last executing test programs: 7.951454983s ago: executing program 2 (id=3): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)="b7", 0x1}], 0x1}}], 0x1, 0x4000) sendmmsg(r0, &(0x7f000000bb80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)='P', 0x1}], 0x1, &(0x7f00000005c0)=[{0x10, 0x1, 0xd05}], 0x10}}], 0x1, 0x4004000) 7.866690447s ago: executing program 2 (id=7): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000600)={0xa0000013}) ppoll(&(0x7f0000000040)=[{r2, 0x1}], 0x1, 0x0, 0x0, 0x0) 6.639585415s ago: executing program 2 (id=16): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x842) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 5.361618776s ago: executing program 4 (id=49): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 5.198977688s ago: executing program 4 (id=54): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000600)={0xa0000013}) ppoll(&(0x7f0000000040)=[{r2, 0x1}], 0x1, 0x0, 0x0, 0x0) 4.35356383s ago: executing program 4 (id=82): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2bf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffe) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 4.332733091s ago: executing program 4 (id=84): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0xd9, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x18) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 3.454232428s ago: executing program 4 (id=103): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) 1.282896793s ago: executing program 1 (id=164): prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x2, &(0x7f00000001c0)={0x0, 0xb, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) 1.279819948s ago: executing program 1 (id=165): close(0xffffffffffffffff) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300060c1) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x10000000) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 1.244844003s ago: executing program 1 (id=166): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000003080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000300)=ANY=[@ANYRESHEX=r2], 0x0) 1.182207726s ago: executing program 1 (id=167): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="020300032f0000002cbd7000fbdbdf2502000900080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a00000000000000fc01000000000000000000000000000107000000000000001f00080080"], 0x178}, 0x1, 0x7}, 0x0) 1.12812828s ago: executing program 1 (id=168): prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0, 0x0, 0x6}, 0x18) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) socket$kcm(0x10, 0x2, 0x10) 630.827844ms ago: executing program 1 (id=179): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0x2a94, 0x10100, 0x2, 0x1fe}, &(0x7f0000000200)=0x0, &(0x7f00000006c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r2, 0xd81, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r6) 433.074485ms ago: executing program 4 (id=185): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) ppoll(&(0x7f0000000040)=[{r2, 0x1}], 0x1, 0x0, 0x0, 0x0) close_range(r0, r1, 0x0) 331.71482ms ago: executing program 3 (id=188): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2f0, &(0x7f0000000d40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}], 0x1) sched_setscheduler(0x0, 0x1, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x2, 0x3, 0x6, 0x5}) 246.705245ms ago: executing program 3 (id=190): r0 = socket(0xa, 0x5, 0x0) sendto$inet6(r0, &(0x7f0000000000)="d2", 0x1, 0x4054, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 246.360805ms ago: executing program 3 (id=192): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x81}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x4004, @fd=r0, 0x823, &(0x7f00000001c0)=[{0x0, 0x10}], 0x1}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020200031100000000"], 0x88}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000100000009000034000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000140000000e0a0102000000000000000001000000140000001000010000000000000000000000000a94d99f4a88af8f7c"], 0x90}}, 0x0) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) 229.306636ms ago: executing program 3 (id=194): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) 158.795896ms ago: executing program 3 (id=196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xab}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x19}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000) 158.627892ms ago: executing program 0 (id=197): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3fb, 0x300, 0x70bd2b, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x2000c090}, 0x8000) 158.498297ms ago: executing program 0 (id=198): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r2, r2, 0x0, 0x2000007ff) 136.509533ms ago: executing program 3 (id=199): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000000c0)={r3}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x3, r2, 0x5}) socket$inet6(0x10, 0x3, 0x0) 133.256258ms ago: executing program 0 (id=200): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f6873720000000014000100"], 0xfc}}, 0x0) 6.913227ms ago: executing program 0 (id=201): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x9, 0x4, 0xdffc, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 6.690811ms ago: executing program 0 (id=202): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x2, 0x0, 0x1, 0x1}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r3, 0x8004745a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) syz_io_uring_setup(0x4b5, &(0x7f0000000100)={0x0, 0xf5c6, 0x400, 0x0, 