last executing test programs: 1m10.217177574s ago: executing program 2 (id=52): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000440)=ANY=[], 0x8) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x24000800, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1001a, &(0x7f0000000240)={[{@jqfmt_vfsv1}, {@resuid={'resuid', 0x3d, 0xee01}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000000940)="$eJzs20tvG0UcAPD/rpOUvkgo5dEHECiIiEfSpAV64AICiQsSEhzKMSRpFeI2qAkSrSIICHFFlbgjjkh8Ak5wQcAJiSsfAFWqUC4tnIzW3k1sx3k4deKCfz9pk5ndcWb+3hl7dicbQM8azn4kEYci4o+IGKxlGwsM137dXlma+ntlaSqJSuXtv5JquVsrS1NF0eJ1B/PMSBqRfp7EiRb1Lly9NjdZLs9cyfNji5c+GFu4eu352UuTF2cuzlyeOHfu7Jnxl16ceKEjcWZtunX84/mTx9549/qbU+evv/fLd0kRf1McHTK82cGnKpUOV9ddh+vSSV8XG0JbShGRna7+6vgfjFKsnbzBeP2zrjYO2FWVSqVycOPDyxXgfyyJbrcA6I7iiz67/i22PZp63BVuvlK7AMrivp1vtSN9keZl+puubztpOCLOL//zdbbF7tyHAABo8EM2/3mu1fwvjQfryt2brw0NRcR9EXEkIu6PiKMR8UBEtexDEfFwm/U3L5Ksn/+kN3YU2DZl87+X87WtxvlfMfuLoVKeO1yNvz+5MFueOZ2/JyPRvy/Lj29Sx4+v/f7lRsfq53/ZltVfzAXzdtzo29f4munJxck7ibnezU8jjve1ij9ZXQlIIuJYRBzfYR2zz3x7cqNjW8e/iQ6sM1W+iXi6dv6Xoyn+QrL5+uTYPVGeOT1W9Ir1fv3ti7c2qv+O4u+A7PwfaNn/V+MfSurXaxfa+/v7tji+0/4/kLxTTQ/k+z6aXFy8Mh4xMNfYKar7J9bni/JZ/COnWo//I7H2TpyIiKwTPxIRj0bEY3nbH4+IJyLi1CYx/vzqk+/vPP7dlcU/3db5X0sMRPOe1onS3E/fN1Q61E782fk/W02N5Hu28/m3nXa135sBAADgvymNiEORpKOr6TQdHa39v/zROJCW5xcWn70w/+Hl6dozAkPRnxZ3ugbr7oeO55f1RX6iKX8mv2/8VWl/NT86NV+e7nbw0OMObjD+M3+Wut06YNd5Xgt6l/EPvcv4h95l/EPvajH+93ejHcDea/X9/0kX2gHsvabxb9kPeojrf+hdxj/0LuMfetLC/tj6IXkJiXWJSO+KZkjsUqLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//9Oa5Js=") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x4}, 0x18) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setpriority(0x3, 0x0, 0xfffffffd) r3 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x800000009) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe46a}, 0x94) connect$unix(r3, &(0x7f0000000400)=@file={0x1, './bus\x00'}, 0x6e) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='rxrpc_recvmsg\x00', r5, 0x0, 0x4f}, 0x18) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4) 1m6.125265242s ago: executing program 2 (id=65): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1m3.831301771s ago: executing program 2 (id=72): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x24}}, 0x0) 1m3.540592437s ago: executing program 2 (id=74): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000100)="89e7ee2c21fe62a3b47380c988ca4b5ed95f5ee4142df6640b27", 0xfdef}], 0x1) 1m1.490909783s ago: executing program 2 (id=79): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) 1m1.223487158s ago: executing program 2 (id=80): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x88, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'erspan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44}, 0x810) 45.03528486s ago: executing program 32 (id=80): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x88, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'erspan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44}, 0x810) 11.283442528s ago: executing program 0 (id=292): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 9.788844336s ago: executing program 0 (id=297): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0xe) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0xffa4, 0x20}, 0x5000) 9.509792539s ago: executing program 0 (id=299): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000440)={0x42, 0x3, 0x2}, 0x10) 9.350158865s ago: executing program 0 (id=300): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x18) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x40000000, 0x0, 0x3}, 0x8}) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x104, 0x0, 0x12, 0x0, 0x2, @remote}, 0x10) r9 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r8, 0x5411, &(0x7f0000000500)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000480)={0x732, 0x0, 0x5, 0x7, 0x2, 0x4}) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000180)={@private1={0xfc, 0x1, '\x00', 0xfd}, 0x7fffffd, 0x0, 0x3, 0x1, 0xfffc}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x3, 0x0, 0x0, 0x600}, 0x20) sendmsg$key(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="020303020a0000002ba57000fedbdf25080012000000010000000000ff0f000006002b00030200000800000000000000fe8000000000000000000000000000bbff0200"/78, @ANYRES32=r2, @ANYBLOB="e89bfb67d89d13c9f92456613a47f2a22d55c0e4cef30f3c57d6e0cc463bf7eafd2a30f5a71605aedeacd7f7b47bc8c752de0b0625191e44f9e56dd87b109ba167740f3fa6b327a8e8692bfce66511729b08619df92440f1a5206261851d935f5e81b566a759b5300170397bce7c17eaa3260e5683b5c388fa467f39d08a3d97aae2276da4494184d5088ba7a740514e3a7d869cdf5070e430d3709284e866b1abb7f6a8dd37b1564c", @ANYRESOCT=r8, @ANYRES64=r9, @ANYBLOB="d96c06c01d71a34d0264647a1ae115f008a78b06341a7c66d7c64bc93dae8eb25d5cfdc0d20e0745074b85ed9e04d3c1b3ad31f6fbf2cb50bde752ea588d3817276f2b53772b56bb081ec68bc5a87870885ed927611eb65da94f8acfda713dfa6848d4ac05ee02db1d1ad64da942d94c6cde3e4d38736e4968ccce8b26dff5", @ANYRES8=r7, @ANYRESOCT=r6, @ANYRESDEC=r5, @ANYRES16=r3, @ANYRES32=r7], 0x50}}, 0x8005) close_range(r9, 0xffffffffffffffff, 0x0) 7.371108656s ago: executing program 3 (id=309): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="796104000000000000007e"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setownex(r4, 0xf, &(0x7f0000001c80)={0x1, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1, 0xd}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0x94) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r8, 0x2000000a}}, 0x10) 6.983828306s ago: executing program 