+vrA1v3fffzioDHKi9xz/woWs//ge7Wg/g4LWO/zdva5k8nyTFo592uV5A9+n/w9G1x/j39iD0gZL4n+pFPYCDtu2Y3tNGyrv/0Jfc/wMAAAAAQF85dvL5v5KIWP/RaLalhurHTPaH/lbpdQWAnjGHF46u6nKvawD0int8YHNd/+e1suOtZ/8n3akQAAAAAAAAAAAAALDFqRPW/8NRtf36f3P7oZ9ts/6/LPg9LgD6SOuP/tD2Q79zjw/s1Npb/w8AAAAAAAAAAAAAh8DIg9vzS0uL91fWOkxExH9qSUSn52mR+FXJoZ90qayuJtbnD0U19jXxrjtnHoyIw3GBB53IH8HRw2r0+O8SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ8GUAAAD//2OSKo4=") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}, {}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x3, 0x0}, {}, {}, {0x16}}], {{0x6, 0x1, 0xb, 0x0}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x2018}) 8.847253079s ago: executing program 6 (id=506): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x800, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') unlink(&(0x7f0000000000)='./file0/file0\x00') creat(&(0x7f0000000040)='./file1\x00', 0x82) 7.697683734s ago: executing program 4 (id=507): syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r1, @ANYBLOB='\x00\x00w\x00\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4, @multicast1}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa6a2d00281100000000069078ac1414bbac1414aa00004e220000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5400000090780000"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 6.683235068s ago: executing program 0 (id=509): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0xfa, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="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", 0x0, 0x10, 0x0, 0x0, 0x0}) 6.679322723s ago: executing program 1 (id=510): r0 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, &(0x7f0000001580)={0x0, [0x0, 0x100], [{}, {}, {}, {0x1000000, 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) 5.170664293s ago: executing program 2 (id=511): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000016000000b70300000000fff48500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_setup(0xfb, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000004c0)=[&(0x7f0000000340)={0x2000000, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000200)="13", 0xfffffdfc}]) 5.063475667s ago: executing program 4 (id=512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r1, 0x1, 0xffffffff, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x20}}, 0x4000840) 5.015251901s ago: executing program 6 (id=514): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) 4.891535249s ago: executing program 0 (id=515): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYBLOB="101000000000000008000d0005000000e4031680a40001"], 0x40c}}, 0x0) 4.879212592s ago: executing program 1 (id=516): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_emit_vhci(&(0x7f0000000f00)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x406}}}, 0x7) 4.719859546s ago: executing program 4 (id=517): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r0, &(0x7f0000000880)=[{&(0x7f0000000800)=""/116, 0x18}], 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3.95549252s ago: executing program 6 (id=518): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000200)={[{@nombcache}]}, 0x2, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f0000000280), 0x208e24b) pwrite64(r0, &(0x7f0000000240)="9876ee", 0x3, 0x1) 3.946083814s ago: executing program 0 (id=519): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000005c0), 0x2) writev(r1, &(0x7f0000000840), 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, r3, 0x43a, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '--#(@:'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004880}, 0x20000000) syz_usb_control_io$uac1(r0, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0x800}, {0x6, 0x7, 0x0, 0x6}]}, 0x10) r5 = memfd_create(&(0x7f0000000600)='[(\x00', 0x5) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}}) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000640)={r5, 0x1, 0x10000, 0xfffffffffffff000}) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[], 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000880)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES64, @ANYRES16, @ANYBLOB="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"], 0x40, 0x2fb, &(0x7f00000001c0)="$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") syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.892029443s ago: executing program 7 (id=520): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x3ff, r0}, 0x38) 3.891615139s ago: executing program 1 (id=521): r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, 0x0, 0xfffffd1b) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000016c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x4, 0x2fd, &(0x7f0000001700)="$eJzs3c1rE0EYx/Fn89IkrTU9iIgoDBVEkS5NwJsHi7QgBpS2EVpB2NqthmyTkoRARGwPglfPHnrwKIIo3ryIeO3Fv8C3Wy+9WaG4stlNmjfXtBjb2u/n0Ez3md/uZHfSlyFs1i89WcwuRKUqJHVDEpCg116R8x9WP5+een/E/V6pibHpRFKpgIjcevBi+F1p4Oabo28jsjZ0e30j+W3t1LTIz+l7ElCZosrZtjLUXD5f0pzwfKaY1ZW6YZlG0VSZXNEslLy6MWeZasHKLy1VlJGbH+xfKpjFojJyFZU1K6qUV6VCRRl3jUxO6bquBvsF1YtVE2iraX7B9PNN25YN27btyIrYtu30/mG7RW82rNQ6h73HyF8aNfaBluvv27dtKgV7OTL8C5t2qOvrj/+P+/r/8pTrfzhNzcxeG0ulxieVioosPi6ny2n30a1/GpCMWGLK6uSF2S1x5ohHNOfrxNXU+KiqGpKzi8tefrmcdn85jC14+YTEnb9TGvJSyyfcvPLyTnC5nA5Lf2M+KXE51jmfrOUl0HD8Pjl3piGvS1w+3pG8WDIvTnY7/zCh1JXrKdU8/li1HwAAAAAAAAAAB5Gu6rbX7zWZee2WY7oeqb7jo16POZudfm6H+vr6qMRlq/P6/Gjz+r63vh6Sk6G9fOYAAAAAABwexcr9rGFZZqE3jeCzmM8hwiLiNEQeDTuD8d3hcW/E3R29T0TaS0GxtG6fcuyie7yXk97ApJcnqtaI+p8En0bTm/GzhvUq5JVi0ikV2NEEGOnreOajBU16On+aGtJNZ4nubmJHup5arQ1tq7blRMc+tvbn/diGFXa3NFxB39TlHb0cftuItp6oka/ufi2fHxrf60t8AAAAAA6Qhn+cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAHtnVzcNq9+1vLon3EfHtt2Rr/Zx47vsPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYB/6FQAA///unawr") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f00000005c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) semtimedop(r0, 0x0, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x820000, &(0x7f0000002880)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) setrlimit(0x5, &(0x7f0000000800)={0x1, 0x81}) llistxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000600)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0) 3.669675128s ago: executing program 7 (id=522): syz_mount_image$udf(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000500)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.577739032s ago: executing program 1 (id=523): mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x164) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x200020, 0x0, 0x5, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) pread64(r0, &(0x7f0000000280)=""/4096, 0x1000, 0x0) 1.719803824s ago: executing program 6 (id=524): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000000000000240000000800000000000003e68d603607e41f0539ae4efd1c0fc8700599b3e83f7", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x480, &(0x7f00000000c0), 0x1, 0x765, &(0x7f0000000800)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000240)={[{@usrquota}, {@i_version}, {@usrquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@data_err_abort}, {@jqfmt_vfsv1}, {@errors_remount}, {@delalloc}]}, 0x1, 0x401, &(0x7f0000000540)="$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") syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0xfe, 0x461, &(0x7f0000002180)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0x7) 1.657011333s ago: executing program 4 (id=525): setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f00"], 0x1c) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) 1.364805971s ago: executing program 4 (id=526): connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a44000000001010902440001010000000904000003020600"], 0x0) 1.347058487s ago: executing program 7 (id=527): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0xfa, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="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", 0x0, 0x10, 0x0, 0x0, 0x0}) 982.378581ms ago: executing program 7 (id=528): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x800, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$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") rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') unlink(&(0x7f0000000000)='./file0/file0\x00') creat(&(0x7f0000000040)='./file1\x00', 0x82) 651.423876ms ago: executing program 7 (id=529): write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) inotify_rm_watch(0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @loopback}, {0x0, @local}, 0x10, {0x2, 0x0, @multicast1}, 'wg2\x00'}) ptrace(0x10, r0) rt_sigqueueinfo(r0, 0x31, &(0x7f0000000ac0)={0x0, 0xc4, 0xff7ffffe}) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x3, 0x1, 0x1}, &(0x7f0000000640)=[{}]) 311.417199ms ago: executing program 0 (id=530): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) 207.68816ms ago: executing program 7 (id=531): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000a80)=ANY=[], 0x0) 190.603609ms ago: executing program 6 (id=532): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)="6e80000000000000000000000000000000000000d8c5bcb719406d87a4e5fa116096645a2862a23ba23d", 0x6a}, {&(0x7f00000013c0)="c4864cb1bfc7ade4432a3dac263a6b9930e8faacebfee16e444f04100ce230f97e0d5f16fb2156c32c94a3ec2bd05cdbbc7e1675321c2bde9e2baa3506e4885b6beb9d6b18edc7b29573c1c880bf42ee29c4a8ff1f6d20bff57cd2038352be3435657796ed7b03fff82abefa8bd7d7e71a66ba8d6185f62461ec57474fdc8f0f670547617b0d9e85c21ad135e1a55bc3e193c09d7b5cad46b629d2c5b78788f0ad0ec788829660d29aad1c3f6dce6b6692ceba0b57752d20020124e7d68ceb8196efb5aaa875a06364eebcfb8de17cd61cfac719e1c661"}], 0x1, 0x0) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x3, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 0s ago: executing program 0 (id=533): unshare(0x24060400) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.245' (ED25519) to the list of known hosts. [ 60.575571][ T5816] cgroup: Unknown subsys name 'net' [ 60.682978][ T5816] cgroup: Unknown subsys name 'cpuset' [ 60.691272][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.006040][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.400732][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.408340][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.416264][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.424697][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 64.432378][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.437274][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.439868][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.455849][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.459210][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.464336][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.477411][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 64.480006][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.485509][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.492685][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.499618][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.505759][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.512409][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.520026][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.527217][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.533769][ T5853] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 64.541368][ T5855] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.547178][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.554568][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.561115][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.575878][ T5853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 64.585425][ T5853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 64.592771][ T5852] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.600617][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.605534][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.611396][ T5849] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 64.615483][ T5850] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.622069][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 64.628896][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.666649][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.675148][ T5851] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.682582][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.123239][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 65.157422][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 65.200342][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 65.220293][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 65.311900][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 65.427030][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.434608][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.442016][ T5832] bridge_slave_0: entered allmulticast mode [ 65.448909][ T5832] bridge_slave_0: entered promiscuous mode [ 65.481603][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 65.503165][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.513669][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.521414][ T5832] bridge_slave_1: entered allmulticast mode [ 65.528118][ T5832] bridge_slave_1: entered promiscuous mode [ 65.566613][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.573840][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.581393][ T5833] bridge_slave_0: entered allmulticast mode [ 65.588078][ T5833] bridge_slave_0: entered promiscuous mode [ 65.607194][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.616406][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.627608][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.635698][ T5837] bridge_slave_0: entered allmulticast mode [ 65.642964][ T5837] bridge_slave_0: entered promiscuous mode [ 65.650441][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.657528][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.668268][ T5842] bridge_slave_0: entered allmulticast mode [ 65.675217][ T5842] bridge_slave_0: entered promiscuous mode [ 65.684656][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.691990][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.699250][ T5842] bridge_slave_1: entered allmulticast mode [ 65.706117][ T5842] bridge_slave_1: entered promiscuous mode [ 65.721421][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.728522][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.736550][ T5833] bridge_slave_1: entered allmulticast mode [ 65.743430][ T5833] bridge_slave_1: entered promiscuous mode [ 65.760345][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.776681][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.784143][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.791364][ T5837] bridge_slave_1: entered allmulticast mode [ 65.798111][ T5837] bridge_slave_1: entered promiscuous mode [ 65.880607][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.916438][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.928198][ T5832] team0: Port device team_slave_0 added [ 65.936346][ T5832] team0: Port device team_slave_1 added [ 65.944613][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.955361][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.982460][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.989719][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.996836][ T5843] bridge_slave_0: entered allmulticast mode [ 66.007510][ T5843] bridge_slave_0: entered promiscuous mode [ 66.019394][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.045847][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.071374][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.078503][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.086399][ T5843] bridge_slave_1: entered allmulticast mode [ 66.093647][ T5843] bridge_slave_1: entered promiscuous mode [ 66.146372][ T5837] team0: Port device team_slave_0 added [ 66.153973][ T5842] team0: Port device team_slave_0 added [ 66.162597][ T5837] team0: Port device team_slave_1 added [ 66.169578][ T5842] team0: Port device team_slave_1 added [ 66.182475][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.189728][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.196823][ T5830] bridge_slave_0: entered allmulticast mode [ 66.204885][ T5830] bridge_slave_0: entered promiscuous mode [ 66.213093][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.220272][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.227399][ T5830] bridge_slave_1: entered allmulticast mode [ 66.234477][ T5830] bridge_slave_1: entered promiscuous mode [ 66.243629][ T5833] team0: Port device team_slave_0 added [ 66.252278][ T5833] team0: Port device team_slave_1 added [ 66.258527][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.265588][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.296927][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.365596][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.375116][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.401485][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.418072][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.425395][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.451733][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.471445][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.478431][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.504446][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.520071][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.536578][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.544024][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.570218][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.583197][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.590467][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.616584][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.628190][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.635235][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.661772][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.677233][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.684299][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.711174][ T5141] Bluetooth: hci1: command tx timeout [ 66.716908][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.727968][ T5141] Bluetooth: hci3: command tx timeout [ 66.727990][ T5851] Bluetooth: hci2: command tx timeout [ 66.728019][ T5850] Bluetooth: hci4: command tx timeout [ 66.748710][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.760047][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.769248][ T5850] Bluetooth: hci0: command tx timeout [ 66.769255][ T5141] Bluetooth: hci5: command tx timeout [ 66.774172][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.854155][ T5832] hsr_slave_0: entered promiscuous mode [ 66.860653][ T5832] hsr_slave_1: entered promiscuous mode [ 66.896908][ T5843] team0: Port device team_slave_0 added [ 66.917064][ T5830] team0: Port device team_slave_0 added [ 66.924879][ T5830] team0: Port device team_slave_1 added [ 66.936093][ T5842] hsr_slave_0: entered promiscuous mode [ 66.942540][ T5842] hsr_slave_1: entered promiscuous mode [ 66.948500][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.956536][ T5842] Cannot create hsr debugfs directory [ 66.975074][ T5837] hsr_slave_0: entered promiscuous mode [ 66.981414][ T5837] hsr_slave_1: entered promiscuous mode [ 66.987464][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.995190][ T5837] Cannot create hsr debugfs directory [ 67.002160][ T5843] team0: Port device team_slave_1 added [ 67.099742][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.106729][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.132755][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.147028][ T5833] hsr_slave_0: entered promiscuous mode [ 67.153556][ T5833] hsr_slave_1: entered promiscuous mode [ 67.159788][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.167495][ T5833] Cannot create hsr debugfs directory [ 67.185544][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.192598][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.219079][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.237939][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.244961][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.271012][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.295348][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.305878][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.337016][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.487664][ T5843] hsr_slave_0: entered promiscuous mode [ 67.496380][ T5843] hsr_slave_1: entered promiscuous mode [ 67.502567][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.510244][ T5843] Cannot create hsr debugfs directory [ 67.527835][ T5830] hsr_slave_0: entered promiscuous mode [ 67.534147][ T5830] hsr_slave_1: entered promiscuous mode [ 67.540371][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.547929][ T5830] Cannot create hsr debugfs directory [ 