last executing test programs: 16.666550331s ago: executing program 0 (id=221): gettid() timer_create(0x0, 0x0, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x3, 0x0) fcntl$setpipe(r0, 0x4, 0xfffffffffffff000) 15.014480104s ago: executing program 0 (id=229): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000100)=0xffffffff, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) acct(&(0x7f00000001c0)='./file0\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x67, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18) io_setup(0x8, &(0x7f0000004200)) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) open(0x0, 0x44842, 0x0) io_pgetevents(0x0, 0x6, 0x1, &(0x7f0000000340)=[{}], 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={[0x9]}, 0x8}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x5607, 0x2c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETVESABLANK(r5, 0x560e, &(0x7f0000000140)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000000)) 13.482573272s ago: executing program 0 (id=235): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00000001c0)=0x1, 0x0) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000000400000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r0 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r1) 12.917465474s ago: executing program 0 (id=236): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$nci(r2, 0x0, 0xfffffeea) 12.042308228s ago: executing program 0 (id=240): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sigaltstack(0x0, &(0x7f0000000340)={&(0x7f00000002c0)=""/67, 0x0, 0x43}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1, 0x0, 0x8}, 0x18) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) 6.768018355s ago: executing program 1 (id=254): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x2f, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 5.562798203s ago: executing program 1 (id=259): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00000001c0)=0x1, 0x0) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000000400000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(0x0) 5.434282277s ago: executing program 4 (id=261): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES64], 0x28) 4.971029817s ago: executing program 4 (id=263): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @ib_path={0x0, r1}}, 0x20) 4.669838106s ago: executing program 3 (id=264): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r3 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x14, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 4.461271817s ago: executing program 1 (id=265): r0 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x3, 0x0) fcntl$setpipe(r1, 0x4, 0xfffffffffffff000) 4.381626986s ago: executing program 4 (id=266): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x3}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 3.80332887s ago: executing program 2 (id=268): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 3.541760899s ago: executing program 3 (id=269): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x2f, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 3.133724674s ago: executing program 2 (id=270): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) fsync(0xffffffffffffffff) 2.739438028s ago: executing program 1 (id=271): getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) 2.641285581s ago: executing program 2 (id=272): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="28000000020183e7de22cd4285ba1741da9a0e0404000280040001800c0019"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) 2.274870076s ago: executing program 2 (id=273): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES64], 0x28) 2.061706521s ago: executing program 4 (id=274): socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000001010000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[], 0x0) 2.033723726s ago: executing program 3 (id=275): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00000001c0)=0x1, 0x0) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000000400000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r0 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(0x0) 1.839654987s ago: executing program 1 (id=276): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffff76, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) 1.634207922s ago: executing program 2 (id=277): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r5, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {0xffe0, 0xa}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 1.418313183s ago: executing program 3 (id=278): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="3504000030000511d25a80648c63940d1124fc60040035400c0002000a00002037153e373f04018006041000450055d64a12f76710989a119052acaa1100da3e813fa6ba1eb693d93f699e37af0d43f908fa7d995a8feb85d6a4e1b691276cd9561767306b74b4098e", 0x69}], 0x1}, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800b000100697036746e6c00003800028014000300fc0100000000000000000000000000000400130014000200fc01000000000000000000000000000108000100", @ANYRES16=r0], 0x68}, 0x1, 0x0, 0x0, 0x80010}, 0x0) 1.322229659s ago: executing program 4 (id=279): r0 = syz_io_uring_setup(0x8d0, &(0x7f00000000c0)={0x0, 0xc48a, 0x800, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x2, 0x0, 0x0) 921.570196ms ago: executing program 3 (id=280): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 563.73547ms ago: executing program 2 (id=281): r0 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x3, 0x0) fcntl$setpipe(r1, 0x4, 0xfffffffffffff000) 233.566066ms ago: executing program 1 (id=282): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) write(r1, &(0x7f0000000880)="539cbad9c565e8032b334e4f0d0c97c8ea0a9aaf2e6003fb459439c5bb1740b8c8777bfe825006c4a6a0979ace46b5eca1cc6004f96c9c30618b4df7f00afb7c47c666a69bdc745130256158ec16a2ca7e514afd4a75f78f712e3336363318f7da096587f4976e0c0f4bc7a797dcab25cc7197779f8d", 0x76) 230.902362ms ago: executing program 4 (id=283): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x82) close(r0) 98.299901ms ago: executing program 3 (id=284): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x3}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 0s ago: executing program 0 (id=285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.115' (ED25519) to the list of known hosts. [ 182.041787][ T5774] cgroup: Unknown subsys name 'net' [ 182.187674][ T5774] cgroup: Unknown subsys name 'cpuset' [ 182.204356][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 224.755516][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.762343][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 228.990122][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 232.959913][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 232.979509][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 232.988354][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 233.003598][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 233.024726][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 233.036232][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 233.048527][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 233.057665][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 233.074834][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 233.084834][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 233.101050][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 233.133187][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 233.142298][ T5090] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 233.167167][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 233.176360][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 233.185980][ T5798] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 233.196042][ T5798] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 233.203172][ T5090] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 233.210666][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 233.219518][ T5803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 233.239096][ T5803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 