5 (id=312): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000980)='mm_page_free\x00', r0, 0x0, 0x9}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) 6.677934835s ago: executing program 5 (id=313): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(r0, 0x3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) listen(r4, 0x18c) 6.329781875s ago: executing program 3 (id=316): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002d0001002dbd7000ffdbdf2508000d00", @ANYRES32], 0x38}], 0x1, 0x0, 0x0, 0x20004880}, 0xc000) 6.001562873s ago: executing program 3 (id=317): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000800), 0x183001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x1100, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 3.203711772s ago: executing program 1 (id=327): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="796104000000000000007e"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setownex(r4, 0xf, &(0x7f0000001c80)={0x1, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1, 0xd}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0x94) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r8, 0x2000000a}}, 0x10) 2.959788991s ago: executing program 5 (id=328): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) statx(0xffffffffffffffff, 0x0, 0x400, 0x80, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040041}, 0x0) r2 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x1000, 0xd703}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mknodat$loop(r2, 0x0, 0x4, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x83, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000001, 0x3032, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10) 2.344260338s ago: executing program 4 (id=330): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 2.220064243s ago: executing program 5 (id=331): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.16755712s ago: executing program 1 (id=332): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c}}], 0x20}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, 0x0) 2.087141511s ago: executing program 6 (id=154): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usbip_server_init(0x1) 2.027346862s ago: executing program 4 (id=333): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) sendmsg$inet6(r0, 0x0, 0x20008814) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f00000014c0)={@local, @random="e462e98700", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x6c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x10, 0x7, 0x0, 0xe7, {[@mptcp=@remove_addr={0x1e, 0x41, 0x2, 0x0, "88391a84ed441d2486917d411bdd858b3945eb7b104049c25287cdf6564600b902e2e7d74b3c7698494b8b50fa2b86bdbac1834970ce2e08de17956124b8"}]}}}}}}}, 0x0) 1.988752651s ago: executing program 5 (id=334): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) flock(r2, 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x80, 0x18) capset(&(0x7f0000000340)={0x19980330}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r5, 0x0, 0x0, 0x800) lseek(r4, 0x3, 0x0) getdents(r4, 0x0, 0x58) r6 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x8003, 0x1000}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0x70bd25, 0xfffffffe}, 0x18}, 0x1, 0x0, 0x0, 0x20000}, 0x40040d0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x6e2, 0x600, 0x1, 0x0, 0x0) 1.95667708s ago: executing program 1 (id=335): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1, 0x4) vmsplice(r1, 0x0, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x402000, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x16a86804a7f73996, &(0x7f00000000c0)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'ext3\x00'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}]}, 0x6, 0x642, &(0x7f0000000300)="$eJzs3U1oG1ceAPD/SLZjO951sizLJrCsIYcEljh2Nmx299I0PTSHHgLNoZRSYmI7NVE+iB1o3EBt6KGFFkrptZRQKPTce8m9t1Joe+u5kJaS0kJbojKjUSLLkr9iSbbn94OR3rwZ6b2/Rk/zZsbPE0BhjaUPpYhDEQ8vJhGjDctGorZwLF/vwY93LqVTEtXq8z8kkeR59fWT/Hl/PjMYEV+cjfhLeXW587cXr0xVqjWvR5xYuHrjxPztxeNzV6cuz1yeuTZ58r+nTk/8b/LU5LbEuT9/3hcR77zxyn9mv6wcT+JMXOh/bTqa4tguYzEWD/MQG/P7IuJ0mmjxuew2eyCEQivn38f+iPhbjEY5m6sZjbm3e1o5oKOq5YgqUFDJZtt/2kGopz9Z9PMBu1a9H1A/tt/YcfCFDvdKuuf+07UDoNXx99XOjcRgdmw0/CBpODKqnds4sA3lp2X8fufwB+kUK85D/PJo6/RtQzntLC1HxN9bxZ9kdTuQRZrGX1pRjyQiJiJiIK/fM09Qh6Qh3YnzMGvZavyliDiTP6f5Z7dY/ljTfLfjB6CYsn1vuiNfShOP939p36Pe/4kW/Z+RFvuurej1/q99/6++vx/MzpGXmvph6ed2vvVb9jdnfPvWuffald/Y/0untPx6X7Ab7i9HHG6K/8002Lz/k8aftNj+6SoXz2ysjGe/+v5cu2W9jr96N+Joy+Ofx73SNLXG9ckTs3OVmYnaY8syPvv8pY/bld/r+NPtP9wm/obtX2p+XfqZ3NhgGZ+ev3u13bKReHmd+EvfDSS1482B7PGj4VenFhZuTkYMJM/lq9SesvyTa9elvk79PdL4jx1p3f5XfP+XV77PUP0ncwNuvHDlQbtljds/SWr1WG/7N1xMfljdYB3aSeOfXn/7r2r/ad67Gyzj5xdv/aPdsrW+/0NPEhgAAAAAAAAUUCm7BpuUxh+lS6Xx8dp42b/GcKlyfX7hX7PXb12bjjiW/T1kf6l+pXu0Np+k85P538PW5082zf87Ig5GxPvloWx+/NL1ynSvgwcAAAAAAAAAAAAAAAAAAIAdYn8+/r9+n+qfyrXx/0BBdPIGc8DOpv1DcWXtf9UtnoAiaLf/n+9yPYDu0/+H4tL+obi0fygu7R+KS/uH4tL+obi0fwAAAADYkw7+8943SUQs/X8om1ID+TIjgmBv619vhYHu1APovnKvKwD0zKNL/zr7UDjr9v9Tv+b/HLDz1QF6IGmVmXUOqms3/nsrXulwAgAAAAAAAAAAAAA66OihhvH/wyvH/29obACwa21i2N9yJ+sBdN8TDNgx1gd2Of/6H4pry8f4g9tbD6B3Wo7/b9C2ud9b75WbLQkAAAAAAAAAAAAAaGckm5LSeD4WeCRKpfHxiD9FxIHoT2bnKjMTEfHniPi63L8vnZ/sdaUBAAAAAAAAAAAAAAAAAABgj5m/vXhlqlKZudmY+G1Vzt5O1O+C2oWynopNviqS7n8sQxHR843SsURfQ04SsZRu+R1RsZvzsTOqkSV6/MMEAAAAAAAAAAAAAAAAAAAF1DD2uLXDH3a5RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQfY/v/78ykazKaU4cab+oKdHrGAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA3emPAAAA//+y+jZu") umount2(&(0x7f00000002c0)='./file0\x00', 0x2) r2 = socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'}) socket$nl_route(0x10, 0x3, 0x0) open$dir(0x0, 0x10900, 0x152) sendmsg$nl_route(r0, 0x0, 0x14) 1.797848806s ago: executing program 4 (id=336): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) 1.729812252s ago: executing program 4 (id=337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a408799fffc0800034000000014540000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a310000000028000380240000800400018004000b800c000440000000000000000f0c00054008"], 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.641919474s ago: executing program 4 (id=338): socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r2, @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="8400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001"], 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084) 1.48981844s ago: executing program 4 (id=339): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(r0, 0x3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) listen(r4, 0x18c) 1.489052225s ago: executing program 1 (id=340): ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x20}, 0x15, 0x3, 'sed\x00', 0x23, 0x401, 0x4}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.293984623s ago: executing program 6 (id=341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x44, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 1.244152412s ago: executing program 1 (id=342): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) 1.048340274s ago: executing program 0 (id=343): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="796104000000000000007e"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setownex(r4, 0xf, &(0x7f0000001c80)={0x1, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1, 0xd}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0x94) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xef7, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x7, @empty, 0xbff}, @ib={0x1b, 0xf, 0xffa, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x2000000a}}, 0x10) 999.935872ms ago: executing program 5 (id=344): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) open_by_handle_at(r1, 0x0, 0x10b040) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f00000000c0)={0xfe, "da40e9044a70415fce6641fd75ff409d746f058b7b22543213c93d6ce45aa95e13c9c6410bf4878961f81db5dd236ff681b54866d4ca438a7a151f7adcb1ef9c"}) 897.486877ms ago: executing program 1 (id=345): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x3}}, 0xe8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="22cf330000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002080)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x20004800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x758e, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) 761.078587ms ago: executing program 6 (id=346): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 570.07805ms ago: executing program 3 (id=347): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c}}], 0x20}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, 0x0) 413.157297ms ago: executing program 6 (id=348): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000411, &(0x7f0000000f40)={[{@grpid}, {@grpquota}, {@test_dummy_encryption}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a"], 0x40}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0x20, &(0x7f0000000d40)={&(0x7f0000000b80)=""/156, 0x9c, 0x0, &(0x7f0000000c40)=""/217, 0xd9}}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1800700, &(0x7f00000004c0)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@resgid}, {@barrier}, {@nombcache}]}, 0x0, 0x47c, &(0x7f0000001040)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) 316.678537ms ago: executing program 3 (id=349): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) 65.77397ms ago: executing program 3 (id=350): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000800000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) close(0xffffffffffffffff) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 0s ago: executing program 0 (id=351): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="441f1f01", 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.48' (ED25519) to the list of known hosts. [ 101.477533][ T974] cfg80211: failed to load regulatory.db [ 101.747295][ T5808] cgroup: Unknown subsys name 'net' [ 101.859318][ T5808] cgroup: Unknown subsys name 'cpuset' [ 101.869180][ T5808] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 103.605592][ T5808] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 106.758542][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.766250][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.776154][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.785008][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.792804][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.802288][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 106.810252][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 106.817879][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.825437][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.834607][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.842029][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.843264][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 106.850847][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.864626][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.872094][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.881153][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.889661][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.897090][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 