67.782173][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.792348][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.802643][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.831408][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.889920][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.913622][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.931099][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.944028][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.978514][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.006214][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.018703][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.050075][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.061686][ T5843] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 68.082604][ T5843] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 68.092250][ T5843] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 68.116254][ T5843] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 68.162315][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.171944][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.208489][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.222940][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.254809][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.292612][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.304461][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.313885][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.329609][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.397190][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.416891][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.458358][ T1310] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.465536][ T1310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.491173][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.498358][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.528034][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.542495][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.585088][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.592216][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.611743][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.618868][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.641664][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.683639][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.708204][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.725920][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.757424][ T1310] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.764538][ T1310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.775829][ T5850] Bluetooth: hci3: command tx timeout [ 68.775861][ T5141] Bluetooth: hci2: command tx timeout [ 68.782137][ T5850] Bluetooth: hci4: command tx timeout [ 68.787063][ T5851] Bluetooth: hci1: command tx timeout [ 68.798514][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.805658][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.830516][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.854919][ T5141] Bluetooth: hci5: command tx timeout [ 68.861353][ T5851] Bluetooth: hci0: command tx timeout [ 68.876326][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.889402][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.896532][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.905590][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.912715][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.976428][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.990533][ T1310] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.997656][ T1310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.007139][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.014289][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.124494][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.152812][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.205185][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.212329][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.303148][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.310314][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.400404][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.565400][ T5842] veth0_vlan: entered promiscuous mode [ 69.603721][ T5842] veth1_vlan: entered promiscuous mode [ 69.668179][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.727827][ T5842] veth0_macvtap: entered promiscuous mode [ 69.742640][ T5842] veth1_macvtap: entered promiscuous mode [ 69.766319][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.778033][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.807781][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.817270][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.827011][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.836035][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.846496][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.940661][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.950530][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.990011][ T5832] veth0_vlan: entered promiscuous mode [ 70.005407][ T5837] veth0_vlan: entered promiscuous mode [ 70.015772][ T5837] veth1_vlan: entered promiscuous mode [ 70.050102][ T5832] veth1_vlan: entered promiscuous mode [ 70.077119][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.106985][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.152090][ T5832] veth0_macvtap: entered promiscuous mode [ 70.162682][ T5832] veth1_macvtap: entered promiscuous mode [ 70.163574][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.178594][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.189956][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.189986][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.200844][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.235693][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.247723][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.258735][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.281464][ T5832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.294180][ T5832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.303816][ T5832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.312630][ T5832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.352015][ T5830] veth0_vlan: entered promiscuous mode [ 70.360046][ T5833] veth0_vlan: entered promiscuous mode [ 70.382591][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 70.408872][ T5837] veth0_macvtap: entered promiscuous mode [ 70.429567][ T5837] veth1_macvtap: entered promiscuous mode [ 70.446944][ T5830] veth1_vlan: entered promiscuous mode [ 70.520679][ T5843] veth0_vlan: entered promiscuous mode [ 70.535227][ T1310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.555932][ T1310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.565366][ T5833] veth1_vlan: entered promiscuous mode [ 70.586883][ T5843] veth1_vlan: entered promiscuous mode [ 70.661330][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.676250][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.686873][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.701487][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.707859][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.716898][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.728527][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.736440][ T5830] veth0_macvtap: entered promiscuous mode [ 70.745994][ T5830] veth1_macvtap: entered promiscuous mode [ 70.746131][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.762823][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.781130][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.796837][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.818064][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.829127][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.839216][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.849265][ T5141] Bluetooth: hci2: command tx timeout [ 70.850161][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.855021][ T5851] Bluetooth: hci1: command tx timeout [ 70.865013][ T5850] Bluetooth: hci4: command tx timeout [ 70.870293][ T5851] Bluetooth: hci3: command tx timeout [ 70.883922][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.907115][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.929860][ T5851] Bluetooth: hci5: command tx timeout [ 70.929872][ T5141] Bluetooth: hci0: command tx timeout [ 70.945923][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.956612][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.971929][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.983854][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.992715][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.004063][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.015867][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.026879][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.036794][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.047394][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.060435][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.065816][ T5947] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 71.095895][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.108316][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.117788][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.127321][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.148930][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.158364][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.167801][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.177818][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.228137][ T5833] veth0_macvtap: entered promiscuous mode [ 71.236303][ T5843] veth0_macvtap: entered promiscuous mode [ 71.271935][ T5843] veth1_macvtap: entered promiscuous mode [ 71.297166][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.309503][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.320403][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.332321][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.342438][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.352929][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.362877][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.373429][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.384373][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.393008][ T5833] veth1_macvtap: entered promiscuous mode [ 71.421135][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.432679][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.443040][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.453652][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.463529][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.474007][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.483889][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.494868][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.506194][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.535330][ T5843] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.544183][ T5843] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.553261][ T5843] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.562248][ T5843] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.592778][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.604491][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.614485][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.625501][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.635367][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.645877][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.655831][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.666698][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.677548][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.688170][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.699942][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.717142][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.731942][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.741989][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.752543][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.762462][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.773081][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.783101][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.793637][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.803580][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.814141][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.825740][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.857097][ T1799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.859679][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.871152][ T1799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.889378][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.909729][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.918535][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.085109][ T5911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.094998][ T5911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.103267][ T5955] loop2: detected capacity change from 0 to 128 [ 72.110125][ T5955] ======================================================= [ 72.110125][ T5955] WARNING: The mand mount option has been deprecated and [ 72.110125][ T5955] and is ignored by this kernel. Remove the mand [ 72.110125][ T5955] option from the mount to silence this warning. [ 72.110125][ T5955] ======================================================= [ 72.175990][ T5955] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.188615][ T5955] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.247986][ T5959] loop4: detected capacity change from 0 to 1024 [ 72.256090][ T5842] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.285737][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.303904][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.317741][ T5959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.377444][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.412905][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.475703][ T1310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.493156][ T1310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.548378][ T1799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.596010][ T1799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.722397][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.755244][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.812420][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.833239][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.929236][ T5851] Bluetooth: hci3: command tx timeout [ 72.929385][ T5141] Bluetooth: hci2: command tx timeout [ 72.934700][ T5851] Bluetooth: hci4: command tx timeout [ 72.940395][ T5850] Bluetooth: hci1: command tx timeout [ 73.015094][ T5839] Bluetooth: hci0: command tx timeout [ 73.021317][ T5839] Bluetooth: hci5: command tx timeout [ 73.518050][ T30] audit: type=1326 audit(1742899593.026:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73678d169 code=0x7ffc0000 [ 73.741855][ T5985] loop3: detected capacity change from 0 to 128 [ 74.014710][ T30] audit: type=1326 audit(1742899593.046:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73678d169 code=0x7ffc0000 [ 74.097293][ T5985] syz.3.4: attempt to access beyond end of device [ 74.097293][ T5985] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 74.174101][ T30] audit: type=1326 audit(1742899593.526:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb73678d169 code=0x7ffc0000 [ 74.192269][ T5985] syz.3.4: attempt to access beyond end of device [ 74.192269][ T5985] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 74.270670][ T5985] syz.3.4: attempt to access beyond end of device [ 74.270670][ T5985] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 74.271292][ T30] audit: type=1326 audit(1742899593.526:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73678d169 code=0x7ffc0000 [ 74.317599][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.346267][ T5985] syz.3.4: attempt to access beyond end of device [ 74.346267][ T5985] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 74.368366][ T6002] xt_l2tp: invalid flags combination: 0 [ 74.413443][ T5985] syz.3.4: attempt to access beyond end of device [ 74.413443][ T5985] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 74.419371][ T30] audit: type=1326 audit(1742899593.556:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb73678d169 code=0x7ffc0000 [ 74.501775][ T5985] syz.3.4: attempt to access beyond end of device [ 74.501775][ T5985] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 74.559039][ T30] audit: type=1326 audit(1742899593.656:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73678d169 code=0x7ffc0000 [ 74.581293][ T6005] tipc: Started in network mode [ 74.581376][ T5985] syz.3.4: attempt to access beyond end of device [ 74.581376][ T5985] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 74.586175][ T6005] tipc: Node identity 4, cluster identity 4711 [ 74.625222][ T6005] tipc: Node number set to 4 [ 74.682329][ T30] audit: type=1326 audit(1742899593.656:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73678d169 code=0x7ffc0000 [ 74.723371][ T5985] syz.3.4: attempt to access beyond end of device [ 74.723371][ T5985] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 74.886353][ T54] kworker/u8:3: attempt to access beyond end of device [ 74.886353][ T54] loop3: rw=1, sector=273, nr_sectors = 8 limit=128 [ 74.932331][ T6018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.961571][ T54] kworker/u8:3: attempt to access beyond end of device [ 74.961571][ T54] loop3: rw=1, sector=289, nr_sectors = 8 limit=128 [ 74.985996][ T6018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.122128][ T6018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.156026][ T6018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.424972][ T6045] loop3: detected capacity change from 0 to 512 [ 76.453052][ T6045] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.505146][ T6048] loop2: detected capacity change from 0 to 1024 [ 76.700439][ T6056] hub 2-0:1.0: USB hub found [ 76.705485][ T6056] hub 2-0:1.0: 1 port detected [ 76.721876][ T30] audit: type=1326 audit(1742899596.256:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.4.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0271b8d169 code=0x7ffc0000 [ 76.749191][ T6045] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 76.755641][ T30] audit: type=1326 audit(1742899596.256:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.4.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0271b8d169 code=0x7ffc0000 [ 76.771402][ T6048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.782443][ T30] audit: type=1326 audit(1742899596.256:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.4.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0271b8bad0 code=0x7ffc0000 [ 76.854966][ T6045] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 76.933285][ T6061] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 77.124184][ T6045] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 77.193576][ T6048] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.562124][ T6045] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 77.625926][ T6045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 77.640615][ T6063] xt_l2tp: invalid flags combination: 0 [ 77.678697][ T6045] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.36: dx entry: limit 65535 != root limit 120 [ 77.704513][ T6045] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.36: Corrupt directory, running e2fsck is recommended [ 77.733026][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.770588][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.797558][ T6068] loop4: detected capacity change from 0 to 164 [ 78.358525][ T6076] Zero length message leads to an empty skb [ 78.847678][ T6086] netlink: 'syz.4.50': attribute type 4 has an invalid length. [ 78.885109][ T6086] netlink: 'syz.4.50': attribute type 4 has an invalid length. [ 80.307461][ T6122] xt_cluster: node mask cannot exceed total number of nodes [ 80.599873][ T6122] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.64' sets config #1 [ 80.652256][ T6110] infiniband syz!: set active [ 80.677423][ T6110] infiniband syz!: added team_slave_0 [ 81.107433][ T6110] RDS/IB: syz!: added [ 81.155841][ T6110] smc: adding ib device syz! with port count 1 [ 81.162206][ T6110] smc: ib device syz! port 1 has pnetid [ 82.608833][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 82.608855][ T30] audit: type=1326 audit(1742899602.146:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.4.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0271b8d169 code=0x7ffc0000 [ 82.669790][ T6149] loop1: detected capacity change from 0 to 1024 [ 82.729447][ T30] audit: type=1326 audit(1742899602.146:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.4.