0x10b}, &(0x7f0000ff0000), &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="8b36b11f738e416e07e1eb02818377dd3ccd0169895c8e93d1752fa82adde0b99bb5d029cc151362e94d86d68a9891fb71de7c1245b2f25447b4631d5818"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x218002}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x3, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0xfec4}]}, 0x34}}, 0x4004000) sendmsg$tipc(r6, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 0s ago: executing program 0 (id=203): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.231' (ED25519) to the list of known hosts. [ 26.096226][ T6515] cgroup: Unknown subsys name 'net' [ 26.244200][ T6515] cgroup: Unknown subsys name 'cpuset' [ 26.246412][ T6515] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 26.381721][ T6515] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 27.644008][ T6527] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 27.646002][ T6527] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 27.647699][ T6527] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 27.666658][ T6536] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 27.667078][ T6536] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 27.667259][ T6536] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 27.667615][ T6536] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 27.667812][ T6536] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 27.668015][ T6536] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 27.668223][ T6536] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 27.668458][ T6536] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 27.668859][ T6536] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 27.669339][ T6536] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 27.669550][ T6536] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 27.669812][ T6536] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 27.670004][ T6536] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 27.670739][ T6536] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 27.671376][ T6536] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 27.671696][ T6536] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 27.671884][ T6536] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 27.674618][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 27.677311][ T6527] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 27.682428][ T6527] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 27.687425][ T6539] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 27.690073][ T6527] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 27.848293][ T6533] chnl_net:caif_netlink_parms(): no params data found [ 27.868741][ T6530] chnl_net:caif_netlink_parms(): no params data found [ 27.889017][ T6526] chnl_net:caif_netlink_parms(): no params data found [ 27.920835][ T6525] chnl_net:caif_netlink_parms(): no params data found [ 27.924854][ T6533] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.925225][ T6533] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.925297][ T6533] bridge_slave_0: entered allmulticast mode [ 27.925744][ T6533] bridge_slave_0: entered promiscuous mode [ 27.939031][ T6533] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.939081][ T6533] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.939150][ T6533] bridge_slave_1: entered allmulticast mode [ 27.939578][ T6533] bridge_slave_1: entered promiscuous mode [ 27.957816][ T6530] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.957854][ T6530] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.957908][ T6530] bridge_slave_0: entered allmulticast mode [ 27.958343][ T6530] bridge_slave_0: entered promiscuous mode [ 27.958886][ T6530] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.958902][ T6530] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.958971][ T6530] bridge_slave_1: entered allmulticast mode [ 27.959344][ T6530] bridge_slave_1: entered promiscuous mode [ 27.976008][ T6533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.987082][ T6530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.989557][ T6530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.996295][ T6533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.009198][ T6530] team0: Port device team_slave_0 added [ 28.009355][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.011629][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.013208][ T6526] bridge_slave_0: entered allmulticast mode [ 28.013640][ T6526] bridge_slave_0: entered promiscuous mode [ 28.014343][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.014359][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.014402][ T6526] bridge_slave_1: entered allmulticast mode [ 28.014791][ T6526] bridge_slave_1: entered promiscuous mode [ 28.022570][ T6530] team0: Port device team_slave_1 added [ 28.024362][ T6534] chnl_net:caif_netlink_parms(): no params data found [ 28.034200][ T6533] team0: Port device team_slave_0 added [ 28.050230][ T6526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.052543][ T6533] team0: Port device team_slave_1 added [ 28.058794][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.059949][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.062838][ T6530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.063799][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.063807][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.063822][ T6530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.074310][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.075529][ T6525] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.076769][ T6525] bridge_slave_0: entered allmulticast mode [ 28.078120][ T6525] bridge_slave_0: entered promiscuous mode [ 28.080497][ T6526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.091094][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.092305][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.093911][ T6533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.098446][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.099663][ T6525] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.100832][ T6525] bridge_slave_1: entered allmulticast mode [ 28.102170][ T6525] bridge_slave_1: entered promiscuous mode [ 28.111496][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.111893][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.111911][ T6533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.118912][ T6530] hsr_slave_0: entered promiscuous mode [ 28.119254][ T6530] hsr_slave_1: entered promiscuous mode [ 28.125684][ T6526] team0: Port device team_slave_0 added [ 28.139177][ T6526] team0: Port device team_slave_1 added [ 28.156555][ T6525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.157484][ T6525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.165595][ T6534] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.165691][ T6534] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.165758][ T6534] bridge_slave_0: entered allmulticast mode [ 28.166195][ T6534] bridge_slave_0: entered promiscuous mode [ 28.166949][ T6534] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.166966][ T6534] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.167012][ T6534] bridge_slave_1: entered allmulticast mode [ 28.167395][ T6534] bridge_slave_1: entered promiscuous mode [ 28.168974][ T6533] hsr_slave_0: entered promiscuous mode [ 28.169246][ T6533] hsr_slave_1: entered promiscuous mode [ 28.169447][ T6533] debugfs: 'hsr0' already exists in 'hsr' [ 28.169488][ T6533] Cannot create hsr debugfs directory [ 28.183532][ T6525] team0: Port device team_slave_0 added [ 28.185302][ T6525] team0: Port device team_slave_1 added [ 28.186791][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.186812][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.186827][ T6526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.187758][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.187764][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.187775][ T6526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.196048][ T6534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.210946][ T6534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.220659][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.220685][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.220707][ T6525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.221287][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.221300][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.221317][ T6525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.254571][ T6534] team0: Port device team_slave_0 added [ 28.268859][ T6534] team0: Port device team_slave_1 added [ 28.277956][ T6526] hsr_slave_0: entered promiscuous mode [ 28.278276][ T6526] hsr_slave_1: entered promiscuous mode [ 28.278468][ T6526] debugfs: 'hsr0' already exists in 'hsr' [ 28.278479][ T6526] Cannot create hsr debugfs directory [ 28.292508][ T6525] hsr_slave_0: entered promiscuous mode [ 28.294239][ T6525] hsr_slave_1: entered promiscuous mode [ 28.295468][ T6525] debugfs: 'hsr0' already exists in 'hsr' [ 28.296488][ T6525] Cannot create hsr debugfs directory [ 28.304635][ T6534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.304666][ T6534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.304683][ T6534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.305339][ T6534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.305347][ T6534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.305359][ T6534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.368341][ T6534] hsr_slave_0: entered promiscuous mode [ 28.369744][ T6534] hsr_slave_1: entered promiscuous mode [ 28.370893][ T6534] debugfs: 'hsr0' already exists in 'hsr' [ 28.371969][ T6534] Cannot create hsr debugfs directory [ 28.396543][ T6530] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.400213][ T6530] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.414339][ T6530] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.416729][ T6530] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.458077][ T6530] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.458124][ T6530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.458300][ T6530] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.458363][ T6530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.463967][ T6533] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.465465][ T6533] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.471207][ T6533] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.474575][ T6533] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.490083][ T6533] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.490131][ T6533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.490206][ T6533] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.490239][ T6533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.501279][ T6526] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.506141][ T6526] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.508374][ T6526] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.512682][ T6526] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.530861][ T6533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.535630][ T6530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.539160][ T6530] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.555846][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.557237][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.585173][ T6525] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.591791][ T6533] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.593771][ T6525] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.596796][ T6525] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.600702][ T6525] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.607970][ T6526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.617246][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.617293][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.617737][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.617756][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.635498][ T6533] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.637257][ T6533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.644315][ T6526] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.666112][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.666173][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.668024][ T6534] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.688095][ T6534] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.691332][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.691385][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.699159][ T6534] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.711709][ T6525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.717507][ T6534] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.724266][ T6533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.735359][ T6525] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.746249][ T6526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.756663][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.756782][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.772332][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.772374][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.796359][ T6530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.799747][ T6534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.801391][ T6533] veth0_vlan: entered promiscuous mode [ 28.820709][ T6534] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.824349][ T6533] veth1_vlan: entered promiscuous mode [ 28.825922][ T6525] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.825963][ T6525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.836874][ T6533] veth0_macvtap: entered promiscuous mode [ 28.840030][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.840071][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.845033][ T6526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.855211][ T6533] veth1_macvtap: entered promiscuous mode [ 28.857290][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.857327][ T345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.879609][ T6533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.884837][ T6530] veth0_vlan: entered promiscuous mode [ 28.887378][ T6530] veth1_vlan: entered promiscuous mode [ 28.908248][ T6533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.909789][ T6530] veth0_macvtap: entered promiscuous mode [ 28.910821][ T6530] veth1_macvtap: entered promiscuous mode [ 28.916786][ T6526] veth0_vlan: entered promiscuous mode [ 28.919249][ T6526] veth1_vlan: entered promiscuous mode [ 28.923216][ T6525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.931502][ T6530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.937839][ T6526] veth0_macvtap: entered promiscuous mode [ 28.939487][ T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.941574][ T42] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.943511][ T42] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.944914][ T42] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.955744][ T6526] veth1_macvtap: entered promiscuous mode [ 28.959947][ T6530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.971027][ T345] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.971106][ T345] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.971132][ T345] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.971146][ T345] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.971974][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.975858][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.993770][ T14] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.993817][ T14] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.993836][ T14] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.993851][ T14] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.032359][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.032395][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.050220][ T6525] veth0_vlan: entered promiscuous mode [ 29.059072][ T6534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.071581][ T6525] veth1_vlan: entered promiscuous mode [ 29.076196][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.077554][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.086341][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.086376][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.102060][ T6525] veth0_macvtap: entered promiscuous mode [ 29.105500][ T6525] veth1_macvtap: entered promiscuous mode [ 29.108292][ T345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.108327][ T345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.118604][ T345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.118638][ T345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.129494][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.139188][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.143986][ T345] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.144683][ T345] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.145835][ T345] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.146348][ T345] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.160039][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.160072][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.172395][ T6533] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.189971][ T6534] veth0_vlan: entered promiscuous mode [ 29.205422][ T6534] veth1_vlan: entered promiscuous mode [ 29.212079][ T6534] veth0_macvtap: entered promiscuous mode [ 29.216199][ T6534] veth1_macvtap: entered promiscuous mode [ 29.234219][ T6534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.237153][ T6534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.237530][ T31] audit: type=1326 audit(29.210:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6641 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f15c068 code=0x7ffc0000 [ 29.237561][ T31] audit: type=1326 audit(29.210:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6641 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f15c068 code=0x7ffc0000 [ 29.237578][ T31] audit: type=1326 audit(29.210:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6641 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8f15c068 code=0x7ffc0000 [ 29.237594][ T31] audit: type=1326 audit(29.210:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6641 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f15c068 code=0x7ffc0000 [ 29.237610][ T31] audit: type=1326 audit(29.210:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6641 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f15c068 code=0x7ffc0000 [ 29.251620][ T31] audit: type=1326 audit(29.210:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6641 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8f15a594 code=0x7ffc0000 [ 29.251646][ T31] audit: type=1326 audit(29.210:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6641 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f15c068 code=0x7ffc0000 [ 29.253581][ T31] audit: type=1326 audit(29.220:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6641 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f15c068 code=0x7ffc0000 [ 29.253598][ T31] audit: type=1326 audit(29.220:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6641 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8f15c068 code=0x7ffc0000 [ 29.253611][ T31] audit: type=1326 audit(29.220:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6641 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f15c068 code=0x7ffc0000 [ 29.308686][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.308721][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.318924][ T345] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.318958][ T345] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.318976][ T345] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.318989][ T345] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.356437][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.358050][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.603300][ T6654] netlink: 'syz.1.2': attribute type 4 has an invalid length. [ 29.603394][ T6654] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2'. [ 29.763239][ T6536] Bluetooth: hci2: command tx timeout [ 29.764691][ T6536] Bluetooth: hci4: command tx timeout [ 29.764834][ T6536] Bluetooth: hci0: command tx timeout [ 29.765676][ T6527] Bluetooth: hci1: command tx timeout [ 29.851796][ T6539] Bluetooth: hci3: command tx timeout [ 30.294410][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.294449][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.379100][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.379131][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.547630][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 30.547671][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 30.616833][ T6691] vhci_hcd: invalid port number 96 [ 30.616869][ T6691] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 31.351766][ T6713] loop0: detected capacity change from 0 to 2048 [ 31.379041][ T6713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.454134][ T6720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.31'. [ 31.469737][ T6533] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.574676][ T6728] netlink: 332 bytes leftover after parsing attributes in process `syz.0.32'. [ 31.574725][ T6728] netlink: 'syz.0.32': attribute type 9 has an invalid length. [ 31.574733][ T6728] netlink: 108 bytes leftover after parsing attributes in process `syz.0.32'. [ 31.574741][ T6728] netlink: 32 bytes leftover after parsing attributes in process `syz.0.32'. [ 31.600065][ T6733] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 31.605832][ T6733] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 31.617584][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.39'. [ 31.784832][ T6120] Bluetooth: hci1: command tx timeout [ 31.784949][ T6120] Bluetooth: hci0: command tx timeout [ 31.784984][ T6120] Bluetooth: hci4: command tx timeout [ 31.785001][ T6120] Bluetooth: hci2: command tx timeout [ 31.852566][ T6761] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 31.862914][ T6539] Bluetooth: hci3: command tx timeout [ 31.867338][ T6761] FAT-fs (loop9): unable to read boot sector [ 31.977027][ T6773] ======================================================= [ 31.977027][ T6773] WARNING: The mand mount option has been deprecated and [ 31.977027][ T6773] and is ignored by this kernel. Remove the mand [ 31.977027][ T6773] option from the mount to silence this warning. [ 31.977027][ T6773] ======================================================= [ 32.027634][ T6775] loop3: detected capacity change