233.250334][ T5803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 233.270594][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 233.425625][ T5090] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 233.442363][ T5090] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 234.247593][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 234.706907][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 235.141622][ T5090] Bluetooth: hci0: command tx timeout [ 235.220618][ T5090] Bluetooth: hci1: command tx timeout [ 235.368465][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.376072][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.385902][ T5796] bridge_slave_0: entered allmulticast mode [ 235.395699][ T5796] bridge_slave_0: entered promiscuous mode [ 235.411668][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.419439][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.427103][ T5796] bridge_slave_1: entered allmulticast mode [ 235.437009][ T5796] bridge_slave_1: entered promiscuous mode [ 235.446356][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 235.468826][ T5090] Bluetooth: hci2: command tx timeout [ 235.542081][ T5090] Bluetooth: hci4: command tx timeout [ 235.544032][ T5807] Bluetooth: hci3: command tx timeout [ 235.729881][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.739838][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 235.770477][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.834253][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 235.970484][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.978094][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.987799][ T5806] bridge_slave_0: entered allmulticast mode [ 235.997371][ T5806] bridge_slave_0: entered promiscuous mode [ 236.071840][ T5796] team0: Port device team_slave_0 added [ 236.081777][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.089612][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.097281][ T5806] bridge_slave_1: entered allmulticast mode [ 236.107100][ T5806] bridge_slave_1: entered promiscuous mode [ 236.144226][ T5796] team0: Port device team_slave_1 added [ 236.431018][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.563624][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.571087][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.598825][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.630619][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.729727][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.736934][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.763633][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.065576][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.075365][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.083288][ T5804] bridge_slave_0: entered allmulticast mode [ 237.092889][ T5804] bridge_slave_0: entered promiscuous mode [ 237.218713][ T5807] Bluetooth: hci0: command tx timeout [ 237.222403][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.231939][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.239766][ T5800] bridge_slave_0: entered allmulticast mode [ 237.249340][ T5800] bridge_slave_0: entered promiscuous mode [ 237.265823][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.275784][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.283655][ T5800] bridge_slave_1: entered allmulticast mode [ 237.293072][ T5800] bridge_slave_1: entered promiscuous mode [ 237.298558][ T5807] Bluetooth: hci1: command tx timeout [ 237.314535][ T5806] team0: Port device team_slave_0 added [ 237.322330][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.330099][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.337611][ T5804] bridge_slave_1: entered allmulticast mode [ 237.347087][ T5804] bridge_slave_1: entered promiscuous mode [ 237.393567][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.401371][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.409355][ T5805] bridge_slave_0: entered allmulticast mode [ 237.417854][ T5805] bridge_slave_0: entered promiscuous mode [ 237.511970][ T5806] team0: Port device team_slave_1 added [ 237.545869][ T5807] Bluetooth: hci2: command tx timeout [ 237.587090][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.594836][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.604453][ T5805] bridge_slave_1: entered allmulticast mode [ 237.613123][ T5805] bridge_slave_1: entered promiscuous mode [ 237.619386][ T5807] Bluetooth: hci4: command tx timeout [ 237.631598][ T5807] Bluetooth: hci3: command tx timeout [ 237.652939][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.673727][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.760560][ T5796] hsr_slave_0: entered promiscuous mode [ 237.770551][ T5796] hsr_slave_1: entered promiscuous mode [ 237.790591][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.906292][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.915020][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.942326][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.963096][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.072984][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.080448][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.107025][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.170288][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.187175][ T5800] team0: Port device team_slave_0 added [ 238.267336][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.284637][ T5804] team0: Port device team_slave_0 added [ 238.299569][ T5800] team0: Port device team_slave_1 added [ 238.314270][ T5804] team0: Port device team_slave_1 added [ 238.692527][ T5805] team0: Port device team_slave_0 added [ 238.703358][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.710960][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.737419][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.752208][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.759631][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.785907][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.812189][ T5806] hsr_slave_0: entered promiscuous mode [ 238.821291][ T5806] hsr_slave_1: entered promiscuous mode [ 238.829374][ T5806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.837130][ T5806] Cannot create hsr debugfs directory [ 238.866561][ T5805] team0: Port device team_slave_1 added [ 238.875812][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.883263][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.909812][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.943244][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.950837][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.977356][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.119107][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.126305][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.152965][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.173041][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.180390][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.206902][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.305296][ T5807] Bluetooth: hci0: command tx timeout [ 239.378437][ T5807] Bluetooth: hci1: command tx timeout [ 239.531654][ T5800] hsr_slave_0: entered promiscuous mode [ 239.541498][ T5800] hsr_slave_1: entered promiscuous mode [ 239.550298][ T5800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.558048][ T5800] Cannot create hsr debugfs directory [ 239.635819][ T5807] Bluetooth: hci2: command tx timeout [ 239.708859][ T5807] Bluetooth: hci4: command tx timeout [ 239.714734][ T5090] Bluetooth: hci3: command tx timeout [ 239.718681][ T5804] hsr_slave_0: entered promiscuous mode [ 239.730270][ T5804] hsr_slave_1: entered promiscuous mode [ 239.737991][ T5804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.746620][ T5804] Cannot create hsr debugfs directory [ 239.993463][ T5805] hsr_slave_0: entered promiscuous mode [ 240.002231][ T5805] hsr_slave_1: entered promiscuous mode [ 240.010837][ T5805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.018841][ T5805] Cannot create hsr debugfs directory [ 240.541637][ T5796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 240.609816][ T5796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 240.719639][ T5796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 240.787020][ T5796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 240.982511][ T5806] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 241.072011][ T5806] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 241.183905][ T5806] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 241.292972][ T5806] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 241.414935][ T5090] Bluetooth: hci0: command tx timeout [ 241.460062][ T5090] Bluetooth: hci1: command tx timeout [ 241.587719][ T5804] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 241.637378][ T5804] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 241.703093][ T5090] Bluetooth: hci2: command tx timeout [ 241.727599][ T5804] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 241.751547][ T5804] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 241.779046][ T5090] Bluetooth: hci3: command tx timeout [ 241.784733][ T5090] Bluetooth: hci4: command tx timeout [ 241.798540][ T5805] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 241.861797][ T5805] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 242.023521][ T5805] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 242.062919][ T5805] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 242.113294][ T5800] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 242.261237][ T5800] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 242.333228][ T5800] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 242.379159][ T5800] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 242.485861][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.659758][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.734544][ T3692] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.742405][ T3692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.849803][ T3692] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.857359][ T3692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.961823][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.083088][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.226460][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.364420][ T3794] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.372095][ T3794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.394588][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.511699][ T5796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.554559][ T3794] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.562214][ T3794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.583296][ T3794] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.590923][ T3794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.686443][ T755] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.694234][ T755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.764914][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.016660][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.102374][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.225125][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.252158][ T3794] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.259809][ T3794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.315800][ T3794] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.323496][ T3794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.516307][ T3794] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.524003][ T3794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.544551][ T3794] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.552345][ T3794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.706439][ T5805] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 244.719652][ T5805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.945319][ T5800] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 244.957495][ T5800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.724999][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.081914][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.197828][ T5796] veth0_vlan: entered promiscuous mode [ 246.244930][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.326065][ T5796] veth1_vlan: entered promiscuous mode [ 246.603923][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.767780][ T5806] veth0_vlan: entered promiscuous mode [ 246.865257][ T5806] veth1_vlan: entered promiscuous mode [ 246.914161][ T5796] veth0_macvtap: entered promiscuous mode [ 246.932918][ T5804] veth0_vlan: entered promiscuous mode [ 247.003284][ T5796] veth1_macvtap: entered promiscuous mode [ 247.047903][ T5804] veth1_vlan: entered promiscuous mode [ 247.179858][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.202580][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.276106][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.370877][ T5805] veth0_vlan: entered promiscuous mode [ 247.390472][ T5806] veth0_macvtap: entered promiscuous mode [ 247.463319][ T5806] veth1_macvtap: entered promiscuous mode [ 247.476452][ T5796] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.485846][ T5796] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.495031][ T5796] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.504225][ T5796] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.640178][ T5805] veth1_vlan: entered promiscuous mode [ 247.743030][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.761188][ T5804] veth0_macvtap: entered promiscuous mode [ 247.841034][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.876529][ T5804] veth1_macvtap: entered promiscuous mode [ 247.936530][ T5806] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.947055][ T5806] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.956306][ T5806] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.965443][ T5806] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.123918][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.159734][ T5805] veth0_macvtap: entered promiscuous mode [ 248.235938][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.295031][ T5805] veth1_macvtap: entered promiscuous mode [ 248.316321][ T5804] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.325637][ T5804] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.336477][ T5804] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.348329][ T5804] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.545885][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.634951][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.760239][ T5805] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.770063][ T5805] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.779253][ T5805] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.788488][ T5805] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.855579][ T5800] veth0_vlan: entered promiscuous mode [ 249.993557][ T5800] veth1_vlan: entered promiscuous mode [ 250.370125][ T5800] veth0_macvtap: entered promiscuous mode [ 250.421506][ T5800] veth1_macvtap: entered promiscuous mode [ 250.606424][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.724391][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.812705][ T5800] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.825213][ T5800] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.836445][ T5800] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.846567][ T5800] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.601360][ T3794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.609430][ T3794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.775149][ T3653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.783795][ T3653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.908072][ T3653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.916739][ T3653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.220093][ T4965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.228375][ T4965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.394027][ T5796] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 255.493664][ T4965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.503540][ T4965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.743979][ T755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.752273][ T755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.915667][ T4205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.924698][ T4205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.239967][ T4297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.248058][ T4297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.620174][ T5983] atomic_op ffff88802b7cc928 conn xmit_atomic 0000000000000000 [ 256.770962][ T5986] loop1: detected capacity change from 0 to 256 [ 257.043182][ T5990] loop2: detected capacity change from 0 to 512 [ 257.356015][ T5990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.369505][ T5990] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.699331][ T30] audit: type=1326 audit(1750744350.756:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc918e929 code=0x7ffc0000 [ 257.722412][ T30] audit: type=1326 audit(1750744350.756:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc918e929 code=0x7ffc0000 [ 257.921118][ T30] audit: type=1326 audit(1750744350.946:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6fc918e929 code=0x7ffc0000 [ 257.944049][ T30] audit: type=1326 audit(1750744350.966:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc918e929 code=0x7ffc0000 [ 257.968603][ T30] audit: type=1326 audit(1750744350.966:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc918e929 code=0x7ffc0000 [ 257.991971][ T30] audit: type=1326 audit(1750744350.966:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6fc918e929 code=0x7ffc0000 [ 258.014257][ T30] audit: type=1326 audit(1750744351.056:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc918e929 code=0x7ffc0000 [ 258.040232][ T30] audit: type=1326 audit(1750744351.056:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc918e929 code=0x7ffc0000 [ 258.137594][ T3692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.145854][ T3692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.836586][ T3979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.844799][ T3979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.944641][ T30] audit: type=1326 audit(1750744351.166:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f6fc918e929 code=0x7ffc0000 [ 258.967240][ T30] audit: type=1326 audit(1750744351.246:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc918e929 code=0x7ffc0000 [ 259.202001][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.835453][ T6015] syz.1.12 (6015) used greatest stack depth: 2472 bytes left [ 260.979053][ T6023] loop2: detected capacity change from 0 to 512 [ 261.050553][ T6023] ======================================================= [ 261.050553][ T6023] WARNING: The mand mount option has been deprecated and [ 261.050553][ T6023] and is ignored by this kernel. Remove the mand [ 261.050553][ T6023] option from the mount to silence this warning. [ 261.050553][ T6023] ======================================================= [ 261.087124][ T6023] EXT4-fs: Ignoring removed nomblk_io_submit option [ 261.291732][ T6023] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 261.300363][ T6023] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 261.310331][ T6023] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 261.320492][ T6023] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 261.331670][ T6023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 261.568907][ T6023] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 261.941096][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.516904][ T6041] loop1: detected capacity change from 0 to 512 [ 262.637042][ T6043] netlink: 'syz.2.22': attribute type 12 has an invalid length. [ 262.694747][ T6042] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 262.766015][ T6041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.782095][ T6041] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.209217][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 263.209294][ T30] audit: type=1326 audit(1750744356.266:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7742d8e929 code=0x7ffc0000 [ 263.238348][ T30] audit: type=1326 audit(1750744356.266:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7742d8e929 code=0x7ffc0000 [ 263.331444][ T30] audit: type=1326 audit(1750744356.396:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7742d8e929 code=0x7ffc0000 [ 263.354251][ T30] audit: type=1326 audit(1750744356.396:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7742d8e929 code=0x7ffc0000 [ 263.415848][ T30] audit: type=1326 audit(1750744356.476:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7742d8e929 code=0x7ffc0000 [ 263.569319][ T30] audit: type=1326 audit(1750744356.506:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1778e929 code=0x7ffc0000 [ 263.594490][ T30] audit: type=1326 audit(1750744356.576:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7742d8e929 code=0x7ffc0000 [ 263.617913][ T30] audit: type=1326 audit(1750744356.616:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca1778e929 code=0x7ffc0000 [ 263.640675][ T30] audit: type=1326 audit(1750744356.616:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1778e929 code=0x7ffc0000 [ 263.663418][ T30] audit: type=1326 audit(1750744356.616:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1778e929 code=0x7ffc0000 [ 264.430220][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.795656][ T6066] 9pnet: p9_errstr2errno: server reported unknown error [ 266.599003][ T6069] loop4: detected capacity change from 0 to 256 [ 268.342488][ T6087] loop3: detected capacity change from 0 to 512 [ 268.541149][ T6090] xt_connbytes: Forcing CT accounting to be enabled [ 268.548527][ T6090] Cannot find set identified by id 0 to match [ 268.562931][ T6087] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.576539][ T6087] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.737885][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.40'. [ 268.747338][ T6090] batadv0: entered promiscuous mode [ 268.753141][ T6090] batadv0: entered allmulticast mode [ 268.930505][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 268.930580][ T30] audit: type=1326 audit(1750744361.996:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.3.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea078e929 code=0x7ffc0000 [ 268.963521][ T30] audit: type=1326 audit(1750744361.996:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.3.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea078e929 code=0x7ffc0000 [ 269.251882][ T30] audit: type=1326 audit(1750744362.266:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.3.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbea078e929 code=0x7ffc0000 [ 269.274703][ T30] audit: type=1326 audit(1750744362.276:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.3.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea078e929 code=0x7ffc0000 [ 269.297571][ T30] audit: type=1326 audit(1750744362.326:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.3.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbea078e929 code=0x7ffc0000 [ 269.320096][ T30] audit: type=1326 audit(1750744362.326:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.3.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea078e929 code=0x7ffc0000 [ 269.347959][ T30] audit: type=1326 audit(1750744362.326:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.3.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fbea078e929 code=0x7ffc0000 [ 269.375024][ T30] audit: type=1326 audit(1750744362.346:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.3.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea078e929 code=0x7ffc0000 [ 269.398722][ T30] audit: type=1326 audit(1750744362.366:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.3.