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0271b8d169 code=0x7ffc0000 [ 82.803613][ T6149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.890308][ T30] audit: type=1326 audit(1742899602.146:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.4.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0271b8d169 code=0x7ffc0000 [ 82.917448][ T6149] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 82.994578][ T6157] netlink: 100 bytes leftover after parsing attributes in process `syz.4.74'. [ 83.053703][ T30] audit: type=1326 audit(1742899602.146:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.4.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0271b8d169 code=0x7ffc0000 [ 83.145372][ T30] audit: type=1326 audit(1742899602.146:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.4.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0271b8d169 code=0x7ffc0000 [ 83.258840][ T30] audit: type=1326 audit(1742899602.156:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.4.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0271b8d169 code=0x7ffc0000 [ 83.333527][ T30] audit: type=1326 audit(1742899602.156:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.4.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0271b8d169 code=0x7ffc0000 [ 83.391495][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.436515][ T30] audit: type=1326 audit(1742899602.156:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.4.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0271b8d169 code=0x7ffc0000 [ 83.533188][ T30] audit: type=1326 audit(1742899602.156:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.4.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0271b8d169 code=0x7ffc0000 [ 83.636489][ T30] audit: type=1326 audit(1742899602.156:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.4.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0271b8d169 code=0x7ffc0000 [ 83.726344][ T6172] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 86.073273][ T876] cfg80211: failed to load regulatory.db [ 86.596864][ T6227] loop4: detected capacity change from 0 to 512 [ 86.649198][ T6227] EXT4-fs (loop4): orphan cleanup on readonly fs [ 86.703833][ T6227] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.105: bg 0: block 248: padding at end of block bitmap is not set [ 87.726425][ T6227] __quota_error: 11 callbacks suppressed [ 87.726448][ T6227] Quota error (device loop4): write_blk: dquota write failed [ 87.747857][ T6227] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 87.758001][ T6227] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.105: Failed to acquire dquot type 1 [ 88.645773][ T6241] xt_l2tp: invalid flags combination: 0 [ 88.652165][ T6227] EXT4-fs (loop4): 1 truncate cleaned up [ 88.674907][ T6227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.687570][ T6240] loop5: detected capacity change from 0 to 512 [ 88.728984][ T6240] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 88.738674][ T6227] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 88.741437][ T6240] EXT4-fs (loop5): invalid journal inode [ 88.756132][ T6240] EXT4-fs (loop5): can't get journal size [ 88.868321][ T6227] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 88.888350][ T6240] EXT4-fs (loop5): 1 truncate cleaned up [ 88.920236][ T6240] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.933206][ T6227] syz.4.105 (6227) used greatest stack depth: 19496 bytes left [ 89.003893][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.030527][ T6272] loop3: detected capacity change from 0 to 764 [ 90.076302][ T6272] rock: directory entry would overflow storage [ 90.094488][ T6272] rock: sig=0x4654, size=5, remaining=4 [ 90.965730][ T6286] xt_cluster: node mask cannot exceed total number of nodes [ 91.027485][ T6286] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.123' sets config #1 [ 91.222290][ T6292] netlink: 100 bytes leftover after parsing attributes in process `syz.0.128'. [ 91.251475][ T6292] netlink: 24 bytes leftover after parsing attributes in process `syz.0.128'. [ 91.499446][ T6301] netlink: 100 bytes leftover after parsing attributes in process `syz.0.132'. [ 91.603426][ T81] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.648056][ T5843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.711992][ T81] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.812734][ T30] audit: type=1326 audit(1742899611.356:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.5.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22218d169 code=0x7ffc0000 [ 91.878598][ T30] audit: type=1326 audit(1742899611.356:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.5.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fa22218d169 code=0x7ffc0000 [ 91.958565][ T81] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.959310][ T30] audit: type=1326 audit(1742899611.356:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.5.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22218d169 code=0x7ffc0000 [ 92.036742][ T30] audit: type=1326 audit(1742899611.356:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.5.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22218d169 code=0x7ffc0000 [ 92.095905][ T6317] loop4: detected capacity change from 0 to 512 [ 92.130241][ T6317] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 92.158025][ T30] audit: type=1326 audit(1742899611.416:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0271b8d169 code=0x7ffc0000 [ 92.192360][ T6317] EXT4-fs (loop4): invalid journal inode [ 92.198080][ T6317] EXT4-fs (loop4): can't get journal size [ 92.198664][ T30] audit: type=1326 audit(1742899611.416:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0271b8d169 code=0x7ffc0000 [ 92.234077][ T30] audit: type=1326 audit(1742899611.416:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f0271b8d169 code=0x7ffc0000 [ 92.260278][ T30] audit: type=1326 audit(1742899611.416:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0271b8d169 code=0x7ffc0000 [ 92.263513][ T6317] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 92.317462][ T6317] System zones: 1-12, 13-13 [ 92.335141][ T81] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.358187][ T6322] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 92.367249][ T6317] EXT4-fs (loop4): 1 truncate cleaned up [ 92.375533][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.383727][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.391341][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.401712][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.411008][ T6317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.434335][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.449157][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.532193][ T81] bridge_slave_1: left allmulticast mode [ 92.558819][ T81] bridge_slave_1: left promiscuous mode [ 92.565537][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.617519][ T81] bridge_slave_0: left allmulticast mode [ 92.640945][ T81] bridge_slave_0: left promiscuous mode [ 92.647313][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.672099][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.796489][ T6334] netlink: 100 bytes leftover after parsing attributes in process `syz.2.148'. [ 93.064951][ T6344] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 93.143151][ T6348] netlink: 'syz.1.154': attribute type 13 has an invalid length. [ 93.294945][ T6356] loop1: detected capacity change from 0 to 128 [ 93.352942][ T6357] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 93.501107][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.523327][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.541718][ T81] bond0 (unregistering): Released all slaves [ 93.566446][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 93.566466][ T30] audit: type=1804 audit(1742899613.106:62): pid=6360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.154" name="/newroot/28/file2/bus" dev="loop1" ino=6 res=1 errno=0 [ 94.569474][ T5141] Bluetooth: hci2: command tx timeout [ 95.001464][ T5830] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 95.023660][ T5830] FAT-fs (loop1): Filesystem has been set read-only [ 95.059971][ T6388] loop5: detected capacity change from 0 to 764 [ 95.130873][ T6388] rock: directory entry would overflow storage [ 95.181929][ T6388] rock: sig=0x4654, size=5, remaining=4 [ 95.635072][ T6325] chnl_net:caif_netlink_parms(): no params data found [ 95.678638][ T30] audit: type=1326 audit(1742899615.206:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.2.169" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bf6b8d169 code=0x0 [ 96.011344][ T6325] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.031459][ T6325] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.042945][ T6325] bridge_slave_0: entered allmulticast mode [ 96.044465][ T6403] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.056855][ T6325] bridge_slave_0: entered promiscuous mode [ 96.091709][ T81] hsr_slave_0: left promiscuous mode [ 96.112217][ T81] hsr_slave_1: left promiscuous mode [ 96.126664][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.142332][ T6428] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 96.159450][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.180551][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.199526][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.252684][ T81] veth1_macvtap: left promiscuous mode [ 96.268357][ T81] veth0_macvtap: left promiscuous mode [ 96.281511][ T81] veth1_vlan: left promiscuous mode [ 96.297163][ T81] veth0_vlan: left promiscuous mode [ 96.609889][ T5141] Bluetooth: hci2: command tx timeout [ 96.636729][ T6443] loop2: detected capacity change from 0 to 512 [ 96.672470][ T6443] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 96.694599][ T6390] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 96.702823][ T6390] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 96.754799][ T6443] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 96.774900][ T6443] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 96.784503][ T6443] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.172: Failed to acquire dquot type 0 [ 96.816688][ T6443] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 96.839541][ T6390] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 96.846086][ T6443] EXT4-fs (loop2): 1 truncate cleaned up [ 96.854394][ T6443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.914513][ T6390] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 96.946665][ T6390] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 96.962423][ T6443] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 97.019423][ T6390] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 97.294534][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.309982][ T6390] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 97.394246][ T5141] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.568069][ T6390] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.117267][ T6390] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.136488][ T6456] loop2: detected capacity change from 0 to 512 [ 98.171572][ T6398] syz.0.164: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 98.190686][ T6456] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 98.213275][ T6458] loop4: detected capacity change from 0 to 2048 [ 98.232478][ T6458] EXT4-fs: Ignoring removed bh option [ 98.247505][ T6390] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 98.255407][ T6390] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 98.266239][ T6456] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 98.278433][ T6390] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 98.292514][ T6398] CPU: 0 UID: 0 PID: 6398 Comm: syz.0.164 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 98.292547][ T6398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 98.292570][ T6398] Call Trace: [ 98.292579][ T6398] [ 98.292589][ T6398] dump_stack_lvl+0x241/0x360 [ 98.292623][ T6398] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.292650][ T6398] ? __pfx__printk+0x10/0x10 [ 98.292696][ T6398] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 98.292736][ T6398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.292778][ T6398] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 98.292821][ T6398] warn_alloc+0x278/0x410 [ 98.292858][ T6398] ? __pfx_warn_alloc+0x10/0x10 [ 98.292896][ T6398] ? hash_netiface_create+0x356/0x1040 [ 98.292936][ T6398] ? __get_vm_area_node+0x1c8/0x2d0 [ 98.292965][ T6398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.293005][ T6398] ? __get_vm_area_node+0x25c/0x2d0 [ 98.293039][ T6398] __vmalloc_node_range_noprof+0x62f/0x1380 [ 98.293095][ T6398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.293136][ T6398] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 98.293171][ T6398] ? hash_netiface_create+0x356/0x1040 [ 98.293210][ T6398] ? __get_vm_area_node+0x1c8/0x2d0 [ 98.293237][ T6398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.293277][ T6398] ? __get_vm_area_node+0x25c/0x2d0 [ 98.293310][ T6398] __vmalloc_node_range_noprof+0x53a/0x1380 [ 98.293343][ T6398] ? hash_netiface_create+0x356/0x1040 [ 98.293383][ T6398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.293446][ T6398] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 98.293478][ T6398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.293518][ T6398] ? __kasan_kmalloc_large+0x1a/0xa0 [ 98.293564][ T6398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.293604][ T6398] ? rcu_is_watching+0x15/0xb0 [ 98.293639][ T6398] ? hash_netiface_create+0x356/0x1040 [ 98.293681][ T6398] __kvmalloc_node_noprof+0x398/0x580 [ 98.293709][ T6398] ? hash_netiface_create+0x356/0x1040 [ 98.293749][ T6398] ? __kmalloc_cache_noprof+0x243/0x390 [ 98.293774][ T6398] ? hash_netiface_create+0x2fa/0x1040 [ 98.293818][ T6398] hash_netiface_create+0x356/0x1040 [ 98.293864][ T6398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.293907][ T6398] ? __pfx_hash_netiface_create+0x10/0x10 [ 98.293948][ T6398] ip_set_create+0xa7a/0x1960 [ 98.293993][ T6398] ? ip_set_create+0x48a/0x1960 [ 98.294038][ T6398] ? __pfx_ip_set_create+0x10/0x10 [ 98.294102][ T6398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.294145][ T6398] ? nfnetlink_rcv_msg+0x225/0x1180 [ 98.294188][ T6398] nfnetlink_rcv_msg+0xbee/0x1180 [ 98.294230][ T6398] ? nfnetlink_rcv_msg+0x225/0x1180 [ 98.294290][ T6398] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 98.294330][ T6398] ? stack_trace_save+0x118/0x1d0 [ 98.294390][ T6398] ? dev_hard_start_xmit+0x27c/0x7d0 [ 98.294420][ T6398] ? __dev_queue_xmit+0x1b73/0x3f50 [ 98.294452][ T6398] ? __netlink_deliver_tap+0x561/0x7f0 [ 98.294486][ T6398] ? netlink_deliver_tap+0x19d/0x1b0 [ 98.294518][ T6398] ? netlink_unicast+0x7c4/0x990 [ 98.294546][ T6398] ? netlink_sendmsg+0x8b3/0xca0 [ 98.294583][ T6398] ? __sock_sendmsg+0x223/0x270 [ 98.294619][ T6398] ? ____sys_sendmsg+0x524/0x860 [ 98.294647][ T6398] ? __sys_sendmsg+0x269/0x350 [ 98.294689][ T6398] netlink_rcv_skb+0x208/0x480 [ 98.294723][ T6398] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 98.294767][ T6398] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 98.294812][ T6398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.294852][ T6398] ? apparmor_capable+0x13b/0x1b0 [ 98.294887][ T6398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.294927][ T6398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.294969][ T6398] ? security_capable+0x7e/0x2d0 [ 98.294996][ T6398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.295042][ T6398] nfnetlink_rcv+0x297/0x2ab0 [ 98.295084][ T6398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.295127][ T6398] ? __dev_queue_xmit+0x2f4/0x3f50 [ 98.295159][ T6398] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 98.295190][ T6398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.295232][ T6398] ? __dev_queue_xmit+0x2f4/0x3f50 [ 98.295265][ T6398] ? __dev_queue_xmit+0x2f4/0x3f50 [ 98.295300][ T6398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.295341][ T6398] ? __dev_queue_xmit+0x1775/0x3f50 [ 98.295373][ T6398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.295414][ T6398] ? kasan_save_track+0x51/0x80 [ 98.295455][ T6398] ? ____sys_sendmsg+0x524/0x860 [ 98.295488][ T6398] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 98.295530][ T6398] ? __dev_queue_xmit+0x2f4/0x3f50 [ 98.295571][ T6398] ? __pfx___dev_queue_xmit+0x10/0x10 [ 98.295618][ T6398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.295660][ T6398] ? ref_tracker_free+0x643/0x7e0 [ 98.295689][ T6398] ? __asan_memcpy+0x40/0x70 [ 98.295723][ T6398] ? __pfx_ref_tracker_free+0x10/0x10 [ 98.295764][ T6398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.295805][ T6398] ? skb_clone+0x240/0x390 [ 98.295845][ T6398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.295888][ T6398] ? netlink_deliver_tap+0x2e/0x1b0 [ 98.295926][ T6398] ? netlink_deliver_tap+0x2e/0x1b0 [ 98.295963][ T6398] netlink_unicast+0x7f8/0x990 [ 98.296001][ T6398] ? __pfx_netlink_unicast+0x10/0x10 [ 98.296030][ T6398] ? __virt_addr_valid+0x45f/0x530 [ 98.296073][ T6398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.296114][ T6398] ? __phys_addr_symbol+0x2f/0x70 [ 98.296155][ T6398] ? __check_object_size+0x475/0x720 [ 98.296204][ T6398] netlink_sendmsg+0x8b3/0xca0 [ 98.296266][ T6398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.296305][ T6398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.296345][ T6398] ? aa_sock_msg_perm+0x91/0x160 [ 98.296371][ T6398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.296414][ T6398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.296448][ T6398] __sock_sendmsg+0x223/0x270 [ 98.296488][ T6398] ____sys_sendmsg+0x524/0x860 [ 98.296519][ T6398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.296574][ T6398] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.296604][ T6398] ? __fget_files+0x2a/0x420 [ 98.296637][ T6398] ? __fget_files+0x2a/0x420 [ 98.296673][ T6398] __sys_sendmsg+0x269/0x350 [ 98.296709][ T6398] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.296765][ T6398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.296826][ T6398] ? do_syscall_64+0xb6/0x230 [ 98.296857][ T6398] do_syscall_64+0xf3/0x230 [ 98.296887][ T6398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.296924][ T6398] RIP: 0033:0x7f1a6218d169 [ 98.296945][ T6398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.296966][ T6398] RSP: 002b:00007f1a63046038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.296993][ T6398] RAX: ffffffffffffffda RBX: 00007f1a623a6080 RCX: 00007f1a6218d169 [ 98.297012][ T6398] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 98.297029][ T6398] RBP: 00007f1a6220e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 98.297046][ T6398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.297061][ T6398] R13: 0000000000000000 R14: 00007f1a623a6080 R15: 00007ffea12f8618 [ 98.297093][ T6398] [ 98.297102][ T6398] Mem-Info: [ 98.369921][ T6456] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, [ 98.426978][ T6398] active_anon:7571 inactive_anon:0 isolated_anon:0 [ 98.426978][ T6398] active_file:1501 inactive_file:38324 isolated_file:0 [ 98.426978][ T6398] unevictable:768 dirty:131 writeback:0 [ 98.426978][ T6398] slab_reclaimable:10204 slab_unreclaimable:102255 [ 98.426978][ T6398] mapped:36825 shmem:2730 pagetables:921 [ 98.426978][ T6398] sec_pagetables:0 bounce:0 [ 98.426978][ T6398] kernel_misc_reclaimable:0 [ 98.426978][ T6398] free:1291105 free_pcp:259 free_cma:0 [ 98.430125][ T6456] block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 98.433929][ T6456] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 98.437123][ T6398] Node 0 active_anon:30284kB inactive_anon:0kB active_file:6004kB inactive_file:153220kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:147300kB dirty:520kB writeback:0kB shmem:9384kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11716kB pagetables:3684kB sec_pagetables:0kB all_unreclaimable? no [ 98.449122][ T6456] EXT4-fs (loop2): 1 truncate cleaned up [ 98.459829][ T6458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.467021][ T6456] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.471612][ T6398] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 98.477276][ T6390] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 98.485380][ T6398] Node 0 [ 98.502321][ T6390] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.556859][ T6398] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 98.940604][ T5141] Bluetooth: hci1: command 0x0c1a tx timeout [ 99.215418][ T6398] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 99.221395][ T6398] Node 0 DMA32 free:1246316kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:30084kB inactive_anon:0kB active_file:6072kB inactive_file:152748kB unevictable:1536kB writepending:628kB present:3129332kB managed:2551804kB mlocked:0kB bounce:0kB free_pcp:472kB local_pcp:472kB free_cma:0kB [ 99.227688][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.251682][ T6398] lowmem_reserve[]: 0 0 0 0 0 [ 99.251749][ T6398] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:568kB unevictable:0kB writepending:4kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 99.251821][ T6398] lowmem_reserve[]: 