106.899590][ T5140] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.905445][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 106.912860][ T5140] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 106.927959][ T5140] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 106.928108][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 106.947239][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 106.947398][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 106.954712][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 106.981651][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 106.994744][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 107.002774][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 107.011097][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 107.922006][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 107.946826][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 108.178230][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 108.192756][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 108.297958][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 108.404719][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 108.418351][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.425631][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.433082][ T5827] bridge_slave_0: entered allmulticast mode [ 108.441513][ T5827] bridge_slave_0: entered promiscuous mode [ 108.469613][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.476842][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.484035][ T5829] bridge_slave_0: entered allmulticast mode [ 108.491849][ T5829] bridge_slave_0: entered promiscuous mode [ 108.526203][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.533360][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.540704][ T5827] bridge_slave_1: entered allmulticast mode [ 108.548629][ T5827] bridge_slave_1: entered promiscuous mode [ 108.577138][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.584352][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.591538][ T5829] bridge_slave_1: entered allmulticast mode [ 108.599429][ T5829] bridge_slave_1: entered promiscuous mode [ 108.735836][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.786076][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.795341][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.802570][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.809910][ T5828] bridge_slave_0: entered allmulticast mode [ 108.817659][ T5828] bridge_slave_0: entered promiscuous mode [ 108.836023][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.869583][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.879100][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.886977][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.894816][ T5828] bridge_slave_1: entered allmulticast mode [ 108.902378][ T5828] bridge_slave_1: entered promiscuous mode [ 108.939323][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.946574][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.954143][ T5830] bridge_slave_0: entered allmulticast mode [ 108.961878][ T5830] bridge_slave_0: entered promiscuous mode [ 109.005438][ T5841] Bluetooth: hci1: command tx timeout [ 109.005528][ T52] Bluetooth: hci0: command tx timeout [ 109.011082][ T5838] Bluetooth: hci2: command tx timeout [ 109.056749][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.063965][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.071500][ T5830] bridge_slave_1: entered allmulticast mode [ 109.077640][ T5838] Bluetooth: hci3: command tx timeout [ 109.077653][ T5841] Bluetooth: hci4: command tx timeout [ 109.080184][ T5830] bridge_slave_1: entered promiscuous mode [ 109.084397][ T5838] Bluetooth: hci5: command tx timeout [ 109.150878][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.158240][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.167559][ T5831] bridge_slave_0: entered allmulticast mode [ 109.175877][ T5831] bridge_slave_0: entered promiscuous mode [ 109.186016][ T5827] team0: Port device team_slave_0 added [ 109.192318][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.200577][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.207951][ T5831] bridge_slave_1: entered allmulticast mode [ 109.215668][ T5831] bridge_slave_1: entered promiscuous mode [ 109.236577][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.243810][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.251539][ T5826] bridge_slave_0: entered allmulticast mode [ 109.259274][ T5826] bridge_slave_0: entered promiscuous mode [ 109.268364][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.275881][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.283232][ T5826] bridge_slave_1: entered allmulticast mode [ 109.291046][ T5826] bridge_slave_1: entered promiscuous mode [ 109.300003][ T5829] team0: Port device team_slave_0 added [ 109.309039][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.320666][ T5827] team0: Port device team_slave_1 added [ 109.344906][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.371949][ T5829] team0: Port device team_slave_1 added [ 