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fbea078e929 code=0x7ffc0000 [ 269.421518][ T30] audit: type=1326 audit(1750744362.366:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.3.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea078e929 code=0x7ffc0000 [ 269.829625][ T5804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.299001][ T6106] loop1: detected capacity change from 0 to 256 [ 271.150014][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.49'. [ 271.950220][ T6123] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 271.958091][ T5848] IPVS: starting estimator thread 0... [ 272.054793][ T6123] loop1: detected capacity change from 0 to 256 [ 272.062965][ T6127] IPVS: using max 240 ests per chain, 12000 per kthread [ 272.185825][ T6123] sd 0:0:1:0: device reset [ 272.281525][ T6123] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 272.290122][ T6123] FAT-fs (loop1): Filesystem has been set read-only [ 272.490807][ T6123] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 272.587873][ T6132] loop3: detected capacity change from 0 to 512 [ 272.692931][ T6123] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 272.784601][ T6123] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 272.797471][ T6132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.817237][ T6132] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.064540][ T5804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.090674][ T6144] loop1: detected capacity change from 0 to 256 [ 274.210986][ T6146] loop0: detected capacity change from 0 to 512 [ 274.284767][ T6146] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 274.298720][ T6146] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 274.467158][ T6146] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 274.489733][ T6146] EXT4-fs (loop0): 1 truncate cleaned up [ 274.497986][ T6146] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.990425][ T5796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.190264][ T5848] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 275.281153][ T6163] syzkaller0: entered promiscuous mode [ 275.286910][ T6163] syzkaller0: entered allmulticast mode [ 275.399208][ T5848] usb 3-1: Using ep0 maxpacket: 32 [ 275.452708][ T5848] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 275.461667][ T5848] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 275.476572][ T5848] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 275.489313][ T5848] usb 3-1: config 1 has no interface number 0 [ 275.495801][ T5848] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 275.507667][ T5848] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 275.521479][ T5848] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 275.530936][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.886891][ T5848] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 276.146102][ T5848] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 276.572943][ T5848] usb 3-1: USB disconnect, device number 2 [ 276.586366][ T5848] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 276.775152][ T6178] loop1: detected capacity change from 0 to 512 [ 276.961122][ T6178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.974596][ T6178] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.995604][ T6184] loop0: detected capacity change from 0 to 256 [ 277.172789][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 277.172881][ T30] audit: type=1326 audit(1750744370.236:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7742d8e929 code=0x7ffc0000 [ 277.375017][ T30] audit: type=1804 audit(1750744370.266:135): pid=6184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.73" name="/newroot/9/file1/file0" dev="loop0" ino=1048604 res=1 errno=0 [ 277.397505][ T30] audit: type=1326 audit(1750744370.276:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7742d8e929 code=0x7ffc0000 [ 277.422704][ T30] audit: type=1326 audit(1750744370.416:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7742d8e929 code=0x7ffc0000 [ 277.446504][ T30] audit: type=1326 audit(1750744370.416:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7742d8e929 code=0x7ffc0000 [ 277.469414][ T30] audit: type=1326 audit(1750744370.416:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7742d8e929 code=0x7ffc0000 [ 277.492049][ T30] audit: type=1326 audit(1750744370.416:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7742d8e929 code=0x7ffc0000 [ 277.515383][ T30] audit: type=1326 audit(1750744370.416:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7742d8e929 code=0x7ffc0000 [ 277.540470][ T30] audit: type=1326 audit(1750744370.416:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7742d8e929 code=0x7ffc0000 [ 277.564312][ T30] audit: type=1326 audit(1750744370.416:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7742d8e929 code=0x7ffc0000 [ 278.473051][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.543134][ T6199] xt_connbytes: Forcing CT accounting to be enabled [ 278.550364][ T6199] Cannot find set identified by id 0 to match [ 278.692827][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.79'. [ 278.703060][ T6199] veth0_vlan: entered allmulticast mode [ 279.277404][ T6204] syzkaller0: entered promiscuous mode [ 279.283476][ T6204] syzkaller0: entered allmulticast mode [ 279.439016][ T6210] loop0: detected capacity change from 0 to 512 [ 279.607280][ T6210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.621284][ T6210] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 279.847303][ T6217] syz.1.84 uses obsolete (PF_INET,SOCK_PACKET) [ 280.852241][ T5796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.074322][ T6227] loop2: detected capacity change from 0 to 256 [ 281.352978][ T6233] loop3: detected capacity change from 0 to 512 [ 281.521626][ T6233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.536567][ T6233] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.719596][ T5804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.221267][ T6260] xt_connbytes: Forcing CT accounting to be enabled [ 283.228508][ T6260] Cannot find set identified by id 0 to match [ 283.480937][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.95'. [ 283.490718][ T6260] veth0_macvtap: entered allmulticast mode [ 283.593160][ T6261] loop3: detected capacity change from 0 to 2048 [ 283.622142][ T6266] syzkaller0: entered promiscuous mode [ 283.627898][ T6266] syzkaller0: entered allmulticast mode [ 283.790541][ T6261] EXT4-fs (loop3): failed to initialize system zone (-117) [ 283.804099][ T6261] EXT4-fs (loop3): mount failed [ 284.524645][ T6275] loop1: detected capacity change from 0 to 256 [ 284.654902][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 284.654975][ T30] audit: type=1804 audit(1750744377.716:229): pid=6275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.101" name="/newroot/23/file1/file0" dev="loop1" ino=1048606 res=1 errno=0 [ 285.383095][ T6285] loop2: detected capacity change from 0 to 512 [ 285.729035][ T6285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.742552][ T6285] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.205854][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 286.212865][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.330382][ T30] audit: type=1326 audit(1750744379.356:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6283 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc918e929 code=0x7ffc0000 [ 286.454193][ T30] audit: type=1326 audit(1750744379.426:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6283 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6fc918e929 code=0x7ffc0000 [ 286.478827][ T30] audit: type=1326 audit(1750744379.426:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6283 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc918e929 code=0x7ffc0000 [ 286.501722][ T30] audit: type=1326 audit(1750744379.426:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6283 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc918e929 code=0x7ffc0000 [ 286.864627][ T30] audit: type=1326 audit(1750744379.646:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6283 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6fc918e929 