0 0 0 0 0 [ 99.251882][ T6398] Node 1 Normal free:3902436kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:0kB free_cma:0kB [ 99.251954][ T6398] lowmem_reserve[]: 0 0 0 0 0 [ 99.252014][ T6398] Node 0 DMA: 0*4kB 0*8kB [ 99.270053][ T6390] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 99.296288][ T6398] 0*16kB [ 99.328714][ T6279] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, [ 99.338898][ T6398] 0*32kB [ 99.342362][ T6279] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 99.345196][ T6398] 0*64kB [ 99.358799][ T5141] Bluetooth: hci3: command 0x0c1a tx timeout [ 99.383882][ T6279] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 99.396293][ T6279] EXT4-fs (loop4): This should not happen!! Data will be lost [ 99.396293][ T6279] [ 99.406068][ T6279] EXT4-fs (loop4): Total free blocks count 0 [ 99.412166][ T5141] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.418228][ T6279] EXT4-fs (loop4): Free/Dirty block details [ 99.425028][ T6279] EXT4-fs (loop4): free_blocks=2415919104 [ 99.430976][ T6279] EXT4-fs (loop4): dirty_blocks=16 [ 99.436101][ T6279] EXT4-fs (loop4): Block reservation details [ 99.442158][ T6279] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 99.453075][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.486238][ T6398] 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 99.530058][ T6398] Node 0 DMA32: 5*4kB (UME) 73*8kB (UE) 26*16kB (UME) 42*32kB (UME) 71*64kB (UME) 39*128kB (UME) 28*256kB (ME) 11*512kB (UME) 8*1024kB (UME) 5*2048kB (UME) 294*4096kB (M) = 1247356kB [ 99.568889][ T6398] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 99.614865][ T6398] Node 1 Normal: 225*4kB (UE) 60*8kB (UME) 44*16kB (UME) 258*32kB (UME) 104*64kB (UME) 31*128kB (UME) 18*256kB (UME) 8*512kB (UME) 4*1024kB (UME) 1*2048kB (U) 944*4096kB (M) = 3902436kB [ 99.663883][ T6398] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.677726][ T6398] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 99.691579][ T6398] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.702456][ T6398] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 99.723322][ T6398] 42263 total pagecache pages [ 99.732295][ T6398] 0 pages in swap cache [ 99.755916][ T6398] Free swap = 124756kB [ 99.769120][ T6398] Total swap = 124996kB [ 99.773336][ T6398] 2097051 pages RAM [ 99.798416][ T6398] 0 pages HighMem/MovableOnly [ 99.812024][ T6398] 427314 pages reserved [ 99.816413][ T6398] 0 pages cma reserved [ 99.859398][ T81] team0 (unregistering): Port device team_slave_1 removed [ 99.909790][ T30] audit: type=1326 audit(1742899619.456:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.4.183" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0271b8d169 code=0x0 [ 99.955131][ T81] team0 (unregistering): Port device team_slave_0 removed [ 100.289779][ T5141] Bluetooth: hci4: command 0x0c1a tx timeout [ 100.525294][ T6325] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.532787][ T5141] Bluetooth: hci2: command 0x0419 tx timeout [ 100.563392][ T6325] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.594533][ T6325] bridge_slave_1: entered allmulticast mode [ 100.619830][ T6325] bridge_slave_1: entered promiscuous mode [ 100.949356][ T6325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.991653][ T6325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.008852][ T5141] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.128165][ T9] IPVS: starting estimator thread 0... [ 101.165413][ T6484] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 101.228924][ T6486] IPVS: using max 23 ests per chain, 55200 per kthread [ 101.302843][ T6325] team0: Port device team_slave_0 added [ 101.332241][ T6325] team0: Port device team_slave_1 added [ 101.429220][ T5141] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.489378][ T5141] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.549453][ T6325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.556439][ T6325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.689841][ T6325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.750869][ T6325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.757866][ T6325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.851036][ T6325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.190416][ T6325] hsr_slave_0: entered promiscuous mode [ 102.199602][ T6325] hsr_slave_1: entered promiscuous mode [ 102.205802][ T6325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.298920][ T6325] Cannot create hsr debugfs directory [ 102.370821][ T5141] Bluetooth: hci4: command 0x0c1a tx timeout [ 102.393874][ T6517] xt_l2tp: invalid flags combination: 0 [ 102.439367][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 102.449632][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 102.459477][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 102.474878][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 102.485024][ T5839] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 102.485418][ T6521] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 102.500383][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 102.548822][ T30] audit: type=1326 audit(1742899622.066:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.4.197" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0271b8d169 code=0x0 [ 102.610550][ T5141] Bluetooth: hci2: command 0x0419 tx timeout [ 102.634872][ T81] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.662511][ T6523] tipc: Started in network mode [ 102.668028][ T6523] tipc: Node identity 4, cluster identity 4711 [ 102.679197][ T6523] tipc: Node number set to 4 [ 102.792972][ T81] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.882284][ T30] audit: type=1326 audit(1742899622.426:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6526 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5558d169 code=0x7ffc0000 [ 102.955363][ T30] audit: type=1326 audit(1742899622.446:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6526 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5558d169 code=0x7ffc0000 [ 103.000555][ T81] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.089004][ T5141] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.165987][ T6537] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.220666][ T6537] Cannot find del_set index 0 as target [ 103.292730][ T81] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.488896][ T5141] Bluetooth: hci3: command 0x0c1a tx timeout [ 103.599932][ T6552] netlink: 75 bytes leftover after parsing attributes in process `syz.4.205'. [ 103.805654][ T6325] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 103.899526][ T6559] netlink: 100 bytes leftover after parsing attributes in process `syz.1.206'. [ 103.912340][ T6325] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 103.988603][ T6325] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 104.060845][ T6325] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 104.129899][ T6516] chnl_net:caif_netlink_parms(): no params data found [ 104.190017][ T6564] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 104.450533][ T5141] Bluetooth: hci4: command 0x0c1a tx timeout [ 104.544950][ T81] bridge_slave_1: left allmulticast mode [ 104.561803][ T81] bridge_slave_1: left promiscuous mode [ 104.567553][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.584802][ T81] bridge_slave_0: left allmulticast mode [ 104.591695][ T81] bridge_slave_0: left promiscuous mode [ 104.597474][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.610982][ T5141] Bluetooth: hci5: command tx timeout [ 104.645369][ T30] audit: type=1326 audit(1742899624.186:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.1.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5558d169 code=0x7ffc0000 [ 104.698932][ T5141] Bluetooth: hci2: command 0x0419 tx timeout [ 104.770977][ T30] audit: type=1326 audit(1742899624.186:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.1.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fcd5558d169 code=0x7ffc0000 [ 104.832800][ T30] audit: type=1326 audit(1742899624.186:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.1.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5558d169 code=0x7ffc0000 [ 104.867128][ T30] audit: type=1326 audit(1742899624.186:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.1.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fcd5558d169 code=0x7ffc0000 [ 104.902839][ T30] audit: type=1326 audit(1742899624.256:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.1.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5558d169 code=0x7ffc0000 [ 104.930341][ T30] audit: type=1326 audit(1742899624.256:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.1.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5558d169 code=0x7ffc0000 [ 105.164726][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.196014][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.207175][ T81] bond0 (unregistering): Released all slaves [ 105.463794][ T6597] netlink: 100 bytes leftover after parsing attributes in process `syz.2.220'. [ 105.554070][ T6516] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.563524][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.583431][ T6516] bridge_slave_0: entered allmulticast mode [ 105.604916][ T6516] bridge_slave_0: entered promiscuous mode [ 105.629739][ T6516] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.646968][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.661978][ T6516] bridge_slave_1: entered allmulticast mode [ 105.681602][ T6516] bridge_slave_1: entered promiscuous mode [ 105.693483][ T6599] IPVS: stopping master sync thread 6604 ... [ 105.700088][ T6604] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 106.064225][ T6516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.091166][ T6516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.252772][ T6516] team0: Port device team_slave_0 added [ 106.287118][ T6516] team0: Port device team_slave_1 added [ 106.594108][ T81] hsr_slave_0: left promiscuous mode [ 106.607011][ T81] hsr_slave_1: left promiscuous mode [ 106.619982][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.649993][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.707914][ T5141] Bluetooth: hci5: command tx timeout [ 106.729507][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.739470][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.768936][ T5141] Bluetooth: hci2: command 0x0419 tx timeout [ 106.824931][ T81] veth1_macvtap: left promiscuous mode [ 106.830632][ T81] veth0_macvtap: left promiscuous mode [ 106.836250][ T81] veth1_vlan: left promiscuous mode [ 106.842191][ T81] veth0_vlan: left promiscuous mode [ 106.844651][ T6635] loop2: detected capacity change from 0 to 128 [ 106.875711][ T6635] FAT-fs (loop2): bogus number of reserved sectors [ 106.906595][ T6635] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 106.949137][ T6635] FAT-fs (loop2): Can't find a valid FAT filesystem [ 107.311624][ T6657] loop2: detected capacity change from 0 to 512 [ 107.327360][ T6657] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 107.361774][ T6657] EXT4-fs (loop2): 1 truncate cleaned up [ 107.368704][ T6657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.419449][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.537915][ T81] team0 (unregistering): Port device team_slave_1 removed [ 107.593210][ T81] team0 (unregistering): Port device team_slave_0 removed [ 107.928331][ T6516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.935701][ T6516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.964369][ T6516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.988304][ T6325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.029020][ T6516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.062751][ T6516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.139728][ T6516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.578301][ T6516] hsr_slave_0: entered promiscuous mode [ 108.635472][ T6516] hsr_slave_1: entered promiscuous mode [ 108.677686][ T6516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.788961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 108.830386][ T5141] Bluetooth: hci5: command tx timeout [ 109.496428][ T6516] Cannot create hsr debugfs directory [ 109.996007][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.249'. [ 110.511124][ T6700] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.198888][ T5141] Bluetooth: hci5: command tx timeout [ 111.239570][ T6692] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.248937][ T6692] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.257653][ T6692] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.266922][ T6692] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.282544][ T6692] vxlan0: entered promiscuous mode [ 111.310384][ T6325] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.421188][ T6279] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.428311][ T6279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.483317][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.490451][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.979147][ T6516] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 112.032389][ T6516] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 112.073413][ T6730] loop1: detected capacity change from 0 to 512 [ 112.093960][ T6516] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 112.113994][ T6730] EXT4-fs: Ignoring removed orlov option [ 112.137751][ T6516] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 112.199165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.224925][ T6730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 112.249055][ T6730] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.272746][ T6325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.319124][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 113.359028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.367360][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.397101][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.405468][ T6516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.512184][ T6516] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.572445][ T5911] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.579633][ T5911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.644585][ T6761] ip6erspan0: entered promiscuous mode [ 113.687512][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.694669][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.719513][ T876] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 114.048949][ T876] usb 5-1: Using ep0 maxpacket: 8 [ 114.052180][ T6516] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.098126][ T6516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.101717][ T876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.178836][ T876] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 114.246932][ T876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.325756][ T876] usb 5-1: config 0 descriptor?? [ 114.376035][ T6778] loop1: detected capacity change from 0 to 1024 [ 114.509391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.562438][ T30] audit: type=1326 audit(1742899634.106:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.0.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6218d169 code=0x7ffc0000 [ 114.581935][ T6788] mmap: syz.0.270 (6788) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 114.612117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.630911][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.728238][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 114.757075][ T30] audit: type=1326 audit(1742899634.106:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.0.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6218d169 code=0x7ffc0000 [ 114.789224][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 114.794658][ T6325] veth0_vlan: entered promiscuous mode [ 114.813043][ T876] holtek 0003:1241:5015.0001: unknown main item tag 0x0 [ 114.889226][ T876] holtek 0003:1241:5015.0001: unknown main item tag 0x0 [ 114.939337][ T876] holtek 0003:1241:5015.0001: unknown main item tag 0x0 [ 114.942341][ T6325] veth1_vlan: entered promiscuous mode [ 114.946686][ T30] audit: type=1326 audit(1742899634.106:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.0.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a6218d169 code=0x7ffc0000 [ 114.984396][ T876] holtek 0003:1241:5015.0001: unknown main item tag 0x0 [ 115.012506][ T876] holtek 0003:1241:5015.0001: unknown main item tag 0x0 [ 115.026804][ T6778] EXT4-fs: Ignoring removed orlov option [ 115.048932][ T6778] EXT4-fs (loop1): Test dummy encryption mode enabled [ 115.087343][ T876] holtek 0003:1241:5015.0001: hidraw0: USB HID vff.ff Device [HID 1241:5015] on usb-dummy_hcd.4-1/input0 [ 115.110367][ T6778] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 115.138841][ T30] audit: type=1326 audit(1742899634.106:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.0.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6218d169 code=0x7ffc0000 [ 115.171420][ T876] holtek 0003:1241:5015.0001: no inputs found [ 115.226594][ T6325] veth0_macvtap: entered promiscuous mode [ 115.228967][ T30] audit: type=1326 audit(1742899634.106:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.0.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6218d169 code=0x7ffc0000 [ 115.256091][ T30] audit: type=1326 audit(1742899634.106:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.0.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a6218d169 code=0x7ffc0000 [ 115.278662][ T30] audit: type=1326 audit(1742899634.106:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.0.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6218d169 code=0x7ffc0000 [ 115.302458][ T30] audit: type=1326 audit(1742899634.106:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.0.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6218d169 code=0x7ffc0000 [ 115.370414][ T876] usb 5-1: USB disconnect, device number 2 [ 115.388295][ T6778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.394080][ T6325] veth1_macvtap: entered promiscuous mode [ 115.416574][ T30] audit: type=1326 audit(1742899634.106:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.0.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a6218d169 code=0x7ffc0000 [ 115.551651][ T30] audit: type=1326 audit(1742899634.106:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.0.