109.380720][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.439760][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.483275][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.556295][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.583878][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.594310][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.601256][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.627629][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.641491][ T5828] team0: Port device team_slave_0 added [ 109.648521][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.655554][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.681832][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.696681][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.723021][ T5830] team0: Port device team_slave_0 added [ 109.762670][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.769883][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.796405][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.810284][ T5828] team0: Port device team_slave_1 added [ 109.817158][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.824092][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.850896][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.878343][ T5830] team0: Port device team_slave_1 added [ 109.886462][ T5826] team0: Port device team_slave_0 added [ 109.933962][ T5831] team0: Port device team_slave_0 added [ 109.958913][ T5826] team0: Port device team_slave_1 added [ 109.999720][ T5831] team0: Port device team_slave_1 added [ 110.022430][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.030139][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.056731][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.083922][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.091096][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.117213][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.130329][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.137398][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.163664][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.205975][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.212936][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.239106][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.251479][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.258907][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.285340][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.358384][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.365507][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.391857][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.427989][ T5827] hsr_slave_0: entered promiscuous mode [ 110.435229][ T5827] hsr_slave_1: entered promiscuous mode [ 110.442647][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.449719][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.475801][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.493841][ T5829] hsr_slave_0: entered promiscuous mode [ 110.500539][ T5829] hsr_slave_1: entered promiscuous mode [ 110.506928][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 110.512795][ T5829] Cannot create hsr debugfs directory [ 110.561219][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.568441][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.594594][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.643588][ T5830] hsr_slave_0: entered promiscuous mode [ 110.651799][ T5830] hsr_slave_1: entered promiscuous mode [ 110.658223][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 110.663963][ T5830] Cannot create hsr debugfs directory [ 110.748287][ T5828] hsr_slave_0: entered promiscuous mode [ 110.755198][ T5828] hsr_slave_1: entered promiscuous mode [ 110.761442][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 110.768074][ T5828] Cannot create hsr debugfs directory [ 110.917332][ T5826] hsr_slave_0: entered promiscuous mode [ 110.923922][ T5826] hsr_slave_1: entered promiscuous mode [ 110.930388][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 110.936153][ T5826] Cannot create hsr debugfs directory [ 111.038544][ T5831] hsr_slave_0: entered promiscuous mode [ 111.045657][ T5831] hsr_slave_1: entered promiscuous mode [ 111.051939][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 111.057758][ T5831] Cannot create hsr debugfs directory [ 111.074345][ T5838] Bluetooth: hci2: command tx timeout [ 111.074394][ T5841] Bluetooth: hci0: command tx timeout [ 111.079927][ T52] Bluetooth: hci1: command tx timeout [ 111.154489][ T52] Bluetooth: hci5: command tx timeout [ 111.159943][ T52] Bluetooth: hci4: command tx timeout [ 111.171822][ T5838] Bluetooth: hci3: command tx timeout [ 111.673829][ T5829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 111.687708][ T5829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 111.721983][ T5829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 111.759410][ T5829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 111.821807][ T5830] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 111.833172][ T5830] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 111.852430][ T5830] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 111.863865][ T5830] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 111.963149][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 111.980339][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 111.993881][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 112.005721][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 112.122701][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 112.141339][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 