code=0x7ffc0000 [ 286.887734][ T30] audit: type=1326 audit(1750744379.656:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6283 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc918e929 code=0x7ffc0000 [ 286.912457][ T30] audit: type=1326 audit(1750744379.686:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6283 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f6fc918e929 code=0x7ffc0000 [ 286.935179][ T30] audit: type=1326 audit(1750744379.686:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6283 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc918e929 code=0x7ffc0000 [ 286.963459][ T30] audit: type=1326 audit(1750744379.686:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6283 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f6fc918e929 code=0x7ffc0000 [ 287.257051][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.209526][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'. [ 289.213498][ T6310] syzkaller0: entered promiscuous mode [ 289.219469][ T6310] syzkaller0: entered allmulticast mode [ 290.046418][ T6317] netlink: 2564 bytes leftover after parsing attributes in process `syz.2.115'. [ 290.682755][ T6322] loop0: detected capacity change from 0 to 256 [ 290.878904][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 290.878982][ T30] audit: type=1804 audit(1750744383.926:245): pid=6322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.117" name="/newroot/18/file1/file0" dev="loop0" ino=1048607 res=1 errno=0 [ 291.463261][ T6333] loop0: detected capacity change from 0 to 512 [ 291.721346][ T6333] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.734779][ T6333] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.939227][ T30] audit: type=1326 audit(1750744384.996:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10f78e929 code=0x7ffc0000 [ 292.025040][ T30] audit: type=1326 audit(1750744385.056:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb10f78e929 code=0x7ffc0000 [ 292.047906][ T30] audit: type=1326 audit(1750744385.056:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10f78e929 code=0x7ffc0000 [ 292.075941][ T30] audit: type=1326 audit(1750744385.056:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10f78e929 code=0x7ffc0000 [ 292.194763][ T30] audit: type=1326 audit(1750744385.256:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb10f78e929 code=0x7ffc0000 [ 292.394807][ T30] audit: type=1326 audit(1750744385.396:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10f78e929 code=0x7ffc0000 [ 292.417712][ T30] audit: type=1326 audit(1750744385.396:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10f78e929 code=0x7ffc0000 [ 292.753617][ T30] audit: type=1326 audit(1750744385.816:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7742d8e929 code=0x7ffc0000 [ 292.781977][ T30] audit: type=1326 audit(1750744385.816:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7742d8e929 code=0x7ffc0000 [ 292.908462][ T5796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.341812][ T6362] loop2: detected capacity change from 0 to 256 [ 293.378933][ T6361] netlink: 2564 bytes leftover after parsing attributes in process `syz.3.131'. [ 293.580401][ T6359] syzkaller0: entered promiscuous mode [ 293.586171][ T6359] syzkaller0: entered allmulticast mode [ 295.978122][ T6388] loop3: detected capacity change from 0 to 512 [ 296.183121][ T6388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.196591][ T6388] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.407782][ T6396] loop0: detected capacity change from 0 to 256 [ 296.440053][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 296.440131][ T30] audit: type=1800 audit(1750744389.476:284): pid=6388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.143" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 296.572866][ T6397] syzkaller0: entered promiscuous mode [ 296.578965][ T6397] syzkaller0: entered allmulticast mode [ 296.661761][ T30] audit: type=1804 audit(1750744389.716:285): pid=6396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.144" name="/newroot/23/file1/file0" dev="loop0" ino=1048609 res=1 errno=0 [ 296.963785][ T5804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.193514][ T6402] netlink: 2564 bytes leftover after parsing attributes in process `syz.1.148'. [ 297.887987][ T30] audit: type=1326 audit(1750744390.936:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.2.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc918e929 code=0x7ffc0000 [ 298.013860][ T30] audit: type=1326 audit(1750744390.976:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.2.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f6fc918e929 code=0x7ffc0000 [ 298.037544][ T30] audit: type=1326 audit(1750744391.006:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.2.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc918e929 code=0x7ffc0000 [ 298.060429][ T30] audit: type=1326 audit(1750744391.026:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.2.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6fc918e929 code=0x7ffc0000 [ 298.083275][ T30] audit: type=1326 audit(1750744391.026:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.2.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc918e929 code=0x7ffc0000 [ 298.109259][ T30] audit: type=1326 audit(1750744391.026:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.2.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fc918e929 code=0x7ffc0000 [ 298.132047][ T30] audit: type=1326 audit(1750744391.026:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.2.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc918e929 code=0x7ffc0000 [ 298.154983][ T30] audit: type=1326 audit(1750744391.026:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.2.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fc918e929 code=0x7ffc0000 [ 298.217065][ T6415] Cannot find set identified by id 0 to match [ 298.346708][ T6415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.154'. [ 298.386554][ T6415] bond_slave_0: entered promiscuous mode [ 298.392732][ T6415] bond_slave_1: entered promiscuous mode [ 298.399294][ T6415] macvtap1: entered promiscuous mode [ 298.411808][ T6415] bond0: entered promiscuous mode [ 298.423084][ T6415] macvtap1: entered allmulticast mode [ 298.430345][ T6415] bond0: entered allmulticast mode [ 298.435914][ T6415] bond_slave_0: entered allmulticast mode [ 298.442053][ T6415] bond_slave_1: entered allmulticast mode [ 298.453691][ T6415] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 298.547747][ T6416] bond0: left allmulticast mode [ 298.558664][ T6416] bond_slave_0: left allmulticast mode [ 298.567428][ T6416] bond_slave_1: left allmulticast mode [ 298.576498][ T6416] bond0: left promiscuous mode [ 298.584806][ T6416] bond_slave_0: left promiscuous mode [ 298.590599][ T6416] bond_slave_1: left promiscuous mode [ 299.112310][ T6410] infiniband syz2: set active [ 299.117291][ T6410] infiniband syz2: added veth0_to_bond [ 299.183965][ T6410] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 299.230191][ T6410] infiniband syz2: Couldn't open port 1 [ 299.450362][ T6410] RDS/IB: syz2: added [ 299.454963][ T6410] smc: adding ib device syz2 with port count 1 [ 299.461758][ T6410] smc: ib device syz2 port 1 has pnetid [ 299.979714][ T6427] 9pnet: Could not find request transport: {øÿ [ 300.436161][ T6436] loop1: detected capacity change from 0 to 256 [ 300.894848][ T6438] syzkaller0: entered promiscuous mode [ 300.902647][ T6438] syzkaller0: entered allmulticast mode [ 304.824157][ T6471] loop4: detected capacity change from 0 to 256 [ 304.890590][ T6469] loop0: detected capacity change from 0 to 512 [ 304.913962][ T6469] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 304.958032][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 304.969369][ T30] audit: type=1804 audit(1750744398.006:335): pid=6471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.175" name="/newroot/37/file1/file0" dev="loop4" ino=1048611 res=1 errno=0 [ 305.046925][ T6476] loop3: detected capacity change from 0 to 128 [ 305.109229][ T6469] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 