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6218d169 code=0x7ffc0000 [ 115.561063][ T6516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.681559][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.726046][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.748896][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.798870][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.826347][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.888399][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.928656][ T6325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.984679][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.018960][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.043076][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.058323][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.098824][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.141800][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.154055][ T6325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.166840][ T6325] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.175951][ T6325] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.189967][ T6325] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.213214][ T6325] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.475516][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.498903][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.631098][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.688854][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.702459][ T6516] veth0_vlan: entered promiscuous mode [ 116.806035][ T6516] veth1_vlan: entered promiscuous mode [ 116.919721][ T6516] veth0_macvtap: entered promiscuous mode [ 116.953654][ T6516] veth1_macvtap: entered promiscuous mode [ 117.036903][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.053336][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.121657][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.165496][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.191676][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.215069][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.228124][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.242965][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.257844][ T6516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.260928][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.341567][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.389893][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.406087][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.427985][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.464105][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.497959][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.513984][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.546496][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.562178][ T6516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.642831][ T6516] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.695141][ T6516] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.719659][ T6516] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.826406][ T6516] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.880473][ T6861] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.104246][ T6861] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.277730][ T6861] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.442797][ T6869] loop1: detected capacity change from 0 to 2048 [ 118.658553][ T6861] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.735464][ T6869] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.754906][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.811384][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.038427][ T6861] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.284046][ T6861] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.613918][ T6879] netlink: 'syz.1.292': attribute type 4 has an invalid length. [ 119.629068][ T6879] netlink: 17 bytes leftover after parsing attributes in process `syz.1.292'. [ 121.050818][ T6861] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.146350][ T6861] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.205024][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.284596][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.624547][ T6911] tipc: Started in network mode [ 122.709113][ T6911] tipc: Node identity ac14140f, cluster identity 4711 [ 122.778092][ T6911] tipc: New replicast peer: 255.255.255.255 [ 122.889454][ T6911] tipc: Enabled bearer , priority 10 [ 124.010165][ T876] tipc: Node number set to 2886997007 [ 124.065341][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 124.065363][ T30] audit: type=1326 audit(1742899643.606:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.1.302" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd5558d169 code=0x0 [ 124.357925][ T6941] xt_l2tp: invalid flags combination: 0 [ 124.524124][ T6946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.306'. [ 124.601423][ T6946] bridge_slave_1: left allmulticast mode [ 124.607118][ T6946] bridge_slave_1: left promiscuous mode [ 124.620092][ T6946] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.664033][ T6946] bridge1: port 1(bridge_slave_1) entered blocking state [ 124.686530][ T6946] bridge1: port 1(bridge_slave_1) entered disabled state [ 124.729813][ T6946] bridge_slave_1: entered allmulticast mode [ 124.751390][ T6946] bridge_slave_1: entered promiscuous mode [ 125.044824][ T6959] loop2: detected capacity change from 0 to 2048 [ 125.080139][ T6953] fuse: root generation should be zero [ 125.146720][ T6959] Bluetooth: MGMT ver 1.23 [ 125.412107][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.312'. [ 125.680579][ T6979] netlink: 100 bytes leftover after parsing attributes in process `syz.2.315'. [ 125.707566][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 125.901198][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 125.933508][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 126.009247][ T9] usb 7-1: config 219 has an invalid interface number: 55 but max is 0 [ 126.053514][ T9] usb 7-1: config 219 has no interface number 0 [ 126.099549][ T9] usb 7-1: config 219 interface 55 has no altsetting 0 [ 126.430384][ T7000] loop4: detected capacity change from 0 to 128 [ 127.236117][ T9] usb 7-1: New USB device found, idVendor=19d2, idProduct=f4fe, bcdDevice=37.2c [ 127.394294][ T7000] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.412727][ T7000] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.620480][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.128823][ T9] usb 7-1: Product: syz [ 128.133036][ T9] usb 7-1: Manufacturer: syz [ 128.137638][ T9] usb 7-1: SerialNumber: syz [ 128.235681][ T7008] loop1: detected capacity change from 0 to 1024 [ 129.222353][ T30] audit: type=1326 audit(1742899648.746:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.6.322" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d7f18d169 code=0x0 [ 129.316047][ T9] usb 7-1: can't set config #219, error -71 [ 129.359610][ T9] usb 7-1: USB disconnect, device number 2 [ 129.424903][ T5832] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.449331][ T7008] bio_check_eod: 3 callbacks suppressed [ 129.449350][ T7008] syz.1.320: attempt to access beyond end of device [ 129.449350][ T7008] loop1: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 129.499423][ T7008] Buffer I/O error on dev loop1, logical block 100663296, async page read [ 129.508140][ T7008] syz.1.320: attempt to access beyond end of device [ 129.508140][ T7008] loop1: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 129.535684][ T7008] Buffer I/O error on dev loop1, logical block 100663296, async page read [ 129.796261][ T7032] loop7: detected capacity change from 0 to 512 [ 130.169794][ T7032] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.198974][ T7032] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.418179][ T30] audit: type=1800 audit(1742899649.956:144): pid=7032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.327" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 130.454592][ T7046] netlink: 100 bytes leftover after parsing attributes in process `syz.4.331'. [ 130.487481][ T6516] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.179877][ T7052] loop6: detected capacity change from 0 to 512 [ 131.273106][ T7052] EXT4-fs: Ignoring removed oldalloc option [ 131.309738][ T7052] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 131.354527][ T7052] EXT4-fs (loop6): 1 truncate cleaned up [ 131.390280][ T7052] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.965843][ T7062] loop1: detected capacity change from 0 to 2048 [ 131.993949][ T7064] loop4: detected capacity change from 0 to 1024 [ 132.001663][ T7068] netlink: 12 bytes leftover after parsing attributes in process `syz.7.333'. [ 132.118680][ T7064] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 132.118680][ T7064] [ 132.163121][ T7068] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.172121][ T7068] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.180908][ T7068] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.189689][ T7068] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.218577][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.233140][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.289600][ T7062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.337551][ T6325] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 132.355504][ T7064] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 132.445101][ T7068] vxlan0: entered promiscuous mode [ 134.606237][ T6325] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.246940][ T5830] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 135.358574][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.749047][ T30] audit: type=1326 audit(1742899655.096:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7095 comm="syz.0.344" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a6218d169 code=0x0 [ 135.869293][ T7086] geneve0: entered allmulticast mode [ 136.206728][ T7108] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 136.253167][ T7111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.270392][ T7111] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 136.281781][ T7111] bond0: (slave sit0): Error -95 calling set_mac_address [ 136.456031][ T7119] netlink: 'syz.1.349': attribute type 4 has an invalid length. [ 136.465652][ T7119] netlink: 17 bytes leftover after parsing attributes in process `syz.1.349'. [ 137.090326][ T7132] xt_l2tp: invalid flags combination: 0 [ 137.198602][ T7137] tipc: Started in network mode [ 137.229571][ T7137] tipc: Node identity 4, cluster identity 4711 [ 137.278218][ T7137] tipc: Node number set to 4 [ 137.642606][ T7152] raw_sendmsg: syz.7.360 forgot to set AF_INET. Fix it! [ 138.131888][ T7153] geneve0: entered allmulticast mode [ 138.854500][ T5893] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 138.972155][ T30] audit: type=1326 audit(1742899658.516:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7174 comm="syz.6.366" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d7f18d169 code=0x0 [ 139.020672][ T5893] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 139.055947][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.123242][ T5893] usb 1-1: config 0 descriptor?? [ 139.164504][ T5893] cp210x 1-1:0.0: cp210x converter detected [ 139.957699][ T5893] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 140.093201][ T5141] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 140.199092][ T5893] usb 1-1: cp210x converter now attached to ttyUSB0 [ 140.300148][ T7203] wg0: entered allmulticast mode [ 140.345535][ T7207] loop1: detected capacity change from 0 to 256 [ 140.611990][ T7209] geneve0: entered allmulticast mode [ 140.629193][ T5893] usb 1-1: USB disconnect, device number 2 [ 140.688192][ T7213] netlink: 128 bytes leftover after parsing attributes in process `syz.6.375'. [ 140.805505][ T5893] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 140.829129][ T7207] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 140.853726][ T5893] cp210x 1-1:0.0: device disconnected [ 141.264890][ T30] audit: type=1326 audit(1742899660.806:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7225 comm="syz.2.383" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bf6b8d169 code=0x0 [ 145.510670][ T7261] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 145.564027][ T7261] bond0: (slave sit0): Error -95 calling set_mac_address [ 146.468895][ T970] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 146.639286][ T970] usb 5-1: Using ep0 maxpacket: 32 [ 146.667089][ T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.703995][ T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.751175][ T970] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 146.794982][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.833104][ T970] usb 5-1: config 0 descriptor?? [ 147.269876][ T970] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 147.289883][ T970] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 147.328115][ T970] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 147.370980][ T970] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 147.403416][ T970] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 147.452000][ T970] koneplus 0003:1E7D:2D51.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 147.455459][ T7319] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 147.496745][ T7321] netlink: 12 bytes leftover after parsing attributes in process `syz.6.409'. [ 147.534488][ T970] koneplus 0003:1E7D:2D51.0002: couldn't init struct koneplus_device [ 147.559415][ T7319] bond0: (slave sit0): Error -95 calling set_mac_address [ 147.564580][ T970] koneplus 0003:1E7D:2D51.0002: couldn't install mouse [ 147.585461][ T970] koneplus 0003:1E7D:2D51.0002: probe with driver koneplus failed with error -71 [ 147.821623][ T970] usb 5-1: USB disconnect, device number 3 [ 148.410010][ T7335] loop1: detected capacity change from 0 to 256 [ 148.509713][ T7335] vfat: Bad value for 'dmask' [ 149.601613][ T7363] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 149.833934][ T7372] loop7: detected capacity change from 0 to 1024 [ 149.933071][ T7372] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.200681][ T7392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.427'. [ 151.303610][ T6516] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.367851][ T7423] loop4: detected capacity change from 0 to 1024 [ 152.429467][ T7423] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 152.429467][ T7423] [ 152.501672][ T7423] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 152.510945][ T7429] loop2: detected capacity change from 0 to 1024 [ 152.522583][ T7431] loop7: detected capacity change from 0 to 256 [ 152.587479][ T7431] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xda7fae0b, utbl_chksum : 0xe619d30d) [ 152.938429][ T7438] loop4: detected capacity change from 0 to 164 [ 153.833322][ T7443] netlink: 72 bytes leftover after parsing attributes in process `syz.6.446'. [ 154.220047][ T7450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.445'. [ 154.501511][ T7456] loop6: detected capacity change from 0 to 1024 [ 154.648091][ T7456] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.828829][ T30] audit: type=1804 audit(1742899674.366:148): pid=7456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.449" name="/newroot/22/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop6" ino=839 res=1 errno=0 [ 155.024074][ T6325] UDF-fs: warning (device loop6): udf_evict_inode: Inode 839 (mode 100755) has inode size 68714 different from extent length 69120. Filesystem need not be standards compliant. [ 155.108561][ T30] audit: type=1800 audit(1742899674.646:149): pid=7431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.442" name="file2" dev="loop7" ino=18 res=0 errno=0 [ 155.131564][ T7474] loop2: detected capacity change from 0 to 16 [ 155.167339][ T7479] loop4: detected capacity change from 0 to 512 [ 155.210652][ T7474] erofs (device loop2): mounted with root inode @ nid 36. [ 155.230874][ T7479] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 155.326674][ T7479] EXT4-fs (loop4): 1 truncate cleaned up [ 155.350414][ T7479] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.508942][ T7479] syz.4.457 (pid 7479) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 155.559957][ T7491] erofs (device loop2): corrupted dir block 8200 @ nid 36 [ 155.687845][ T7488] erofs (device loop2): corrupted dir block 8200 @ nid 36 [ 156.348308][ T7494] netlink: 72 bytes leftover after parsing attributes in process `syz.6.461'. [ 156.501544][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.651778][ T7509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.463'. [ 156.680386][ T7509] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.689267][ T7509] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.697973][ T7509] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.706777][ T7509] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.231697][ T7509] vxlan0: entered promiscuous mode [ 157.351317][ T7516] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 157.400390][ T7516] bond0: (slave sit0): Error -95 calling set_mac_address [ 158.074145][ T7543] loop6: detected capacity change from 0 to 256 [ 158.713640][ T7543] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 159.160464][ T7549] syz.2.476: attempt to access beyond end of device [ 159.160464][ T7549] loop2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 159.243011][ T7543] process 'syz.6.475' launched './file0' with NULL argv: empty string added [ 159.309419][ T7549] syz.2.476: attempt to access beyond end of device [ 159.309419][ T7549] loop2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 159.359066][ T7549] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 159.378019][ T7549] syz.2.476: attempt to access beyond end of device [ 159.378019][ T7549] loop2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 159.405723][ T7549] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 159.446810][ T7549] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 159.489475][ T7549] UDF-fs: Scanning with blocksize 512 failed [ 159.516533][ T7549] syz.2.476: attempt to access beyond end of device [ 159.516533][ T7549] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 159.576693][ T7549] syz.2.476: attempt to access beyond end of device [ 159.576693][ T7549] loop2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 159.618410][ T7559] loop1: detected capacity change from 0 to 2048 [ 159.635600][ T7549] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 159.666925][ T7549] syz.2.476: attempt to access beyond end of device [ 159.666925][ T7549] loop2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 159.699246][ T7561] netlink: 72 bytes leftover after parsing attributes in process `syz.0.480'. [ 159.712920][ T7549] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 159.750826][ T7559] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 159.772650][ T7549] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 159.827728][ T7549] UDF-fs: Scanning with blocksize 1024 failed [ 159.847761][ T7559] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.873596][ T7549] syz.2.476: attempt to access beyond end of device [ 159.873596][ T7549] loop2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 159.919863][ T7549] syz.2.476: attempt to access beyond end of device [ 159.919863][ T7549] loop2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 159.933799][ T7549] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 159.966246][ T7549] syz.2.476: attempt to access beyond end of device [ 159.966246][ T7549] loop2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 160.020483][ T7549] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 160.038644][ T7549] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 160.049442][ T7549] UDF-fs: Scanning with blocksize 2048 failed [ 160.066645][ T7549] syz.2.476: attempt to access beyond end of device [ 160.066645][ T7549] loop2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 160.161419][ T7572] netlink: 'syz.6.484': attribute type 4 has an invalid length. [ 160.175514][ T7549] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 160.183350][ T7572] netlink: 17 bytes leftover after parsing attributes in process `syz.6.484'. [ 160.207841][ T7549] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 160.289475][ T7549] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 160.336593][ T7549] UDF-fs: Scanning with blocksize 4096 failed [ 160.379117][ T7549] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 160.385111][ T7577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.485'. [ 160.529417][ T7577] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.538241][ T7577] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.547247][ T7577] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.556397][ T7577] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.570958][ T7577] vxlan0: entered promiscuous mode [ 160.898164][ T7584] loop2: detected capacity change from 0 to 2048 [ 160.949851][ T7584] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.082658][ T7596] loop6: detected capacity change from 0 to 8 [ 161.935724][ T7627] capability: warning: `syz.4.501' uses 32-bit capabilities (legacy support in use) [ 162.253144][ T7639] loop4: detected capacity change from 0 to 1024 [ 162.267795][ T7639] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 162.267795][ T7639] [ 162.291048][ T7639] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 164.394426][ T7646] loop6: detected capacity change from 0 to 2048 [ 164.493871][ T7646] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.373963][ T7686] loop1: detected capacity change from 0 to 128 [ 167.398391][ T7688] loop6: detected capacity change from 0 to 512 [ 167.404781][ T7686] FAT-fs (loop1): bogus number of reserved sectors [ 167.446637][ T7686] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 167.480045][ T7688] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 167.518902][ T7686] FAT-fs (loop1): Can't find a valid FAT filesystem [ 167.591608][ T5935] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 167.609005][ T7688] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.020506][ T7696] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 168.032521][ T7696] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 169.375904][ T7700] loop7: detected capacity change from 0 to 2048 [ 169.418982][ T5935] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 169.428128][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.454465][ T7700] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.459001][ T5935] usb 1-1: config 0 descriptor?? [ 169.503566][ T5935] cp210x 1-1:0.0: cp210x converter detected [ 169.573118][ T6325] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 169.865473][ T7708] loop6: detected capacity change from 0 to 2048 [ 169.919318][ T5935] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 169.980206][ T5935] usb 1-1: cp210x converter now attached to ttyUSB0 [ 170.063659][ T7708] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.195457][ T47] usb 1-1: USB disconnect, device number 3 [ 170.229689][ T5940] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 170.245311][ T47] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 170.265855][ T7725] loop7: detected capacity change from 0 to 2048 [ 170.310280][ T47] cp210x 1-1:0.0: device disconnected [ 170.316026][ T7725] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.422102][ T5940] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.449141][ T5940] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.485201][ T5940] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 