from 0 to 1024 [ 32.063842][ T6775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.078894][ T6775] EXT4-fs error (device loop3): ext4_empty_dir:3109: inode #11: block 623: comm syz.3.57: Attempting to read directory block (623) that is past i_size (638464) [ 32.079413][ T6775] EXT4-fs (loop3): Remounting filesystem read-only [ 32.104557][ T6525] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.320472][ T6800] loop3: detected capacity change from 0 to 512 [ 32.330314][ T6800] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 32.332592][ T6800] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 32.332659][ T6800] System zones: 1-12 [ 32.334683][ T6800] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.65: corrupted in-inode xattr: e_value size too large [ 32.335085][ T6800] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.65: couldn't read orphan inode 15 (err -117) [ 32.342533][ T6800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.579596][ T6525] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.630591][ T6815] loop3: detected capacity change from 0 to 1024 [ 32.630956][ T6815] EXT4-fs: Ignoring removed oldalloc option [ 32.630968][ T6815] EXT4-fs: Ignoring removed bh option [ 32.647414][ T6815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.662045][ T6815] EXT4-fs (loop3): shut down requested (2) [ 32.677999][ T6525] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.717151][ T6824] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 33.078716][ T6857] loop0: detected capacity change from 0 to 512 [ 33.084697][ T6857] EXT4-fs: Ignoring removed oldalloc option [ 33.087166][ T6857] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.087190][ T6857] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 33.099881][ T6857] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.104285][ T6857] EXT4-fs (loop0): 1 truncate cleaned up [ 33.106234][ T6857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.126133][ T6533] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.374575][ T6868] loop1: detected capacity change from 0 to 1024 [ 33.376528][ T6868] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.380906][ T6868] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 33.390613][ T6868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.424443][ T6526] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.492154][ T6871] netlink: 16 bytes leftover after parsing attributes in process `syz.1.96'. [ 33.520611][ T6873] loop3: detected capacity change from 0 to 128 [ 33.522566][ T6873] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 33.526274][ T6873] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 33.589419][ T6881] loop3: detected capacity change from 0 to 164 [ 33.625667][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'. [ 33.640733][ T6881] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 33.653151][ T6882] process 'syz.1.101' launched './file1' with NULL argv: empty string added [ 33.672069][ T6884] loop3: detected capacity change from 0 to 1024 [ 33.673653][ T6884] EXT4-fs: Ignoring removed nobh option [ 33.706009][ T6884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.806895][ T6525] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.850046][ T6891] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 33.862953][ T6539] Bluetooth: hci2: command tx timeout [ 33.862992][ T6539] Bluetooth: hci4: command tx timeout [ 33.863023][ T6539] Bluetooth: hci0: command tx timeout [ 33.863037][ T6539] Bluetooth: hci1: command tx timeout [ 33.942770][ T6120] Bluetooth: hci3: command tx timeout [ 34.298868][ T6911] syz.0.114 uses obsolete (PF_INET,SOCK_PACKET) [ 34.368639][ T6916] mmap: syz.0.116 (6916) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.603023][ T6938] netlink: 'syz.0.126': attribute type 30 has an invalid length. [ 34.705017][ T6938] Zero length message leads to an empty skb [ 34.836658][ T6942] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.080607][ T6971] loop0: detected capacity change from 0 to 1024 [ 35.097404][ T6971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.118716][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'. [ 35.121149][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'. [ 35.125028][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'. [ 35.126858][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'. [ 35.147077][ T6533] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.218403][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.143'. [ 35.218468][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.143'. [ 35.225427][ T6989] netlink: 212 bytes leftover after parsing attributes in process `syz.0.142'. [ 35.330122][ T7002] loop3: detected capacity change from 0 to 2048 [ 35.346393][ T7002] loop3: p1 < > p4 [ 35.356899][ T7002] loop3: p4 size 8388608 extends beyond EOD, truncated [ 35.368539][ T7012] netlink: 332 bytes leftover after parsing attributes in process `syz.0.149'. [ 35.372622][ T6167] loop3: p1 < > p4 [ 35.373853][ T6167] loop3: p4 size 8388608 extends beyond EOD, truncated [ 35.440027][ T6544] udevd[6544]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 35.456030][ T6517] udevd[6517]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 35.489761][ T6517] udevd[6517]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 35.496219][ T6544] udevd[6544]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 35.606020][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.160'. [ 35.608460][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.160'. [ 35.756805][ T7018] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.777051][ T31] kauditd_printk_skb: 104 callbacks suppressed [ 35.777087][ T31] audit: type=1326 audit(35.750:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f5c068 code=0x7ffc0000 [ 35.783559][ T31] audit: type=1326 audit(35.760:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=231 compat=0 ip=0xffff86f5c068 code=0x7ffc0000 [ 35.787175][ T31] audit: type=1326 audit(35.760:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f5c068 code=0x7ffc0000 [ 35.790570][ T31] audit: type=1326 audit(35.760:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff86f5c068 code=0x7ffc0000 [ 35.790664][ T31] audit: type=1326 audit(35.760:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f5c068 code=0x7ffc0000 [ 35.797275][ T31] audit: type=1326 audit(35.770:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff86f5c068 code=0x7ffc0000 [ 35.797401][ T31] audit: type=1326 audit(35.770:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f5c068 code=0x7ffc0000 [ 35.805265][ T31] audit: type=1326 audit(35.780:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f5c068 code=0x7ffc0000 [ 35.805359][ T31] audit: type=1326 audit(35.780:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=216 compat=0 ip=0xffff86f5c068 code=0x7ffc0000 [ 35.805427][ T31] audit: type=1326 audit(35.780:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f5c068 code=0x7ffc0000 [ 35.869912][ T7018] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.943494][ T6120] Bluetooth: hci1: command tx timeout [ 35.943538][ T6120] Bluetooth: hci0: command tx timeout [ 35.943555][ T6120] Bluetooth: hci4: command tx timeout [ 35.943570][ T6120] Bluetooth: hci2: command tx timeout [ 35.964135][ T7018] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.022913][ T6539] Bluetooth: hci3: command tx timeout [ 36.079552][ T7018] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.255806][ T345] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.255849][ T345] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.262431][ T345] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.262470][ T345] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.778942][ T7104] atomic_op 00000000da6f523d conn xmit_atomic 0000000000000000 [ 36.832574][ T7109] loop3: detected capacity change from 0 to 128 [ 36.948897][ T7124] vxcan1: tx address claim with dlc 0 [ 37.165495][ T7141] loop0: detected capacity change from 0 to 512 [ 37.175820][ T7141] EXT4-fs warning (device loop0): ext4_xattr_inode_get:542: inode #11: comm syz.0.203: ea_inode file size=0 entry size=6 [ 37.178264][ T7141] ------------[ cut here ]------------ [ 37.178295][ T7141] EA inode 11 i_nlink=2 [ 37.179469][ T7141] WARNING: CPU: 1 PID: 7141 at fs/ext4/xattr.c:1053 ext4_xattr_inode_update_ref+0x444/0x488 [ 37.181678][ T7141] Modules linked in: [ 37.182258][ T7141] CPU: 1 UID: 0 PID: 7141 Comm: syz.0.203 Not tainted syzkaller #0 PREEMPT [ 37.183683][ T7141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 37.185310][ T7141] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 37.186603][ T7141] pc : ext4_xattr_inode_update_ref+0x444/0x488 [ 37.187606][ T7141] lr : ext4_xattr_inode_update_ref+0x444/0x488 [ 37.188764][ T7141] sp : ffff80009f1e6f80 [ 37.189482][ T7141] x29: ffff80009f1e7000 x28: 0000000000000000 x27: 1fffe0001e91fb53 [ 37.190788][ T7141] x26: dfff800000000000 x25: ffff80009f1e6f80 x24: ffff700013e3cdf0 [ 37.192012][ T7141] x23: ffff800092e12000 x22: ffff0000f48fd8e8 x21: 0000000000000002 [ 37.193384][ T7141] x20: 0000000000000001 x19: ffff0000f48fd8a8 x18: 1fffe0003379be88 [ 37.194685][ T7141] x17: ffff80008f7de000 x16: ffff80008b0155d8 x15: 0000000000000001 [ 37.195987][ T7141] x14: 1fffe0001acb3b90 x13: 0000000000000000 x12: 0000000000000000 [ 37.197238][ T7141] x11: 0000000000080000 x10: 0000000000000003 x9 : b7778e8bf8841b00 [ 37.198497][ T7141] x8 : b7778e8bf8841b00 x7 : ffff800080490a90 x6 : 0000000000000000 [ 37.199759][ T7141] x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff800080483024 [ 37.201038][ T7141] x2 : 0000000000000001 x1 : ffff80008b668440 x0 : 0000000000000001 [ 37.202397][ T7141] Call trace: [ 37.202882][ T7141] ext4_xattr_inode_update_ref+0x444/0x488 (P) [ 37.203838][ T7141] ext4_xattr_inode_dec_ref_all+0x76c/0xbfc [ 37.204773][ T7141] ext4_xattr_delete_inode+0x8b0/0xa40 [ 37.205547][ T7141] ext4_evict_inode+0xb98/0x1084 [ 37.206323][ T7141] evict+0x414/0x928 [ 37.206897][ T7141] iput+0x6e4/0x83c [ 37.207493][ T7141] ext4_process_orphan+0x240/0x2b4 [ 37.208259][ T7141] ext4_orphan_cleanup+0x930/0x107c [ 37.209069][ T7141] ext4_fill_super+0x4724/0x4ea4 [ 37.209821][ T7141] get_tree_bdev_flags+0x360/0x414 [ 37.210637][ T7141] get_tree_bdev+0x2c/0x3c [ 37.211319][ T7141] ext4_get_tree+0x28/0x38 [ 37.211962][ T7141] vfs_get_tree+0x90/0x28c [ 37.212563][ T7141] do_new_mount+0x278/0x7f4 [ 37.213243][ T7141] path_mount+0x5b4/0xde0 [ 37.213869][ T7141] __arm64_sys_mount+0x3e8/0x468 [ 37.214573][ T7141] invoke_syscall+0x98/0x2b8 [ 37.215302][ T7141] el0_svc_common+0x130/0x23c [ 37.216016][ T7141] do_el0_svc+0x48/0x58 [ 37.216703][ T7141] el0_svc+0x5c/0x254 [ 37.217308][ T7141] el0t_64_sync_handler+0x84/0x12c [ 37.218097][ T7141] el0t_64_sync+0x198/0x19c [ 37.218862][ T7141] irq event stamp: 2242 [ 37.219538][ T7141] hardirqs last enabled at (2241): [] finish_lock_switch+0xb0/0x1c0 [ 37.221100][ T7141] hardirqs last disabled at (2242): [] el1_brk64+0x20/0x54 [ 37.222536][ T7141] softirqs last enabled at (2008): [] handle_softirqs+0xaf8/0xc88 [ 37.223974][ T7141] softirqs last disabled at (1837): [] __do_softirq+0x14/0x20 [ 37.225448][ T7141] ---[ end trace 0000000000000000 ]--- [ 37.227658][ T7141] EXT4-fs (loop0): 1 orphan inode deleted [ 37.229089][ T7141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.239243][ T6533] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.