305.117880][ T6469] System zones: 1-12 [ 305.193038][ T6469] EXT4-fs (loop0): 1 truncate cleaned up [ 305.219156][ T6476] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 305.250407][ T6476] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.795603][ T6469] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.950215][ T6469] EXT4-fs warning (device loop0): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 305.996071][ T5804] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 306.316964][ T5796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.497741][ T6506] loop2: detected capacity change from 0 to 256 [ 308.697870][ T30] audit: type=1804 audit(1750744401.746:336): pid=6506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.188" name="/newroot/32/file1/file0" dev="loop2" ino=1048612 res=1 errno=0 [ 309.739257][ T6510] Cannot find set identified by id 0 to match [ 309.841647][ T6510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.191'. [ 309.997631][ T6510] ip6gretap0: entered promiscuous mode [ 310.004001][ T6510] macvtap2: entered promiscuous mode [ 310.010417][ T6510] macvtap2: entered allmulticast mode [ 310.016040][ T6510] ip6gretap0: entered allmulticast mode [ 310.217934][ T6516] ip6gretap0: left allmulticast mode [ 310.224559][ T6516] ip6gretap0: left promiscuous mode [ 314.422124][ T6551] xt_connbytes: Forcing CT accounting to be enabled [ 314.429278][ T6551] Cannot find set identified by id 0 to match [ 314.569679][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.206'. [ 314.656370][ T6551] bond_slave_0: entered promiscuous mode [ 314.662687][ T6551] bond_slave_1: entered promiscuous mode [ 314.669397][ T6551] macvtap1: entered promiscuous mode [ 314.674978][ T6551] bond0: entered promiscuous mode [ 314.683439][ T6551] macvtap1: entered allmulticast mode [ 314.696106][ T6551] bond0: entered allmulticast mode [ 314.704049][ T6551] bond_slave_0: entered allmulticast mode [ 314.710205][ T6551] bond_slave_1: entered allmulticast mode [ 314.721627][ T6551] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 314.787644][ T6553] bond0: left allmulticast mode [ 314.796229][ T6553] bond_slave_0: left allmulticast mode [ 314.803480][ T6553] bond_slave_1: left allmulticast mode [ 314.809463][ T6553] bond0: left promiscuous mode [ 314.817548][ T6553] bond_slave_0: left promiscuous mode [ 314.823385][ T6553] bond_slave_1: left promiscuous mode [ 315.775972][ T6562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.211'. [ 316.888889][ T6573] loop0: detected capacity change from 0 to 512 [ 316.981717][ T6573] EXT4-fs: Ignoring removed nomblk_io_submit option [ 317.070047][ T6573] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 317.078465][ T6573] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 317.162103][ T6573] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 317.172310][ T6573] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 317.183617][ T6573] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 317.389197][ T6573] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 317.534123][ T5796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.632236][ T6581] Cannot find set identified by id 0 to match [ 317.773984][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.220'. [ 318.571509][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.224'. [ 319.941641][ T6608] loop1: detected capacity change from 0 to 512 [ 319.983412][ T6608] EXT4-fs: Ignoring removed nomblk_io_submit option [ 320.025000][ T6608] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 320.188071][ T6601] loop2: detected capacity change from 0 to 8192 [ 320.199890][ T6608] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 320.265005][ T6608] EXT4-fs (loop1): 1 truncate cleaned up [ 320.273262][ T6608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.723188][ T30] audit: type=1326 audit(1750744413.786:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7742d8e929 code=0x7ffc0000 [ 320.749043][ T30] audit: type=1326 audit(1750744413.786:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7742d8e929 code=0x7ffc0000 [ 320.773828][ T30] audit: type=1326 audit(1750744413.786:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f7742d8e929 code=0x7ffc0000 [ 320.796548][ T30] audit: type=1326 audit(1750744413.786:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7742d8e929 code=0x7ffc0000 [ 320.820171][ T30] audit: type=1326 audit(1750744413.786:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7742d8e929 code=0x7ffc0000 [ 320.845358][ T30] audit: type=1326 audit(1750744413.786:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7742d8e929 code=0x7ffc0000 [ 320.869147][ T30] audit: type=1326 audit(1750744413.786:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7742d8e929 code=0x7ffc0000 [ 320.892125][ T30] audit: type=1326 audit(1750744413.786:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7742d8e929 code=0x7ffc0000 [ 320.915771][ T30] audit: type=1326 audit(1750744413.786:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7742d8e929 code=0x7ffc0000 [ 321.067385][ T6622] Cannot find set identified by id 0 to match [ 321.125965][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.234'. [ 321.419011][ T30] audit: type=1326 audit(1750744414.026:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7742d8e929 code=0x7ffc0000 [ 322.295779][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.360386][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.238'. [ 323.122941][ T6645] loop1: detected capacity change from 0 to 512 [ 323.183227][ T6645] EXT4-fs: Ignoring removed i_version option [ 323.262730][ T6645] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 323.331174][ T6645] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 323.342654][ T6645] System zones: 1-12 [ 323.348070][ T6645] EXT4-fs (loop1): orphan cleanup on readonly fs [ 323.359104][ T6645] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.242: invalid indirect mapped block 12 (level 1) [ 323.424820][ T6645] EXT4-fs (loop1): Remounting filesystem read-only [ 323.448678][ T6645] EXT4-fs (loop1): 1 truncate cleaned up [ 323.456895][ T6645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 323.563692][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 323.571953][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 323.580449][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 323.588607][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 323.599856][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 323.607879][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 323.617060][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 323.626585][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 323.634774][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 323.643014][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 323.651360][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 323.659528][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 323.667530][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 323.675755][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 323.683947][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 323.692296][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 324.025116][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 324.135843][ T9] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 324.321445][ T6661] loop3: detected capacity change from 0 to 128 [ 324.410196][ T6661] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 324.939449][ T6668] Cannot find set identified by id 0 to match [ 325.070878][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.249'. [ 325.109921][ T6670] netlink: 'syz.2.250': attribute type 13 has an invalid length. [ 325.405671][ T6662] fido_id[6662]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 325.885707][ T6670] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.895595][ T6670] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.387752][ T6670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.417128][ T6670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.986998][ T6670] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.996726][ T6670] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.006326][ T6670] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.015638][ T6670] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.408589][ T24] syz2: Port: 1 Link DOWN [ 328.029703][ T6683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.254'. [ 329.123822][ T6697] Cannot find set identified by id 0 to match [ 329.320651][ T6697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.262'. [ 329.387567][ T6697] macvtap2: entered promiscuous mode [ 329.393457][ T6697] bridge0: entered promiscuous mode [ 329.399929][ T6697] macvtap2: entered allmulticast mode [ 329.405540][ T6697] bridge0: entered allmulticast mode [ 329.440909][ T6699] bridge0: left allmulticast mode [ 329.446247][ T6699] bridge0: left promiscuous mode [ 329.851871][ T6703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.860077][ T6703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.922370][ T6703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.930335][ T6703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.990292][ T6705] netlink: 'syz.4.266': attribute type 13 has an invalid length. [ 330.628848][ T6705] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.638695][ T6705] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.956781][ T6714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.269'. [ 331.065861][ T6705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.102112][ T6705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.520688][ T6705] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.531364][ T6705] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.540893][ T6705] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.556929][ T6705] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.804849][ T6734] Cannot find set identified by id 0 to match [ 332.982141][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'. [ 334.298797][ T6749] netlink: 'syz.3.284': attribute type 13 has an invalid length. [ 334.686429][ T6749] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.698389][ T6749] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.805156][ T3794] ===================================================== [ 334.813149][ T3794] BUG: KMSAN: uninit-value in n_tty_receive_buf_standard+0xafd/0x98a0 [ 334.821752][ T3794] n_tty_receive_buf_standard+0xafd/0x98a0 [ 334.827891][ T3794] n_tty_receive_buf_common+0x1a68/0x2540 [ 334.834099][ T3794] n_tty_receive_buf2+0x4c/0x60 [ 334.840077][ T3794] tty_ldisc_receive_buf+0xc6/0x2c0 [ 334.845968][ T3794] tty_port_default_receive_buf+0xd7/0x1a0 [ 334.852143][ T3794] flush_to_ldisc+0x49d/0xf00 [ 334.857015][ T3794] process_scheduled_works+0xb91/0x1d80 [ 334.866703][ T3794] worker_thread+0xedf/0x1590 [ 334.873292][ T3794] kthread+0xd5c/0xf00 [ 334.877565][ T3794] ret_from_fork+0x1e3/0x310 [ 334.882544][ T3794] ret_from_fork_asm+0x1a/0x30 [ 334.888609][ T3794] [ 334.891054][ T3794] Uninit was stored to memory at: [ 334.896373][ T3794] n_tty_receive_buf_standard+0xaf6/0x98a0 [ 334.902757][ T3794] n_tty_receive_buf_common+0x1a68/0x2540 [ 334.908800][ T3794] n_tty_receive_buf2+0x4c/0x60 [ 334.913866][ T3794] tty_ldisc_receive_buf+0xc6/0x2c0 [ 334.919454][ T3794] tty_port_default_receive_buf+0xd7/0x1a0 [ 334.925475][ T3794] flush_to_ldisc+0x49d/0xf00 [ 334.930440][ T3794] process_scheduled_works+0xb91/0x1d80 [ 334.936233][ T3794] worker_thread+0xedf/0x1590 [ 334.942612][ T3794] kthread+0xd5c/0xf00 [ 334.946866][ T3794] ret_from_fork+0x1e3/0x310 [ 334.951900][ T3794] ret_from_fork_asm+0x1a/0x30 [ 334.956905][ T3794] [ 334.959565][ T3794] Uninit was created at: [ 334.967512][ T3794] __kmalloc_noprof+0x95f/0x1310 [ 334.973802][ T3794] __tty_buffer_request_room+0x3d4/0x7a0 [ 334.979844][ T3794] __tty_insert_flip_string_flags+0x157/0x6f0 [ 334.986188][ T3794] uart_insert_char+0x368/0x930 [ 334.991351][ T3794] serial8250_read_char+0x1ba/0x670 [ 334.996776][ T3794] serial8250_handle_irq+0x930/0x1110 [ 335.002470][ T3794] serial8250_default_handle_irq+0x116/0x2b0 [ 335.008739][ T3794] serial8250_interrupt+0xc8/0x400 [ 335.014067][ T3794] __handle_irq_event_percpu+0x11c/0xbf0 [ 335.020541][ T3794] handle_irq_event+0xe0/0x2a0 [ 335.025523][ T3794] handle_edge_irq+0x31c/0xc80 [ 335.030601][ T3794] __common_interrupt+0x9f/0x220 [ 335.035783][ T3794] common_interrupt+0x94/0xb0 [ 335.040779][ T3794] asm_common_interrupt+0x2b/0x40 [ 335.046001][ T3794] [ 335.048715][ T3794] CPU: 1 UID: 0 PID: 3794 Comm: kworker/u8:17 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(undef) [ 335.061479][ T3794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 335.075365][ T3794] Workqueue: events_unbound flush_to_ldisc [ 335.082625][ T3794] ===================================================== [ 335.089826][ T3794] Disabling lock debugging due to kernel taint [ 335.098441][ T3794] Kernel panic - not syncing: kmsan.panic set ... [ 335.105057][ T3794] CPU: 1 UID: 0 PID: 3794 Comm: kworker/u8:17 Tainted: G B 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(undef) [ 335.119221][ T3794] Tainted: [B]=BAD_PAGE [ 335.123512][ T3794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 335.133846][ T3794] Workqueue: events_unbound flush_to_ldisc [ 335.139982][ T3794] Call Trace: [ 335.143403][ T3794] [ 335.146634][ T3794] __dump_stack+0x26/0x30 [ 335.151196][ T3794] dump_stack_lvl+0x53/0x270 [ 335.156010][ T3794] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 335.162085][ T3794] dump_stack+0x1e/0x25 [ 335.166478][ T3794] panic+0x4bd/0xd50 [ 335.170645][ T3794] kmsan_report+0x31c/0x320 [ 335.175389][ T3794] ? __msan_warning+0x1b/0x30 [ 335.180284][ T3794] ? n_tty_receive_buf_standard+0xafd/0x98a0 [ 335.186496][ T3794] ? n_tty_receive_buf_common+0x1a68/0x2540 [ 335.192618][ T3794] ? n_tty_receive_buf2+0x4c/0x60 [ 335.197853][ T3794] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 335.203478][ T3794] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 335.209678][ T3794] ? flush_to_ldisc+0x49d/0xf00 [ 335.214708][ T3794] ? process_scheduled_works+0xb91/0x1d80 [ 335.220666][ T3794] ? worker_thread+0xedf/0x1590 [ 335.225757][ T3794] ? kthread+0xd5c/0xf00 [ 335.230202][ T3794] ? ret_from_fork+0x1e3/0x310 [ 335.235162][ T3794] ? ret_from_fork_asm+0x1a/0x30 [ 335.240334][ T3794] ? ret_from_fork_asm+0x1a/0x30 [ 335.245511][ T3794] ? stack_depot_save_flags+0x35/0x7b0 [ 335.251196][ T3794] ? kmsan_get_metadata+0xfb/0x160 [ 335.256545][ T3794] ? kmsan_get_metadata+0x150/0x160 [ 335.261981][ T3794] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 335.268571][ T3794] ? kmsan_get_metadata+0x150/0x160 [ 335.274030][ T3794] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 335.280119][ T3794] ? n_tty_receive_char+0xfae/0x1440 [ 335.285648][ T3794] ? kmsan_get_metadata+0xfb/0x160 [ 335.291370][ T3794] __msan_warning+0x1b/0x30 [ 335.296127][ T3794] n_tty_receive_buf_standard+0xafd/0x98a0 [ 335.302227][ T3794] ? kmsan_get_metadata+0xfb/0x160 [ 335.307630][ T3794] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 335.313950][ T3794] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 335.320562][ T3794] n_tty_receive_buf_common+0x1a68/0x2540 [ 335.326620][ T3794] n_tty_receive_buf2+0x4c/0x60 [ 335.331692][ T3794] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 335.337460][ T3794] tty_ldisc_receive_buf+0xc6/0x2c0 [ 335.342941][ T3794] tty_port_default_receive_buf+0xd7/0x1a0 [ 335.348978][ T3794] flush_to_ldisc+0x49d/0xf00 [ 335.353860][ T3794] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 335.360521][ T3794] ? __pfx_flush_to_ldisc+0x10/0x10 [ 335.365924][ T3794] process_scheduled_works+0xb91/0x1d80 [ 335.371789][ T3794] worker_thread+0xedf/0x1590 [ 335.376757][ T3794] kthread+0xd5c/0xf00 [ 335.381017][ T3794] ? __pfx_worker_thread+0x10/0x10 [ 335.386391][ T3794] ? __pfx_kthread+0x10/0x10 [ 335.391189][ T3794] ret_from_fork+0x1e3/0x310 [ 335.395971][ T3794] ? __pfx_kthread+0x10/0x10 [ 335.400765][ T3794] ret_from_fork_asm+0x1a/0x30 [ 335.405789][ T3794] [ 335.409290][ T3794] Kernel Offset: disabled [ 335.413776][ T3794] Rebooting in 86400 seconds..