170.509053][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 170.538800][ T5940] usb 5-1: SerialNumber: syz [ 170.569902][ T5940] usb 5-1: bad CDC descriptors [ 170.600580][ T5940] usb-storage 5-1:1.0: USB Mass Storage device detected [ 170.698368][ T5940] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 170.798774][ T5940] usb 5-1: USB disconnect, device number 4 [ 171.014649][ T6325] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.210861][ T7754] BUG: Bad page state in process syz.7.531 pfn:28983 [ 171.217700][ T7754] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28983 [ 171.226591][ T7754] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 171.233759][ T7754] raw: 00fff00000000000 dead000000000040 ffff888021e98000 0000000000000000 [ 171.242393][ T7754] raw: 0000000000000000 3fffffffffffffff 00000000ffffffff 0000000000000000 [ 171.251019][ T7754] page dumped because: page_pool leak [ 171.256415][ T7754] page_owner tracks the page as allocated [ 171.262425][ T7754] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7754, tgid 7749 (syz.7.531), ts 171210761024, free_ts 171100870570 [ 171.279433][ T7754] post_alloc_hook+0x1f4/0x240 [ 171.284229][ T7754] get_page_from_freelist+0x365c/0x37a0 [ 171.289858][ T7754] __alloc_frozen_pages_noprof+0x292/0x710 [ 171.295701][ T7754] alloc_pages_bulk_noprof+0x847/0xae0 [ 171.301248][ T7754] __page_pool_alloc_pages_slow+0x11f/0x690 [ 171.307215][ T7754] page_pool_alloc_frag_netmem+0x59c/0x940 [ 171.313106][ T7754] skb_pp_cow_data+0xcea/0x1720 [ 171.317982][ T7754] do_xdp_generic+0x505/0xd30 [ 171.322725][ T7754] tun_get_user+0x2a4b/0x4860 [ 171.327428][ T7754] tun_chr_write_iter+0x10d/0x1f0 [ 171.332510][ T7754] vfs_write+0xad1/0xd10 [ 171.336786][ T7754] ksys_write+0x18f/0x2b0 [ 171.341176][ T7754] do_syscall_64+0xf3/0x230 [ 171.345704][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.351708][ T7754] page last free pid 6325 tgid 6325 stack trace: [ 171.358049][ T7754] free_unref_folios+0xe40/0x18b0 [ 171.363144][ T7754] folios_put_refs+0x76c/0x860 [ 171.367940][ T7754] truncate_inode_pages_range+0x460/0x10e0 [ 171.373829][ T7754] blkdev_flush_mapping+0x108/0x270 [ 171.379094][ T7754] bdev_release+0x460/0x700 [ 171.383622][ T7754] blkdev_release+0x15/0x20 [ 171.388143][ T7754] __fput+0x3eb/0x9f0 [ 171.392186][ T7754] task_work_run+0x251/0x310 [ 171.396798][ T7754] syscall_exit_to_user_mode+0x13f/0x340 [ 171.402504][ T7754] do_syscall_64+0x100/0x230 [ 171.407122][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.413099][ T7754] Modules linked in: [ 171.417022][ T7754] CPU: 0 UID: 0 PID: 7754 Comm: syz.7.531 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 171.417056][ T7754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 171.417072][ T7754] Call Trace: [ 171.417081][ T7754] [ 171.417091][ T7754] dump_stack_lvl+0x241/0x360 [ 171.417124][ T7754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.417152][ T7754] ? __pfx_print_modules+0x10/0x10 [ 171.417191][ T7754] bad_page+0x176/0x1d0 [ 171.417232][ T7754] free_frozen_pages+0x1082/0x10e0 [ 171.417272][ T7754] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 171.417315][ T7754] bpf_xdp_adjust_tail+0x1c6/0x210 [ 171.417359][ T7754] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 171.417382][ T7754] bpf_prog_run_generic_xdp+0x686/0x1510 [ 171.417442][ T7754] do_xdp_generic+0x757/0xd30 [ 171.417483][ T7754] ? __pfx_do_xdp_generic+0x10/0x10 [ 171.417515][ T7754] ? __virt_addr_valid+0x183/0x530 [ 171.417581][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.417627][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.417671][ T7754] ? tun_get_user+0x2914/0x4860 [ 171.417704][ T7754] tun_get_user+0x2a4b/0x4860 [ 171.417746][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.417790][ T7754] ? aa_file_perm+0x137/0xf50 [ 171.417820][ T7754] ? aa_file_perm+0x137/0xf50 [ 171.417848][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.417888][ T7754] ? aa_file_perm+0x3ef/0xf50 [ 171.417916][ T7754] ? __pfx_tun_get_user+0x10/0x10 [ 171.417959][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.418000][ T7754] ? ref_tracker_alloc+0x332/0x490 [ 171.418030][ T7754] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 171.418069][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.418112][ T7754] ? tun_get+0x1e/0x2f0 [ 171.418145][ T7754] ? tun_get+0x1e/0x2f0 [ 171.418174][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.418216][ T7754] ? tun_get+0x27d/0x2f0 [ 171.418248][ T7754] tun_chr_write_iter+0x10d/0x1f0 [ 171.418283][ T7754] vfs_write+0xad1/0xd10 [ 171.418321][ T7754] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 171.418354][ T7754] ? __pfx_vfs_write+0x10/0x10 [ 171.418387][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.418432][ T7754] ? __fget_files+0x2a/0x420 [ 171.418463][ T7754] ? __fget_files+0x2a/0x420 [ 171.418495][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.418540][ T7754] ksys_write+0x18f/0x2b0 [ 171.418582][ T7754] ? __pfx_ksys_write+0x10/0x10 [ 171.418624][ T7754] ? do_syscall_64+0xb6/0x230 [ 171.418656][ T7754] do_syscall_64+0xf3/0x230 [ 171.418689][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.418728][ T7754] RIP: 0033:0x7fbfc518bc1f [ 171.418750][ T7754] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 171.418773][ T7754] RSP: 002b:00007fbfc5f28000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 171.418799][ T7754] RAX: ffffffffffffffda RBX: 00007fbfc53a6080 RCX: 00007fbfc518bc1f [ 171.418818][ T7754] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 171.418835][ T7754] RBP: 00007fbfc520e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 171.418852][ T7754] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 171.418868][ T7754] R13: 0000000000000001 R14: 00007fbfc53a6080 R15: 00007ffd7c664838 [ 171.418899][ T7754] [ 171.737355][ T7754] Disabling lock debugging due to kernel taint [ 171.743569][ T7754] BUG: Bad page state in process syz.7.531 pfn:4d608 [ 171.750373][ T7754] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4d608 [ 171.759177][ T7754] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 171.766312][ T7754] raw: 00fff00000000000 dead000000000040 ffff888021e98000 0000000000000000 [ 171.774970][ T7754] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 171.783604][ T7754] page dumped because: page_pool leak [ 171.789014][ T7754] page_owner tracks the page as allocated [ 171.794745][ T7754] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7754, tgid 7749 (syz.7.531), ts 171210748734, free_ts 171109161783 [ 171.811739][ T7754] post_alloc_hook+0x1f4/0x240 [ 171.816533][ T7754] get_page_from_freelist+0x365c/0x37a0 [ 171.822176][ T7754] __alloc_frozen_pages_noprof+0x292/0x710 [ 171.828018][ T7754] alloc_pages_bulk_noprof+0x847/0xae0 [ 171.833543][ T7754] __page_pool_alloc_pages_slow+0x11f/0x690 [ 171.839498][ T7754] skb_pp_cow_data+0xcc8/0x1720 [ 171.844378][ T7754] do_xdp_generic+0x505/0xd30 [ 171.849122][ T7754] tun_get_user+0x2a4b/0x4860 [ 171.853827][ T7754] tun_chr_write_iter+0x10d/0x1f0 [ 171.858915][ T7754] vfs_write+0xad1/0xd10 [ 171.863188][ T7754] ksys_write+0x18f/0x2b0 [ 171.867555][ T7754] do_syscall_64+0xf3/0x230 [ 171.872135][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.878068][ T7754] page last free pid 23 tgid 23 stack trace: [ 171.884101][ T7754] free_frozen_pages+0xe0d/0x10e0 [ 171.889184][ T7754] __tlb_remove_table+0x33c/0x420 [ 171.894247][ T7754] tlb_remove_table_rcu+0x76/0xf0 [ 171.899349][ T7754] rcu_core+0xaac/0x17a0 [ 171.903619][ T7754] handle_softirqs+0x2d6/0x9b0 [ 171.908412][ T7754] run_ksoftirqd+0xca/0x130 [ 171.912984][ T7754] smpboot_thread_fn+0x546/0xa30 [ 171.917954][ T7754] kthread+0x7ab/0x920 [ 171.922103][ T7754] ret_from_fork+0x4d/0x80 [ 171.926559][ T7754] ret_from_fork_asm+0x1a/0x30 [ 171.931398][ T7754] Modules linked in: [ 171.935328][ T7754] CPU: 0 UID: 0 PID: 7754 Comm: syz.7.531 Tainted: G B 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 171.935366][ T7754] Tainted: [B]=BAD_PAGE [ 171.935376][ T7754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 171.935392][ T7754] Call Trace: [ 171.935401][ T7754] [ 171.935411][ T7754] dump_stack_lvl+0x241/0x360 [ 171.935443][ T7754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.935470][ T7754] ? __pfx_print_modules+0x10/0x10 [ 171.935505][ T7754] bad_page+0x176/0x1d0 [ 171.935555][ T7754] free_frozen_pages+0x1082/0x10e0 [ 171.935593][ T7754] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 171.935634][ T7754] bpf_xdp_adjust_tail+0x1c6/0x210 [ 171.935678][ T7754] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 171.935700][ T7754] bpf_prog_run_generic_xdp+0x686/0x1510 [ 171.935752][ T7754] do_xdp_generic+0x757/0xd30 [ 171.935791][ T7754] ? __pfx_do_xdp_generic+0x10/0x10 [ 171.935826][ T7754] ? __virt_addr_valid+0x183/0x530 [ 171.935881][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.935925][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.935970][ T7754] ? tun_get_user+0x2914/0x4860 [ 171.936003][ T7754] tun_get_user+0x2a4b/0x4860 [ 171.936041][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.936083][ T7754] ? aa_file_perm+0x137/0xf50 [ 171.936112][ T7754] ? aa_file_perm+0x137/0xf50 [ 171.936139][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.936181][ T7754] ? aa_file_perm+0x3ef/0xf50 [ 171.936208][ T7754] ? __pfx_tun_get_user+0x10/0x10 [ 171.936247][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.936310][ T7754] ? ref_tracker_alloc+0x332/0x490 [ 171.936341][ T7754] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 171.936375][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.936418][ T7754] ? tun_get+0x1e/0x2f0 [ 171.936450][ T7754] ? tun_get+0x1e/0x2f0 [ 171.936479][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.936520][ T7754] ? tun_get+0x27d/0x2f0 [ 171.936557][ T7754] tun_chr_write_iter+0x10d/0x1f0 [ 171.936591][ T7754] vfs_write+0xad1/0xd10 [ 171.936628][ T7754] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 171.936661][ T7754] ? __pfx_vfs_write+0x10/0x10 [ 171.936695][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.936739][ T7754] ? __fget_files+0x2a/0x420 [ 171.936769][ T7754] ? __fget_files+0x2a/0x420 [ 171.936800][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.936844][ T7754] ksys_write+0x18f/0x2b0 [ 171.936881][ T7754] ? __pfx_ksys_write+0x10/0x10 [ 171.936921][ T7754] ? do_syscall_64+0xb6/0x230 [ 171.936952][ T7754] do_syscall_64+0xf3/0x230 [ 171.936981][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.937018][ T7754] RIP: 0033:0x7fbfc518bc1f [ 171.937040][ T7754] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 171.937063][ T7754] RSP: 002b:00007fbfc5f28000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 171.937089][ T7754] RAX: ffffffffffffffda RBX: 00007fbfc53a6080 RCX: 00007fbfc518bc1f [ 171.937110][ T7754] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 171.937127][ T7754] RBP: 00007fbfc520e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 171.937144][ T7754] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 171.937161][ T7754] R13: 0000000000000001 R14: 00007fbfc53a6080 R15: 00007ffd7c664838 [ 171.937188][ T7754] [ 171.937201][ T7754] BUG: Bad page state in process syz.7.531 pfn:5d19f [ 172.268517][ T7754] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805d19fdc0 pfn:0x5d19f [ 172.278618][ T7754] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 172.285763][ T7754] raw: 00fff00000000000 dead000000000040 ffff888021e98000 0000000000000000 [ 172.294376][ T7754] raw: ffff88805d19fdc0 0000000000000001 00000000ffffffff 0000000000000000 [ 172.302982][ T7754] page dumped because: page_pool leak [ 172.308338][ T7754] page_owner tracks the page as allocated [ 172.314072][ T7754] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7754, tgid 7749 (syz.7.531), ts 171210736925, free_ts 171109175963 [ 172.331036][ T7754] post_alloc_hook+0x1f4/0x240 [ 172.335799][ T7754] get_page_from_freelist+0x365c/0x37a0 [ 172.341404][ T7754] __alloc_frozen_pages_noprof+0x292/0x710 [ 172.347234][ T7754] alloc_pages_bulk_noprof+0x847/0xae0 [ 172.352729][ T7754] __page_pool_alloc_pages_slow+0x11f/0x690 [ 172.358638][ T7754] skb_pp_cow_data+0xcc8/0x1720 [ 172.363540][ T7754] do_xdp_generic+0x505/0xd30 [ 172.368260][ T7754] tun_get_user+0x2a4b/0x4860 [ 172.372969][ T7754] tun_chr_write_iter+0x10d/0x1f0 [ 172.378007][ T7754] vfs_write+0xad1/0xd10 [ 172.382286][ T7754] ksys_write+0x18f/0x2b0 [ 172.386635][ T7754] do_syscall_64+0xf3/0x230 [ 172.391165][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.397097][ T7754] page last free pid 23 tgid 23 stack trace: [ 172.403451][ T7754] free_frozen_pages+0xe0d/0x10e0 [ 172.408493][ T7754] __tlb_remove_table+0x33c/0x420 [ 172.413559][ T7754] tlb_remove_table_rcu+0x76/0xf0 [ 172.418607][ T7754] rcu_core+0xaac/0x17a0 [ 172.422883][ T7754] handle_softirqs+0x2d6/0x9b0 [ 172.427662][ T7754] run_ksoftirqd+0xca/0x130 [ 172.432200][ T7754] smpboot_thread_fn+0x546/0xa30 [ 172.437161][ T7754] kthread+0x7ab/0x920 [ 172.441272][ T7754] ret_from_fork+0x4d/0x80 [ 172.445707][ T7754] ret_from_fork_asm+0x1a/0x30 [ 172.450506][ T7754] Modules linked in: [ 172.454455][ T7754] CPU: 0 UID: 0 PID: 7754 Comm: syz.7.531 Tainted: G B 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 172.454488][ T7754] Tainted: [B]=BAD_PAGE [ 172.454495][ T7754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 172.454509][ T7754] Call Trace: [ 172.454516][ T7754] [ 172.454525][ T7754] dump_stack_lvl+0x241/0x360 [ 172.454553][ T7754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.454573][ T7754] ? __pfx_print_modules+0x10/0x10 [ 172.454598][ T7754] bad_page+0x176/0x1d0 [ 172.454627][ T7754] free_frozen_pages+0x1082/0x10e0 [ 172.454654][ T7754] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 172.454682][ T7754] bpf_xdp_adjust_tail+0x1c6/0x210 [ 172.454712][ T7754] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 172.454729][ T7754] bpf_prog_run_generic_xdp+0x686/0x1510 [ 172.454766][ T7754] do_xdp_generic+0x757/0xd30 [ 172.454793][ T7754] ? __pfx_do_xdp_generic+0x10/0x10 [ 172.454816][ T7754] ? __virt_addr_valid+0x183/0x530 [ 172.454854][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.454886][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.454927][ T7754] ? tun_get_user+0x2914/0x4860 [ 172.454962][ T7754] tun_get_user+0x2a4b/0x4860 [ 172.454999][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.455029][ T7754] ? aa_file_perm+0x137/0xf50 [ 172.455050][ T7754] ? aa_file_perm+0x137/0xf50 [ 172.455069][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.455098][ T7754] ? aa_file_perm+0x3ef/0xf50 [ 172.455117][ T7754] ? __pfx_tun_get_user+0x10/0x10 [ 172.455145][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.455174][ T7754] ? ref_tracker_alloc+0x332/0x490 [ 172.455195][ T7754] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 172.455219][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.455249][ T7754] ? tun_get+0x1e/0x2f0 [ 172.455272][ T7754] ? tun_get+0x1e/0x2f0 [ 172.455293][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.455323][ T7754] ? tun_get+0x27d/0x2f0 [ 172.455346][ T7754] tun_chr_write_iter+0x10d/0x1f0 [ 172.455370][ T7754] vfs_write+0xad1/0xd10 [ 172.455396][ T7754] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 172.455420][ T7754] ? __pfx_vfs_write+0x10/0x10 [ 172.455443][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.455474][ T7754] ? __fget_files+0x2a/0x420 [ 172.455496][ T7754] ? __fget_files+0x2a/0x420 [ 172.455517][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.455552][ T7754] ksys_write+0x18f/0x2b0 [ 172.455578][ T7754] ? __pfx_ksys_write+0x10/0x10 [ 172.455605][ T7754] ? do_syscall_64+0xb6/0x230 [ 172.455626][ T7754] do_syscall_64+0xf3/0x230 [ 172.455647][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.455673][ T7754] RIP: 0033:0x7fbfc518bc1f [ 172.455689][ T7754] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 172.455704][ T7754] RSP: 002b:00007fbfc5f28000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 172.455724][ T7754] RAX: ffffffffffffffda RBX: 00007fbfc53a6080 RCX: 00007fbfc518bc1f [ 172.455738][ T7754] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 172.455750][ T7754] RBP: 00007fbfc520e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 172.455763][ T7754] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 172.455774][ T7754] R13: 0000000000000001 R14: 00007fbfc53a6080 R15: 00007ffd7c664838 [ 172.455794][ T7754] [ 172.455805][ T7754] BUG: Bad page state in process syz.7.531 pfn:4f16a [ 172.787077][ T7754] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802fae0a00 pfn:0x4f16a [ 172.797196][ T7754] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 172.804388][ T7754] raw: 00fff00000000000 dead000000000040 ffff888021e98000 0000000000000000 [ 172.813043][ T7754] raw: ffff88802fae0a00 0000000000000001 00000000ffffffff 0000000000000000 [ 172.821658][ T7754] page dumped because: page_pool leak [ 172.827016][ T7754] page_owner tracks the page as allocated [ 172.832760][ T7754] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7754, tgid 7749 (syz.7.531), ts 171210695224, free_ts 171109211643 [ 172.849778][ T7754] post_alloc_hook+0x1f4/0x240 [ 172.854557][ T7754] get_page_from_freelist+0x365c/0x37a0 [ 172.860151][ T7754] __alloc_frozen_pages_noprof+0x292/0x710 [ 172.865976][ T7754] alloc_pages_bulk_noprof+0x847/0xae0 [ 172.871485][ T7754] __page_pool_alloc_pages_slow+0x11f/0x690 [ 172.877397][ T7754] skb_pp_cow_data+0xcc8/0x1720 [ 172.882285][ T7754] do_xdp_generic+0x505/0xd30 [ 172.887017][ T7754] tun_get_user+0x2a4b/0x4860 [ 172.891755][ T7754] tun_chr_write_iter+0x10d/0x1f0 [ 172.896797][ T7754] vfs_write+0xad1/0xd10 [ 172.901086][ T7754] ksys_write+0x18f/0x2b0 [ 172.905436][ T7754] do_syscall_64+0xf3/0x230 [ 172.909976][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.915891][ T7754] page last free pid 23 tgid 23 stack trace: [ 172.921904][ T7754] free_frozen_pages+0xe0d/0x10e0 [ 172.926960][ T7754] __tlb_remove_table+0x33c/0x420 [ 172.932033][ T7754] tlb_remove_table_rcu+0x76/0xf0 [ 172.937082][ T7754] rcu_core+0xaac/0x17a0 [ 172.941381][ T7754] handle_softirqs+0x2d6/0x9b0 [ 172.946161][ T7754] run_ksoftirqd+0xca/0x130 [ 172.950704][ T7754] smpboot_thread_fn+0x546/0xa30 [ 172.955662][ T7754] kthread+0x7ab/0x920 [ 172.959778][ T7754] ret_from_fork+0x4d/0x80 [ 172.964213][ T7754] ret_from_fork_asm+0x1a/0x30 [ 172.969021][ T7754] Modules linked in: [ 172.972930][ T7754] CPU: 0 UID: 0 PID: 7754 Comm: syz.7.531 Tainted: G B 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 172.972957][ T7754] Tainted: [B]=BAD_PAGE [ 172.972964][ T7754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 172.972976][ T7754] Call Trace: [ 172.972984][ T7754] [ 172.972991][ T7754] dump_stack_lvl+0x241/0x360 [ 172.973018][ T7754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.973045][ T7754] ? __pfx_print_modules+0x10/0x10 [ 172.973080][ T7754] bad_page+0x176/0x1d0 [ 172.973122][ T7754] free_frozen_pages+0x1082/0x10e0 [ 172.973152][ T7754] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 172.973180][ T7754] bpf_xdp_adjust_tail+0x1c6/0x210 [ 172.973211][ T7754] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 172.973227][ T7754] bpf_prog_run_generic_xdp+0x686/0x1510 [ 172.973263][ T7754] do_xdp_generic+0x757/0xd30 [ 172.973291][ T7754] ? __pfx_do_xdp_generic+0x10/0x10 [ 172.973320][ T7754] ? __virt_addr_valid+0x183/0x530 [ 172.973375][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.973415][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.973445][ T7754] ? tun_get_user+0x2914/0x4860 [ 172.973469][ T7754] tun_get_user+0x2a4b/0x4860 [ 172.973497][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.973527][ T7754] ? aa_file_perm+0x137/0xf50 [ 172.973550][ T7754] ? aa_file_perm+0x137/0xf50 [ 172.973570][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.973599][ T7754] ? aa_file_perm+0x3ef/0xf50 [ 172.973618][ T7754] ? __pfx_tun_get_user+0x10/0x10 [ 172.973646][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.973674][ T7754] ? ref_tracker_alloc+0x332/0x490 [ 172.973695][ T7754] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 172.973719][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.973750][ T7754] ? tun_get+0x1e/0x2f0 [ 172.973772][ T7754] ? tun_get+0x1e/0x2f0 [ 172.973792][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.973821][ T7754] ? tun_get+0x27d/0x2f0 [ 172.973844][ T7754] tun_chr_write_iter+0x10d/0x1f0 [ 172.973868][ T7754] vfs_write+0xad1/0xd10 [ 172.973895][ T7754] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 172.973918][ T7754] ? __pfx_vfs_write+0x10/0x10 [ 172.973941][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.973972][ T7754] ? __fget_files+0x2a/0x420 [ 172.973994][ T7754] ? __fget_files+0x2a/0x420 [ 172.974015][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.974046][ T7754] ksys_write+0x18f/0x2b0 [ 172.974072][ T7754] ? __pfx_ksys_write+0x10/0x10 [ 172.974099][ T7754] ? do_syscall_64+0xb6/0x230 [ 172.974120][ T7754] do_syscall_64+0xf3/0x230 [ 172.974141][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.974167][ T7754] RIP: 0033:0x7fbfc518bc1f [ 172.974183][ T7754] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 172.974199][ T7754] RSP: 002b:00007fbfc5f28000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 172.974218][ T7754] RAX: ffffffffffffffda RBX: 00007fbfc53a6080 RCX: 00007fbfc518bc1f [ 172.974233][ T7754] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 172.974245][ T7754] RBP: 00007fbfc520e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 172.974257][ T7754] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 172.974269][ T7754] R13: 0000000000000001 R14: 00007fbfc53a6080 R15: 00007ffd7c664838 [ 172.974289][ T7754] [ 172.974304][ T7754] BUG: Bad page state in process syz.7.531 pfn:6d09a [ 173.305590][ T7754] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6d09a [ 173.314377][ T7754] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 173.321518][ T7754] raw: 00fff00000000000 dead000000000040 ffff888021e98000 0000000000000000 [ 173.330133][ T7754] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 173.338744][ T7754] page dumped because: page_pool leak [ 173.344110][ T7754] page_owner tracks the page as allocated [ 173.349853][ T7754] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7754, tgid 7749 (syz.7.531), ts 171210683664, free_ts 171109241613 [ 173.366846][ T7754] post_alloc_hook+0x1f4/0x240 [ 173.371650][ T7754] get_page_from_freelist+0x365c/0x37a0 [ 173.377213][ T7754] __alloc_frozen_pages_noprof+0x292/0x710 [ 173.383057][ T7754] alloc_pages_bulk_noprof+0x847/0xae0 [ 173.388539][ T7754] __page_pool_alloc_pages_slow+0x11f/0x690 [ 173.394468][ T7754] skb_pp_cow_data+0xcc8/0x1720 [ 173.399363][ T7754] do_xdp_generic+0x505/0xd30 [ 173.404057][ T7754] tun_get_user+0x2a4b/0x4860 [ 173.408787][ T7754] tun_chr_write_iter+0x10d/0x1f0 [ 173.413824][ T7754] vfs_write+0xad1/0xd10 [ 173.418067][ T7754] ksys_write+0x18f/0x2b0 [ 173.422433][ T7754] do_syscall_64+0xf3/0x230 [ 173.426946][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.432877][ T7754] page last free pid 23 tgid 23 stack trace: [ 173.438886][ T7754] free_frozen_pages+0xe0d/0x10e0 [ 173.443919][ T7754] rcu_core+0xaac/0x17a0 [ 173.448157][ T7754] handle_softirqs+0x2d6/0x9b0 [ 173.452952][ T7754] run_ksoftirqd+0xca/0x130 [ 173.457472][ T7754] smpboot_thread_fn+0x546/0xa30 [ 173.462447][ T7754] kthread+0x7ab/0x920 [ 173.466541][ T7754] ret_from_fork+0x4d/0x80 [ 173.470996][ T7754] ret_from_fork_asm+0x1a/0x30 [ 173.475776][ T7754] Modules linked in: [ 173.479707][ T7754] CPU: 0 UID: 0 PID: 7754 Comm: syz.7.531 Tainted: G B 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 173.479745][ T7754] Tainted: [B]=BAD_PAGE [ 173.479756][ T7754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 173.479772][ T7754] Call Trace: [ 173.479781][ T7754] [ 173.479790][ T7754] dump_stack_lvl+0x241/0x360 [ 173.479819][ T7754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.479846][ T7754] ? __pfx_print_modules+0x10/0x10 [ 173.479880][ T7754] bad_page+0x176/0x1d0 [ 173.479920][ T7754] free_frozen_pages+0x1082/0x10e0 [ 173.479955][ T7754] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 173.479994][ T7754] bpf_xdp_adjust_tail+0x1c6/0x210 [ 173.480037][ T7754] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 173.480058][ T7754] bpf_prog_run_generic_xdp+0x686/0x1510 [ 173.480109][ T7754] do_xdp_generic+0x757/0xd30 [ 173.480147][ T7754] ? __pfx_do_xdp_generic+0x10/0x10 [ 173.480180][ T7754] ? __virt_addr_valid+0x183/0x530 [ 173.480232][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.480278][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.480329][ T7754] ? tun_get_user+0x2914/0x4860 [ 173.480362][ T7754] tun_get_user+0x2a4b/0x4860 [ 173.480401][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.480445][ T7754] ? aa_file_perm+0x137/0xf50 [ 173.480474][ T7754] ? aa_file_perm+0x137/0xf50 [ 173.480501][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.480542][ T7754] ? aa_file_perm+0x3ef/0xf50 [ 173.480569][ T7754] ? __pfx_tun_get_user+0x10/0x10 [ 173.480609][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.480651][ T7754] ? ref_tracker_alloc+0x332/0x490 [ 173.480681][ T7754] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 173.480716][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.480759][ T7754] ? tun_get+0x1e/0x2f0 [ 173.480790][ T7754] ? tun_get+0x1e/0x2f0 [ 173.480820][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.480861][ T7754] ? tun_get+0x27d/0x2f0 [ 173.480892][ T7754] tun_chr_write_iter+0x10d/0x1f0 [ 173.480925][ T7754] vfs_write+0xad1/0xd10 [ 173.480960][ T7754] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 173.480992][ T7754] ? __pfx_vfs_write+0x10/0x10 [ 173.481024][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.481067][ T7754] ? __fget_files+0x2a/0x420 [ 173.481098][ T7754] ? __fget_files+0x2a/0x420 [ 173.481128][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.481173][ T7754] ksys_write+0x18f/0x2b0 [ 173.481210][ T7754] ? __pfx_ksys_write+0x10/0x10 [ 173.481249][ T7754] ? do_syscall_64+0xb6/0x230 [ 173.481278][ T7754] do_syscall_64+0xf3/0x230 [ 173.481315][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.481352][ T7754] RIP: 0033:0x7fbfc518bc1f [ 173.481373][ T7754] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 173.481396][ T7754] RSP: 002b:00007fbfc5f28000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 173.481422][ T7754] RAX: ffffffffffffffda RBX: 00007fbfc53a6080 RCX: 00007fbfc518bc1f [ 173.481447][ T7754] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 173.481465][ T7754] RBP: 00007fbfc520e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 173.481482][ T7754] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 173.481499][ T7754] R13: 0000000000000001 R14: 00007fbfc53a6080 R15: 00007ffd7c664838 [ 173.481526][ T7754] [ 173.481539][ T7754] BUG: Bad page state in process syz.7.531 pfn:35802 [ 173.812780][ T7754] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888035802dc0 pfn:0x35802 [ 173.822888][ T7754] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 173.830042][ T7754] raw: 00fff00000000000 dead000000000040 ffff888021e98000 0000000000000000 [ 173.838628][ T7754] raw: ffff888035802dc0 0000000000000001 00000000ffffffff 0000000000000000 [ 173.847231][ T7754] page dumped because: page_pool leak [ 173.852639][ T7754] page_owner tracks the page as allocated [ 173.858340][ T7754] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7754, tgid 7749 (syz.7.531), ts 171210672294, free_ts 171110066633 [ 173.875299][ T7754] post_alloc_hook+0x1f4/0x240 [ 173.880112][ T7754] get_page_from_freelist+0x365c/0x37a0 [ 173.885672][ T7754] __alloc_frozen_pages_noprof+0x292/0x710 [ 173.891513][ T7754] alloc_pages_bulk_noprof+0x847/0xae0 [ 173.896988][ T7754] __page_pool_alloc_pages_slow+0x11f/0x690 [ 173.902961][ T7754] skb_pp_cow_data+0xcc8/0x1720 [ 173.907885][ T7754] do_xdp_generic+0x505/0xd30 [ 173.912621][ T7754] tun_get_user+0x2a4b/0x4860 [ 173.917337][ T7754] tun_chr_write_iter+0x10d/0x1f0 [ 173.922449][ T7754] vfs_write+0xad1/0xd10 [ 173.926753][ T7754] ksys_write+0x18f/0x2b0 [ 173.931148][ T7754] do_syscall_64+0xf3/0x230 [ 173.935671][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.941704][ T7754] page last free pid 23 tgid 23 stack trace: [ 173.947726][ T7754] free_frozen_pages+0xe0d/0x10e0 [ 173.952815][ T7754] __tlb_remove_table+0x33c/0x420 [ 173.957875][ T7754] tlb_remove_table_rcu+0x76/0xf0 [ 173.962982][ T7754] rcu_core+0xaac/0x17a0 [ 173.967256][ T7754] handle_softirqs+0x2d6/0x9b0 [ 173.972069][ T7754] run_ksoftirqd+0xca/0x130 [ 173.976615][ T7754] smpboot_thread_fn+0x546/0xa30 [ 173.981617][ T7754] kthread+0x7ab/0x920 [ 173.985735][ T7754] ret_from_fork+0x4d/0x80 [ 173.990204][ T7754] ret_from_fork_asm+0x1a/0x30 [ 173.994994][ T7754] Modules linked in: [ 173.998949][ T7754] CPU: 0 UID: 0 PID: 7754 Comm: syz.7.531 Tainted: G B 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 173.998986][ T7754] Tainted: [B]=BAD_PAGE [ 173.998996][ T7754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 173.999013][ T7754] Call Trace: [ 173.999022][ T7754] [ 173.999032][ T7754] dump_stack_lvl+0x241/0x360 [ 173.999066][ T7754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.999093][ T7754] ? __pfx_print_modules+0x10/0x10 [ 173.999127][ T7754] bad_page+0x176/0x1d0 [ 173.999169][ T7754] free_frozen_pages+0x1082/0x10e0 [ 173.999206][ T7754] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 173.999246][ T7754] bpf_xdp_adjust_tail+0x1c6/0x210 [ 173.999289][ T7754] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 173.999310][ T7754] bpf_prog_run_generic_xdp+0x686/0x1510 [ 173.999361][ T7754] do_xdp_generic+0x757/0xd30 [ 173.999401][ T7754] ? __pfx_do_xdp_generic+0x10/0x10 [ 173.999435][ T7754] ? __virt_addr_valid+0x183/0x530 [ 173.999488][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.999532][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.999584][ T7754] ? tun_get_user+0x2914/0x4860 [ 173.999618][ T7754] tun_get_user+0x2a4b/0x4860 [ 173.999658][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.999701][ T7754] ? aa_file_perm+0x137/0xf50 [ 173.999730][ T7754] ? aa_file_perm+0x137/0xf50 [ 173.999758][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.999799][ T7754] ? aa_file_perm+0x3ef/0xf50 [ 173.999825][ T7754] ? __pfx_tun_get_user+0x10/0x10 [ 173.999862][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.999905][ T7754] ? ref_tracker_alloc+0x332/0x490 [ 173.999936][ T7754] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 173.999969][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.000011][ T7754] ? tun_get+0x1e/0x2f0 [ 174.000043][ T7754] ? tun_get+0x1e/0x2f0 [ 174.000071][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.000112][ T7754] ? tun_get+0x27d/0x2f0 [ 174.000143][ T7754] tun_chr_write_iter+0x10d/0x1f0 [ 174.000176][ T7754] vfs_write+0xad1/0xd10 [ 174.000214][ T7754] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 174.000247][ T7754] ? __pfx_vfs_write+0x10/0x10 [ 174.000279][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.000324][ T7754] ? __fget_files+0x2a/0x420 [ 174.000355][ T7754] ? __fget_files+0x2a/0x420 [ 174.000384][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.000429][ T7754] ksys_write+0x18f/0x2b0 [ 174.000466][ T7754] ? __pfx_ksys_write+0x10/0x10 [ 174.000504][ T7754] ? do_syscall_64+0xb6/0x230 [ 174.000534][ T7754] do_syscall_64+0xf3/0x230 [ 174.000570][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.000608][ T7754] RIP: 0033:0x7fbfc518bc1f [ 174.000629][ T7754] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 174.000651][ T7754] RSP: 002b:00007fbfc5f28000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 174.000678][ T7754] RAX: ffffffffffffffda RBX: 00007fbfc53a6080 RCX: 00007fbfc518bc1f [ 174.000699][ T7754] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 174.000716][ T7754] RBP: 00007fbfc520e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 174.000734][ T7754] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 174.000750][ T7754] R13: 0000000000000001 R14: 00007fbfc53a6080 R15: 00007ffd7c664838 [ 174.000777][ T7754] [ 174.000791][ T7754] BUG: Bad page state in process syz.7.531 pfn:3347e [ 174.332448][ T7754] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x3347e [ 174.342553][ T7754] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 174.349718][ T7754] raw: 00fff00000000000 dead000000000040 ffff888021e98000 0000000000000000 [ 174.358324][ T7754] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 174.366946][ T7754] page dumped because: page_pool leak [ 174.372341][ T7754] page_owner tracks the page as allocated [ 174.378045][ T7754] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7754, tgid 7749 (syz.7.531), ts 171210660925, free_ts 171110084823 [ 174.395030][ T7754] post_alloc_hook+0x1f4/0x240 [ 174.399851][ T7754] get_page_from_freelist+0x365c/0x37a0 [ 174.405418][ T7754] __alloc_frozen_pages_noprof+0x292/0x710 [ 174.411269][ T7754] alloc_pages_bulk_noprof+0x847/0xae0 [ 174.416753][ T7754] __page_pool_alloc_pages_slow+0x11f/0x690 [ 174.422687][ T7754] skb_pp_cow_data+0xcc8/0x1720 [ 174.427564][ T7754] do_xdp_generic+0x505/0xd30 [ 174.432346][ T7754] tun_get_user+0x2a4b/0x4860 [ 174.437043][ T7754] tun_chr_write_iter+0x10d/0x1f0 [ 174.442109][ T7754] vfs_write+0xad1/0xd10 [ 174.446372][ T7754] ksys_write+0x18f/0x2b0 [ 174.450751][ T7754] do_syscall_64+0xf3/0x230 [ 174.455265][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.461207][ T7754] page last free pid 23 tgid 23 stack trace: [ 174.467188][ T7754] free_frozen_pages+0xe0d/0x10e0 [ 174.472255][ T7754] __tlb_remove_table+0x33c/0x420 [ 174.477314][ T7754] tlb_remove_table_rcu+0x76/0xf0 [ 174.482386][ T7754] rcu_core+0xaac/0x17a0 [ 174.486647][ T7754] handle_softirqs+0x2d6/0x9b0 [ 174.491452][ T7754] run_ksoftirqd+0xca/0x130 [ 174.496002][ T7754] smpboot_thread_fn+0x546/0xa30 [ 174.500989][ T7754] kthread+0x7ab/0x920 [ 174.505086][ T7754] ret_from_fork+0x4d/0x80 [ 174.509547][ T7754] ret_from_fork_asm+0x1a/0x30 [ 174.514351][ T7754] Modules linked in: [ 174.518252][ T7754] CPU: 0 UID: 0 PID: 7754 Comm: syz.7.531 Tainted: G B 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 174.518279][ T7754] Tainted: [B]=BAD_PAGE [ 174.518287][ T7754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 174.518298][ T7754] Call Trace: [ 174.518311][ T7754] [ 174.518320][ T7754] dump_stack_lvl+0x241/0x360 [ 174.518344][ T7754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.518364][ T7754] ? __pfx_print_modules+0x10/0x10 [ 174.518389][ T7754] bad_page+0x176/0x1d0 [ 174.518419][ T7754] free_frozen_pages+0x1082/0x10e0 [ 174.518445][ T7754] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 174.518473][ T7754] bpf_xdp_adjust_tail+0x1c6/0x210 [ 174.518504][ T7754] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 174.518520][ T7754] bpf_prog_run_generic_xdp+0x686/0x1510 [ 174.518558][ T7754] do_xdp_generic+0x757/0xd30 [ 174.518586][ T7754] ? __pfx_do_xdp_generic+0x10/0x10 [ 174.518609][ T7754] ? __virt_addr_valid+0x183/0x530 [ 174.518646][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.518678][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.518722][ T7754] ? tun_get_user+0x2914/0x4860 [ 174.518755][ T7754] tun_get_user+0x2a4b/0x4860 [ 174.518792][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.518835][ T7754] ? aa_file_perm+0x137/0xf50 [ 174.518864][ T7754] ? aa_file_perm+0x137/0xf50 [ 174.518891][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.518931][ T7754] ? aa_file_perm+0x3ef/0xf50 [ 174.518958][ T7754] ? __pfx_tun_get_user+0x10/0x10 [ 174.518995][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.519035][ T7754] ? ref_tracker_alloc+0x332/0x490 [ 174.519064][ T7754] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 174.519097][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.519139][ T7754] ? tun_get+0x1e/0x2f0 [ 174.519169][ T7754] ? tun_get+0x1e/0x2f0 [ 174.519198][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.519237][ T7754] ? tun_get+0x27d/0x2f0 [ 174.519269][ T7754] tun_chr_write_iter+0x10d/0x1f0 [ 174.519309][ T7754] vfs_write+0xad1/0xd10 [ 174.519347][ T7754] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 174.519378][ T7754] ? __pfx_vfs_write+0x10/0x10 [ 174.519410][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.519453][ T7754] ? __fget_files+0x2a/0x420 [ 174.519482][ T7754] ? __fget_files+0x2a/0x420 [ 174.519511][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.519554][ T7754] ksys_write+0x18f/0x2b0 [ 174.519586][ T7754] ? __pfx_ksys_write+0x10/0x10 [ 174.519614][ T7754] ? do_syscall_64+0xb6/0x230 [ 174.519634][ T7754] do_syscall_64+0xf3/0x230 [ 174.519656][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.519682][ T7754] RIP: 0033:0x7fbfc518bc1f [ 174.519698][ T7754] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 174.519714][ T7754] RSP: 002b:00007fbfc5f28000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 174.519733][ T7754] RAX: ffffffffffffffda RBX: 00007fbfc53a6080 RCX: 00007fbfc518bc1f [ 174.519749][ T7754] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 174.519761][ T7754] RBP: 00007fbfc520e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 174.519773][ T7754] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 174.519785][ T7754] R13: 0000000000000001 R14: 00007fbfc53a6080 R15: 00007ffd7c664838 [ 174.519805][ T7754] [ 174.843680][ T7754] BUG: Bad page state in process syz.7.531 pfn:11e7d [ 174.850491][ T7754] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x11e7d [ 174.860604][ T7754] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 174.867745][ T7754] raw: 00fff00000000000 dead000000000040 ffff888021e98000 0000000000000000 [ 174.876383][ T7754] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 174.885019][ T7754] page dumped because: page_pool leak [ 174.890420][ T7754] page_owner tracks the page as allocated [ 174.896135][ T7754] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7754, tgid 7749 (syz.7.531), ts 171210649184, free_ts 171110098753 [ 174.913135][ T7754] post_alloc_hook+0x1f4/0x240 [ 174.917928][ T7754] get_page_from_freelist+0x365c/0x37a0 [ 174.923564][ T7754] __alloc_frozen_pages_noprof+0x292/0x710 [ 174.929448][ T7754] alloc_pages_bulk_noprof+0x847/0xae0 [ 174.934927][ T7754] __page_pool_alloc_pages_slow+0x11f/0x690 [ 174.940867][ T7754] skb_pp_cow_data+0xcc8/0x1720 [ 174.945736][ T7754] do_xdp_generic+0x505/0xd30 [ 174.950465][ T7754] tun_get_user+0x2a4b/0x4860 [ 174.955165][ T7754] tun_chr_write_iter+0x10d/0x1f0 [ 174.960226][ T7754] vfs_write+0xad1/0xd10 [ 174.964478][ T7754] ksys_write+0x18f/0x2b0 [ 174.968854][ T7754] do_syscall_64+0xf3/0x230 [ 174.973369][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.979306][ T7754] page last free pid 23 tgid 23 stack trace: [ 174.985288][ T7754] free_frozen_pages+0xe0d/0x10e0 [ 174.990370][ T7754] __tlb_remove_table+0x33c/0x420 [ 174.995425][ T7754] tlb_remove_table_rcu+0x76/0xf0 [ 175.000501][ T7754] rcu_core+0xaac/0x17a0 [ 175.004794][ T7754] handle_softirqs+0x2d6/0x9b0 [ 175.009599][ T7754] run_ksoftirqd+0xca/0x130 [ 175.014121][ T7754] smpboot_thread_fn+0x546/0xa30 [ 175.019106][ T7754] kthread+0x7ab/0x920 [ 175.023204][ T7754] ret_from_fork+0x4d/0x80 [ 175.027624][ T7754] ret_from_fork_asm+0x1a/0x30 [ 175.032434][ T7754] Modules linked in: [ 175.036346][ T7754] CPU: 0 UID: 0 PID: 7754 Comm: syz.7.531 Tainted: G B 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 175.036374][ T7754] Tainted: [B]=BAD_PAGE [ 175.036381][ T7754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 175.036393][ T7754] Call Trace: [ 175.036401][ T7754] [ 175.036408][ T7754] dump_stack_lvl+0x241/0x360 [ 175.036432][ T7754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.036451][ T7754] ? __pfx_print_modules+0x10/0x10 [ 175.036476][ T7754] bad_page+0x176/0x1d0 [ 175.036523][ T7754] free_frozen_pages+0x1082/0x10e0 [ 175.036558][ T7754] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 175.036614][ T7754] bpf_xdp_adjust_tail+0x1c6/0x210 [ 175.036646][ T7754] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 175.036662][ T7754] bpf_prog_run_generic_xdp+0x686/0x1510 [ 175.036699][ T7754] do_xdp_generic+0x757/0xd30 [ 175.036733][ T7754] ? __pfx_do_xdp_generic+0x10/0x10 [ 175.036757][ T7754] ? __virt_addr_valid+0x183/0x530 [ 175.036797][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.036829][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.036860][ T7754] ? tun_get_user+0x2914/0x4860 [ 175.036883][ T7754] tun_get_user+0x2a4b/0x4860 [ 175.036911][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.036942][ T7754] ? aa_file_perm+0x137/0xf50 [ 175.036963][ T7754] ? aa_file_perm+0x137/0xf50 [ 175.036982][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.037011][ T7754] ? aa_file_perm+0x3ef/0xf50 [ 175.037029][ T7754] ? __pfx_tun_get_user+0x10/0x10 [ 175.037058][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.037086][ T7754] ? ref_tracker_alloc+0x332/0x490 [ 175.037107][ T7754] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 175.037137][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.037182][ T7754] ? tun_get+0x1e/0x2f0 [ 175.037215][ T7754] ? tun_get+0x1e/0x2f0 [ 175.037240][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.037269][ T7754] ? tun_get+0x27d/0x2f0 [ 175.037292][ T7754] tun_chr_write_iter+0x10d/0x1f0 [ 175.037318][ T7754] vfs_write+0xad1/0xd10 [ 175.037345][ T7754] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 175.037382][ T7754] ? __pfx_vfs_write+0x10/0x10 [ 175.037405][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.037436][ T7754] ? __fget_files+0x2a/0x420 [ 175.037458][ T7754] ? __fget_files+0x2a/0x420 [ 175.037479][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.037510][ T7754] ksys_write+0x18f/0x2b0 [ 175.037536][ T7754] ? __pfx_ksys_write+0x10/0x10 [ 175.037576][ T7754] ? do_syscall_64+0xb6/0x230 [ 175.037597][ T7754] do_syscall_64+0xf3/0x230 [ 175.037617][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.037643][ T7754] RIP: 0033:0x7fbfc518bc1f [ 175.037659][ T7754] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 175.037675][ T7754] RSP: 002b:00007fbfc5f28000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 175.037695][ T7754] RAX: ffffffffffffffda RBX: 00007fbfc53a6080 RCX: 00007fbfc518bc1f [ 175.037709][ T7754] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 175.037722][ T7754] RBP: 00007fbfc520e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 175.037734][ T7754] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 175.037746][ T7754] R13: 0000000000000001 R14: 00007fbfc53a6080 R15: 00007ffd7c664838 [ 175.037765][ T7754] [ 175.037777][ T7754] BUG: Bad page state in process syz.7.531 pfn:5d17a [ 175.369431][ T7754] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5d17a [ 175.378197][ T7754] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 175.385355][ T7754] raw: 00fff00000000000 dead000000000040 ffff888021e98000 0000000000000000 [ 175.393967][ T7754] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 175.402586][ T7754] page dumped because: page_pool leak [ 175.407955][ T7754] page_owner tracks the page as allocated [ 175.413691][ T7754] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7754, tgid 7749 (syz.7.531), ts 171210637794, free_ts 171110107743 [ 175.430668][ T7754] post_alloc_hook+0x1f4/0x240 [ 175.435433][ T7754] get_page_from_freelist+0x365c/0x37a0 [ 175.441031][ T7754] __alloc_frozen_pages_noprof+0x292/0x710 [ 175.446859][ T7754] alloc_pages_bulk_noprof+0x847/0xae0 [ 175.452386][ T7754] __page_pool_alloc_pages_slow+0x11f/0x690 [ 175.458315][ T7754] skb_pp_cow_data+0xcc8/0x1720 [ 175.463207][ T7754] do_xdp_generic+0x505/0xd30 [ 175.467928][ T7754] tun_get_user+0x2a4b/0x4860 [ 175.472644][ T7754] tun_chr_write_iter+0x10d/0x1f0 [ 175.477684][ T7754] vfs_write+0xad1/0xd10 [ 175.481963][ T7754] ksys_write+0x18f/0x2b0 [ 175.486342][ T7754] do_syscall_64+0xf3/0x230 [ 175.490885][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.496804][ T7754] page last free pid 23 tgid 23 stack trace: [ 175.502843][ T7754] free_frozen_pages+0xe0d/0x10e0 [ 175.507895][ T7754] __tlb_remove_table+0x33c/0x420 [ 175.512972][ T7754] tlb_remove_table_rcu+0x76/0xf0 [ 175.518047][ T7754] rcu_core+0xaac/0x17a0 [ 175.522336][ T7754] handle_softirqs+0x2d6/0x9b0 [ 175.527118][ T7754] run_ksoftirqd+0xca/0x130 [ 175.531664][ T7754] smpboot_thread_fn+0x546/0xa30 [ 175.536624][ T7754] kthread+0x7ab/0x920 [ 175.540737][ T7754] ret_from_fork+0x4d/0x80 [ 175.545180][ T7754] ret_from_fork_asm+0x1a/0x30 [ 175.549981][ T7754] Modules linked in: [ 175.553901][ T7754] CPU: 0 UID: 0 PID: 7754 Comm: syz.7.531 Tainted: G B 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 175.553939][ T7754] Tainted: [B]=BAD_PAGE [ 175.553949][ T7754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 175.553965][ T7754] Call Trace: [ 175.553976][ T7754] [ 175.553986][ T7754] dump_stack_lvl+0x241/0x360 [ 175.554017][ T7754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.554042][ T7754] ? __pfx_print_modules+0x10/0x10 [ 175.554076][ T7754] bad_page+0x176/0x1d0 [ 175.554116][ T7754] free_frozen_pages+0x1082/0x10e0 [ 175.554153][ T7754] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 175.554191][ T7754] bpf_xdp_adjust_tail+0x1c6/0x210 [ 175.554233][ T7754] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 175.554254][ T7754] bpf_prog_run_generic_xdp+0x686/0x1510 [ 175.554314][ T7754] do_xdp_generic+0x757/0xd30 [ 175.554352][ T7754] ? __pfx_do_xdp_generic+0x10/0x10 [ 175.554384][ T7754] ? __virt_addr_valid+0x183/0x530 [ 175.554436][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.554483][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.554516][ T7754] ? tun_get_user+0x2914/0x4860 [ 175.554539][ T7754] tun_get_user+0x2a4b/0x4860 [ 175.554569][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.554600][ T7754] ? aa_file_perm+0x137/0xf50 [ 175.554620][ T7754] ? aa_file_perm+0x137/0xf50 [ 175.554639][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.554669][ T7754] ? aa_file_perm+0x3ef/0xf50 [ 175.554687][ T7754] ? __pfx_tun_get_user+0x10/0x10 [ 175.554715][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.554745][ T7754] ? ref_tracker_alloc+0x332/0x490 [ 175.554765][ T7754] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 175.554790][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.554820][ T7754] ? tun_get+0x1e/0x2f0 [ 175.554842][ T7754] ? tun_get+0x1e/0x2f0 [ 175.554863][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.554892][ T7754] ? tun_get+0x27d/0x2f0 [ 175.554914][ T7754] tun_chr_write_iter+0x10d/0x1f0 [ 175.554939][ T7754] vfs_write+0xad1/0xd10 [ 175.554965][ T7754] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 175.554988][ T7754] ? __pfx_vfs_write+0x10/0x10 [ 175.555011][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.555043][ T7754] ? __fget_files+0x2a/0x420 [ 175.555064][ T7754] ? __fget_files+0x2a/0x420 [ 175.555085][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.555116][ T7754] ksys_write+0x18f/0x2b0 [ 175.555142][ T7754] ? __pfx_ksys_write+0x10/0x10 [ 175.555169][ T7754] ? do_syscall_64+0xb6/0x230 [ 175.555191][ T7754] do_syscall_64+0xf3/0x230 [ 175.555211][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.555237][ T7754] RIP: 0033:0x7fbfc518bc1f [ 175.555253][ T7754] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 175.555269][ T7754] RSP: 002b:00007fbfc5f28000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 175.555288][ T7754] RAX: ffffffffffffffda RBX: 00007fbfc53a6080 RCX: 00007fbfc518bc1f [ 175.555308][ T7754] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 175.555321][ T7754] RBP: 00007fbfc520e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 175.555333][ T7754] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 175.555345][ T7754] R13: 0000000000000001 R14: 00007fbfc53a6080 R15: 00007ffd7c664838 [ 175.555364][ T7754] [ 175.555375][ T7754] BUG: Bad page state in process syz.7.531 pfn:324fb [ 175.886646][ T7754] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x324fb [ 175.896738][ T7754] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 175.903880][ T7754] raw: 00fff00000000000 dead000000000040 ffff888021e98000 0000000000000000 [ 175.912492][ T7754] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 175.921132][ T7754] page dumped because: page_pool leak [ 175.926489][ T7754] page_owner tracks the page as allocated [ 175.932227][ T7754] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7754, tgid 7749 (syz.7.531), ts 171210626334, free_ts 171110122213 [ 175.949216][ T7754] post_alloc_hook+0x1f4/0x240 [ 175.953985][ T7754] get_page_from_freelist+0x365c/0x37a0 [ 175.959578][ T7754] __alloc_frozen_pages_noprof+0x292/0x710 [ 175.965400][ T7754] alloc_pages_bulk_noprof+0x847/0xae0 [ 175.970895][ T7754] __page_pool_alloc_pages_slow+0x11f/0x690 [ 175.976801][ T7754] skb_pp_cow_data+0xcc8/0x1720 [ 175.981685][ T7754] do_xdp_generic+0x505/0xd30 [ 175.986386][ T7754] tun_get_user+0x2a4b/0x4860 [ 175.991096][ T7754] tun_chr_write_iter+0x10d/0x1f0 [ 175.996136][ T7754] vfs_write+0xad1/0xd10 [ 176.000417][ T7754] ksys_write+0x18f/0x2b0 [ 176.004790][ T7754] do_syscall_64+0xf3/0x230 [ 176.009339][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.015264][ T7754] page last free pid 23 tgid 23 stack trace: [ 176.021273][ T7754] free_frozen_pages+0xe0d/0x10e0 [ 176.026327][ T7754] __tlb_remove_table+0x33c/0x420 [ 176.031390][ T7754] tlb_remove_table_rcu+0x76/0xf0 [ 176.036446][ T7754] rcu_core+0xaac/0x17a0 [ 176.040728][ T7754] handle_softirqs+0x2d6/0x9b0 [ 176.045502][ T7754] run_ksoftirqd+0xca/0x130 [ 176.050039][ T7754] smpboot_thread_fn+0x546/0xa30 [ 176.054997][ T7754] kthread+0x7ab/0x920 [ 176.059105][ T7754] ret_from_fork+0x4d/0x80 [ 176.063545][ T7754] ret_from_fork_asm+0x1a/0x30 [ 176.068326][ T7754] Modules linked in: [ 176.072261][ T7754] CPU: 0 UID: 0 PID: 7754 Comm: syz.7.531 Tainted: G B 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 176.072306][ T7754] Tainted: [B]=BAD_PAGE [ 176.072316][ T7754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 176.072333][ T7754] Call Trace: [ 176.072343][ T7754] [ 176.072352][ T7754] dump_stack_lvl+0x241/0x360 [ 176.072383][ T7754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.072410][ T7754] ? __pfx_print_modules+0x10/0x10 [ 176.072445][ T7754] bad_page+0x176/0x1d0 [ 176.072487][ T7754] free_frozen_pages+0x1082/0x10e0 [ 176.072523][ T7754] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 176.072562][ T7754] bpf_xdp_adjust_tail+0x1c6/0x210 [ 176.072603][ T7754] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 176.072624][ T7754] bpf_prog_run_generic_xdp+0x686/0x1510 [ 176.072674][ T7754] do_xdp_generic+0x757/0xd30 [ 176.072711][ T7754] ? __pfx_do_xdp_generic+0x10/0x10 [ 176.072744][ T7754] ? __virt_addr_valid+0x183/0x530 [ 176.072798][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.072843][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.072888][ T7754] ? tun_get_user+0x2914/0x4860 [ 176.072922][ T7754] tun_get_user+0x2a4b/0x4860 [ 176.072961][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.073004][ T7754] ? aa_file_perm+0x137/0xf50 [ 176.073034][ T7754] ? aa_file_perm+0x137/0xf50 [ 176.073061][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.073103][ T7754] ? aa_file_perm+0x3ef/0xf50 [ 176.073130][ T7754] ? __pfx_tun_get_user+0x10/0x10 [ 176.073171][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.073213][ T7754] ? ref_tracker_alloc+0x332/0x490 [ 176.073243][ T7754] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 176.073277][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.073327][ T7754] ? tun_get+0x1e/0x2f0 [ 176.073359][ T7754] ? tun_get+0x1e/0x2f0 [ 176.073388][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.073430][ T7754] ? tun_get+0x27d/0x2f0 [ 176.073461][ T7754] tun_chr_write_iter+0x10d/0x1f0 [ 176.073496][ T7754] vfs_write+0xad1/0xd10 [ 176.073533][ T7754] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 176.073566][ T7754] ? __pfx_vfs_write+0x10/0x10 [ 176.073599][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.073644][ T7754] ? __fget_files+0x2a/0x420 [ 176.073674][ T7754] ? __fget_files+0x2a/0x420 [ 176.073702][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.073745][ T7754] ksys_write+0x18f/0x2b0 [ 176.073780][ T7754] ? __pfx_ksys_write+0x10/0x10 [ 176.073817][ T7754] ? do_syscall_64+0xb6/0x230 [ 176.073845][ T7754] do_syscall_64+0xf3/0x230 [ 176.073874][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.073910][ T7754] RIP: 0033:0x7fbfc518bc1f [ 176.073930][ T7754] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 176.073952][ T7754] RSP: 002b:00007fbfc5f28000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 176.073978][ T7754] RAX: ffffffffffffffda RBX: 00007fbfc53a6080 RCX: 00007fbfc518bc1f [ 176.073999][ T7754] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 176.074016][ T7754] RBP: 00007fbfc520e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 176.074033][ T7754] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 176.074049][ T7754] R13: 0000000000000001 R14: 00007fbfc53a6080 R15: 00007ffd7c664838 [ 176.074076][ T7754] [ 176.074090][ T7754] BUG: Bad page state in process syz.7.531 pfn:32a1c [ 176.405252][ T7754] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888032a1db80 pfn:0x32a1c [ 176.415350][ T7754] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 176.422496][ T7754] raw: 00fff00000000000 dead000000000040 ffff888021e98000 0000000000000000 [ 176.431119][ T7754] raw: ffff888032a1db80 0000000000000001 00000000ffffffff 0000000000000000 [ 176.439727][ T7754] page dumped because: page_pool leak [ 176.445106][ T7754] page_owner tracks the page as allocated [ 176.450850][ T7754] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7754, tgid 7749 (syz.7.531), ts 171210614965, free_ts 171110135863 [ 176.467858][ T7754] post_alloc_hook+0x1f4/0x240 [ 176.472661][ T7754] get_page_from_freelist+0x365c/0x37a0 [ 176.478238][ T7754] __alloc_frozen_pages_noprof+0x292/0x710 [ 176.484101][ T7754] alloc_pages_bulk_noprof+0x847/0xae0 [ 176.489610][ T7754] __page_pool_alloc_pages_slow+0x11f/0x690 [ 176.495510][ T7754] skb_pp_cow_data+0xcc8/0x1720 [ 176.500395][ T7754] do_xdp_generic+0x505/0xd30 [ 176.505090][ T7754] tun_get_user+0x2a4b/0x4860 [ 176.509802][ T7754] tun_chr_write_iter+0x10d/0x1f0 [ 176.514865][ T7754] vfs_write+0xad1/0xd10 [ 176.519150][ T7754] ksys_write+0x18f/0x2b0 [ 176.523497][ T7754] do_syscall_64+0xf3/0x230 [ 176.528014][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.533975][ T7754] page last free pid 23 tgid 23 stack trace: [ 176.539986][ T7754] free_frozen_pages+0xe0d/0x10e0 [ 176.545023][ T7754] __tlb_remove_table+0x33c/0x420 [ 176.550086][ T7754] tlb_remove_table_rcu+0x76/0xf0 [ 176.555128][ T7754] rcu_core+0xaac/0x17a0 [ 176.559404][ T7754] handle_softirqs+0x2d6/0x9b0 [ 176.564183][ T7754] run_ksoftirqd+0xca/0x130 [ 176.568686][ T7754] smpboot_thread_fn+0x546/0xa30 [ 176.573679][ T7754] kthread+0x7ab/0x920 [ 176.577760][ T7754] ret_from_fork+0x4d/0x80 [ 176.582235][ T7754] ret_from_fork_asm+0x1a/0x30 [ 176.587059][ T7754] Modules linked in: [ 176.591025][ T7754] CPU: 0 UID: 0 PID: 7754 Comm: syz.7.531 Tainted: G B 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 176.591064][ T7754] Tainted: [B]=BAD_PAGE [ 176.591074][ T7754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 176.591090][ T7754] Call Trace: [ 176.591099][ T7754] [ 176.591109][ T7754] dump_stack_lvl+0x241/0x360 [ 176.591141][ T7754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.591169][ T7754] ? __pfx_print_modules+0x10/0x10 [ 176.591204][ T7754] bad_page+0x176/0x1d0 [ 176.591246][ T7754] free_frozen_pages+0x1082/0x10e0 [ 176.591283][ T7754] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 176.591348][ T7754] bpf_xdp_adjust_tail+0x1c6/0x210 [ 176.591393][ T7754] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 176.591415][ T7754] bpf_prog_run_generic_xdp+0x686/0x1510 [ 176.591474][ T7754] do_xdp_generic+0x757/0xd30 [ 176.591514][ T7754] ? __pfx_do_xdp_generic+0x10/0x10 [ 176.591548][ T7754] ? __virt_addr_valid+0x183/0x530 [ 176.591603][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.591649][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.591695][ T7754] ? tun_get_user+0x2914/0x4860 [ 176.591729][ T7754] tun_get_user+0x2a4b/0x4860 [ 176.591769][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.591814][ T7754] ? aa_file_perm+0x137/0xf50 [ 176.591843][ T7754] ? aa_file_perm+0x137/0xf50 [ 176.591870][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.591913][ T7754] ? aa_file_perm+0x3ef/0xf50 [ 176.591940][ T7754] ? __pfx_tun_get_user+0x10/0x10 [ 176.591981][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.592022][ T7754] ? ref_tracker_alloc+0x332/0x490 [ 176.592050][ T7754] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 176.592084][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.592127][ T7754] ? tun_get+0x1e/0x2f0 [ 176.592159][ T7754] ? tun_get+0x1e/0x2f0 [ 176.592188][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.592230][ T7754] ? tun_get+0x27d/0x2f0 [ 176.592261][ T7754] tun_chr_write_iter+0x10d/0x1f0 [ 176.592304][ T7754] vfs_write+0xad1/0xd10 [ 176.592343][ T7754] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 176.592375][ T7754] ? __pfx_vfs_write+0x10/0x10 [ 176.592408][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.592454][ T7754] ? __fget_files+0x2a/0x420 [ 176.592485][ T7754] ? __fget_files+0x2a/0x420 [ 176.592515][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.592559][ T7754] ksys_write+0x18f/0x2b0 [ 176.592595][ T7754] ? __pfx_ksys_write+0x10/0x10 [ 176.592633][ T7754] ? do_syscall_64+0xb6/0x230 [ 176.592661][ T7754] do_syscall_64+0xf3/0x230 [ 176.592690][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.592725][ T7754] RIP: 0033:0x7fbfc518bc1f [ 176.592745][ T7754] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 176.592766][ T7754] RSP: 002b:00007fbfc5f28000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 176.592792][ T7754] RAX: ffffffffffffffda RBX: 00007fbfc53a6080 RCX: 00007fbfc518bc1f [ 176.592811][ T7754] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 176.592828][ T7754] RBP: 00007fbfc520e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 176.592844][ T7754] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 176.592860][ T7754] R13: 0000000000000001 R14: 00007fbfc53a6080 R15: 00007ffd7c664838 [ 176.592886][ T7754] [ 176.592900][ T7754] BUG: Bad page state in process syz.7.531 pfn:6c058 [ 176.924207][ T7754] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x6c058 [ 176.934325][ T7754] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 176.941478][ T7754] raw: 00fff00000000000 dead000000000040 ffff888021e98000 0000000000000000 [ 176.950107][ T7754] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 176.958690][ T7754] page dumped because: page_pool leak [ 176.964100][ T7754] page_owner tracks the page as allocated [ 176.969853][ T7754] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7754, tgid 7749 (syz.7.531), ts 171210603685, free_ts 171110150473 [ 176.986848][ T7754] post_alloc_hook+0x1f4/0x240 [ 176.991673][ T7754] get_page_from_freelist+0x365c/0x37a0 [ 176.997265][ T7754] __alloc_frozen_pages_noprof+0x292/0x710 [ 177.003125][ T7754] alloc_pages_bulk_noprof+0x847/0xae0 [ 177.008609][ T7754] __page_pool_alloc_pages_slow+0x11f/0x690 [ 177.014536][ T7754] skb_pp_cow_data+0xcc8/0x1720 [ 177.019433][ T7754] do_xdp_generic+0x505/0xd30 [ 177.024124][ T7754] tun_get_user+0x2a4b/0x4860 [ 177.028844][ T7754] tun_chr_write_iter+0x10d/0x1f0 [ 177.033885][ T7754] vfs_write+0xad1/0xd10 [ 177.038136][ T7754] ksys_write+0x18f/0x2b0 [ 177.042516][ T7754] do_syscall_64+0xf3/0x230 [ 177.047037][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.052971][ T7754] page last free pid 23 tgid 23 stack trace: [ 177.058980][ T7754] free_frozen_pages+0xe0d/0x10e0 [ 177.064037][ T7754] __tlb_remove_table+0x33c/0x420 [ 177.069095][ T7754] tlb_remove_table_rcu+0x76/0xf0 [ 177.074141][ T7754] rcu_core+0xaac/0x17a0 [ 177.078379][ T7754] handle_softirqs+0x2d6/0x9b0 [ 177.083174][ T7754] run_ksoftirqd+0xca/0x130 [ 177.087713][ T7754] smpboot_thread_fn+0x546/0xa30 [ 177.092691][ T7754] kthread+0x7ab/0x920 [ 177.096808][ T7754] ret_from_fork+0x4d/0x80 [ 177.101265][ T7754] ret_from_fork_asm+0x1a/0x30 [ 177.106047][ T7754] Modules linked in: [ 177.109980][ T7754] CPU: 0 UID: 0 PID: 7754 Comm: syz.7.531 Tainted: G B 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 177.110018][ T7754] Tainted: [B]=BAD_PAGE [ 177.110028][ T7754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 177.110044][ T7754] Call Trace: [ 177.110053][ T7754] [ 177.110063][ T7754] dump_stack_lvl+0x241/0x360 [ 177.110092][ T7754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.110119][ T7754] ? __pfx_print_modules+0x10/0x10 [ 177.110152][ T7754] bad_page+0x176/0x1d0 [ 177.110195][ T7754] free_frozen_pages+0x1082/0x10e0 [ 177.110232][ T7754] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 177.110271][ T7754] bpf_xdp_adjust_tail+0x1c6/0x210 [ 177.110314][ T7754] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 177.110335][ T7754] bpf_prog_run_generic_xdp+0x686/0x1510 [ 177.110386][ T7754] do_xdp_generic+0x757/0xd30 [ 177.110426][ T7754] ? __pfx_do_xdp_generic+0x10/0x10 [ 177.110458][ T7754] ? __virt_addr_valid+0x183/0x530 [ 177.110512][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.110564][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.110608][ T7754] ? tun_get_user+0x2914/0x4860 [ 177.110641][ T7754] tun_get_user+0x2a4b/0x4860 [ 177.110681][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.110724][ T7754] ? aa_file_perm+0x137/0xf50 [ 177.110754][ T7754] ? aa_file_perm+0x137/0xf50 [ 177.110782][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.110821][ T7754] ? aa_file_perm+0x3ef/0xf50 [ 177.110846][ T7754] ? __pfx_tun_get_user+0x10/0x10 [ 177.110886][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.110928][ T7754] ? ref_tracker_alloc+0x332/0x490 [ 177.110958][ T7754] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 177.110993][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.111036][ T7754] ? tun_get+0x1e/0x2f0 [ 177.111068][ T7754] ? tun_get+0x1e/0x2f0 [ 177.111099][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.111139][ T7754] ? tun_get+0x27d/0x2f0 [ 177.111171][ T7754] tun_chr_write_iter+0x10d/0x1f0 [ 177.111204][ T7754] vfs_write+0xad1/0xd10 [ 177.111241][ T7754] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 177.111274][ T7754] ? __pfx_vfs_write+0x10/0x10 [ 177.111308][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.111351][ T7754] ? __fget_files+0x2a/0x420 [ 177.111381][ T7754] ? __fget_files+0x2a/0x420 [ 177.111410][ T7754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.111454][ T7754] ksys_write+0x18f/0x2b0 [ 177.111490][ T7754] ? __pfx_ksys_write+0x10/0x10 [ 177.111529][ T7754] ? do_syscall_64+0xb6/0x230 [ 177.111565][ T7754] do_syscall_64+0xf3/0x230 [ 177.111594][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.111631][ T7754] RIP: 0033:0x7fbfc518bc1f [ 177.111652][ T7754] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 177.111675][ T7754] RSP: 002b:00007fbfc5f28000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 177.111702][ T7754] RAX: ffffffffffffffda RBX: 00007fbfc53a6080 RCX: 00007fbfc518bc1f [ 177.111722][ T7754] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 177.111740][ T7754] RBP: 00007fbfc520e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 177.111757][ T7754] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 177.111774][ T7754] R13: 0000000000000001 R14: 00007fbfc53a6080 R15: 00007ffd7c664838 [ 177.111802][ T7754]