112.168555][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.176130][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 112.188494][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 112.261858][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.300813][ T3520] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.308123][ T3520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.353046][ T3520] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.360285][ T3520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.387701][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.412962][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.437509][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.448964][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 112.460886][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.596310][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.630562][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.638411][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 112.652652][ T3520] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.659820][ T3520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.686889][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 112.700983][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 112.739321][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 112.769110][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.776427][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.877212][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.930562][ T3520] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.937789][ T3520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.988092][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.995276][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.036376][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.057819][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.103915][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.139089][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.154517][ T5838] Bluetooth: hci0: command tx timeout [ 113.154567][ T5841] Bluetooth: hci2: command tx timeout [ 113.160063][ T52] Bluetooth: hci1: command tx timeout [ 113.227745][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.235035][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.242707][ T52] Bluetooth: hci5: command tx timeout [ 113.249154][ T52] Bluetooth: hci4: command tx timeout [ 113.251788][ T5841] Bluetooth: hci3: command tx timeout [ 113.283668][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.342069][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.349277][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.399549][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.436178][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.443348][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.516005][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.523168][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.702222][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.723756][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.789326][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.885715][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.956296][ T3520] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.963486][ T3520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.062125][ T3520] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.069307][ T3520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.207658][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.317567][ T5829] veth0_vlan: entered promiscuous mode [ 114.399994][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.419944][ T5829] veth1_vlan: entered promiscuous mode [ 114.569640][ T5828] veth0_vlan: entered promiscuous mode [ 114.622787][ T5828] veth1_vlan: entered promiscuous mode [ 114.660575][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.672540][ T5829] veth0_macvtap: entered promiscuous mode [ 114.691366][ T5827] veth0_vlan: entered promiscuous mode [ 114.727341][ T5829] veth1_macvtap: entered promiscuous mode [ 114.737394][ T5827] veth1_vlan: entered promiscuous mode [ 114.801128][ T5830] veth0_vlan: entered promiscuous mode [ 114.841645][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.876945][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.907395][ T3520] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.919952][ T3520] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.930130][ T5828] veth0_macvtap: entered promiscuous mode [ 114.944448][ T5830] veth1_vlan: entered promiscuous mode [ 114.960746][ T3520] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.969617][ T3520] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.984115][ T5828] veth1_macvtap: entered promiscuous mode [ 115.005176][ T5826] veth0_vlan: entered promiscuous mode [ 115.030539][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.046256][ T5827] veth0_macvtap: entered promiscuous mode [ 115.071029][ T5827] veth1_macvtap: entered promiscuous mode [ 115.091734][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.100573][ T5826] veth1_vlan: entered promiscuous mode [ 115.147902][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.225574][ T5830] veth0_macvtap: entered promiscuous mode [ 115.235120][ T5841] Bluetooth: hci2: command tx timeout [ 115.244672][ T5841] Bluetooth: hci1: command tx timeout [ 115.245289][ T52] Bluetooth: hci0: command tx timeout [ 115.261822][ T5943] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.272106][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.291710][ T5826] veth0_macvtap: entered promiscuous mode [ 115.301267][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.314895][ T52] Bluetooth: hci3: command tx timeout [ 115.319203][ T5841] Bluetooth: hci4: command tx timeout [ 115.320298][ T5838] Bluetooth: hci5: command tx timeout [ 115.327708][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.340039][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.340216][ T5943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.364725][ T5943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.366232][ T5831] veth0_vlan: entered promiscuous mode [ 115.382770][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.391142][ T5830] veth1_macvtap: entered promiscuous mode [ 115.426984][ T5826] veth1_macvtap: entered promiscuous mode [ 115.462386][ T5943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.468923][ T5831] veth1_vlan: entered promiscuous mode [ 115.470636][ T5943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.488447][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.510479][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.542028][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.551341][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.564399][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.606194][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.620946][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.655467][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 115.699293][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.723143][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.736615][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.806469][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.815874][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.830050][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.834865][ T5943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.861216][ T5943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.882284][ T5969] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 115.884262][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.901243][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.951357][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.971762][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.982401][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.038196][ T3520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.072603][ T3520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.111877][ T5831] veth0_macvtap: entered promiscuous mode [ 116.189503][ T5831] veth1_macvtap: entered promiscuous mode [ 116.195991][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.203808][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.240224][ T5973] netlink: 'syz.4.8': attribute type 12 has an invalid length. [ 116.283558][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.302438][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.451401][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.517747][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.529966][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.546685][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.610491][ T5943] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.634067][ T5943] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.646019][ T5943] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.700069][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.714072][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.759085][ T5943] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.950402][ T5943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.007055][ T5943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.179228][ T5986] SET target dimension over the limit! [ 118.043566][ T5988] loop3: detected capacity change from 0 to 1024 [ 118.127812][ T5988] EXT4-fs: Ignoring removed orlov option [ 118.371645][ T5988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.447801][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.496375][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.584517][ T30] audit: type=1800 audit(1760031677.588:2): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.13" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 118.641971][ T5995] netlink: 'syz.5.6': attribute type 4 has an invalid length. [ 118.712045][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.752648][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.936585][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.263923][ T6000] syz.0.1 (6000) used greatest stack depth: 19704 bytes left [ 119.586176][ T30] audit: type=1326 audit(1760031678.618:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca118eec9 code=0x7ffc0000 [ 119.717718][ T30] audit: type=1326 audit(1760031678.618:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca118eec9 code=0x7ffc0000 [ 120.565559][ T6030] loop5: detected capacity change from 0 to 2048 [ 120.743071][ T6001] Alternate GPT is invalid, using primary GPT. [ 120.763152][ T6001] loop5: p1 p2 p3 [ 120.780655][ T6001] loop5: partition table partially beyond EOD, truncated [ 121.893627][ T6043] loop2: detected capacity change from 0 to 1024 [ 121.933563][ T6043] EXT4-fs: Ignoring removed orlov option [ 121.968952][ T30] audit: type=1326 audit(1760031680.978:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73e78eec9 code=0x7ffc0000 [ 122.068961][ T6043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.098779][ T30] audit: type=1326 audit(1760031680.978:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fb73e78eec9 code=0x7ffc0000 [ 122.121823][ T30] audit: type=1326 audit(1760031680.978:7): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73e78eec9 code=0x7ffc0000 [ 122.149151][ T30] audit: type=1326 audit(1760031680.978:8): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73e78eec9 code=0x7ffc0000 [ 122.175144][ T30] audit: type=1326 audit(1760031680.978:9): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb73e78eec9 code=0x7ffc0000 [ 122.254711][ T6051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 122.257965][ T30] audit: type=1800 audit(1760031681.278:10): pid=6043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.27" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 122.311968][ T6001] udevd[6001]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 122.333102][ T5888] udevd[5888]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 122.348637][ T5887] udevd[5887]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 122.455364][ T30] audit: type=1804 audit(1760031681.328:11): pid=6043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.27" name="/newroot/2/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 122.919797][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.443412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 124.471038][ T30] audit: type=1326 audit(1760031683.488:12): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73e78eec9 code=0x7ffc0000 [ 124.515398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 124.546347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.564245][ T30] audit: type=1326 audit(1760031683.488:13): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73e78eec9 code=0x7ffc0000 [ 124.654295][ T30] audit: type=1326 audit(1760031683.618:14): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fb73e78eec9 code=0x7ffc0000 [ 124.732313][ T6084] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 124.759095][ T30] audit: type=1326 audit(1760031683.788:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73e78eec9 code=0x7ffc0000 [ 124.832144][ T30] audit: type=1326 audit(1760031683.788:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fb73e78eec9 code=0x7ffc0000 [ 124.903084][ T30] audit: type=1326 audit(1760031683.788:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73e78eec9 code=0x7ffc0000 [ 125.019006][ T30] audit: type=1326 audit(1760031683.818:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fb73e78eec9 code=0x7ffc0000 [ 125.046759][ T30] audit: type=1326 audit(1760031683.818:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73e78eec9 code=0x7ffc0000 [ 125.140299][ T30] audit: type=1326 audit(1760031683.818:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fb73e78eec9 code=0x7ffc0000 [ 125.184529][ T30] audit: type=1326 audit(1760031683.818:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73e78eec9 code=0x7ffc0000 [ 125.403991][ T6095] process 'syz.5.41' launched './file0' with NULL argv: empty string added [ 125.554340][ T6097] loop4: detected capacity change from 0 to 1024 [ 125.567383][ T6097] EXT4-fs: Ignoring removed orlov option [ 125.642582][ T6097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.051731][ T6108] netlink: 60 bytes leftover after parsing attributes in process `syz.5.46'. [ 126.092278][ T6108] unsupported nlmsg_type 40 [ 126.380394][ T6110] loop0: detected capacity change from 0 to 1024 [ 126.389237][ T6110] EXT4-fs: Ignoring removed orlov option [ 126.430918][ T6110] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.512744][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.892963][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.158850][ T6127] capability: warning: `syz.5.55' uses deprecated v2 capabilities in a way that may be insecure [ 127.264818][ T6129] loop2: detected capacity change from 0 to 512 [ 127.284274][ T6129] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 127.314822][ T6129] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 127.340020][ T6129] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2852: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 127.345507][ T6131] random: crng reseeded on system resumption [ 127.356024][ T6129] EXT4-fs (loop2): 1 truncate cleaned up [ 127.437139][ T6129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.512395][ T6128] syzkaller0: entered promiscuous mode [ 127.614223][ T6128] syzkaller0: entered allmulticast mode [ 128.233672][ T6134] mmap: syz.5.56 (6134) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 129.535654][ T5810] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 129.558058][ T6149] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 129.600320][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.61'. [ 129.705441][ T5810] usb 6-1: Using ep0 maxpacket: 16 [ 129.723636][ T5810] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.739740][ T5810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 129.763536][ T5810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 129.792707][ T5810] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 129.804468][ T5838] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 129.805098][ T5810] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.865018][ T5810] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 129.885177][ T5810] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 129.893234][ T5810] usb 6-1: Manufacturer: syz [ 129.920540][ T5810] usb 6-1: config 0 descriptor?? [ 130.216123][ T6129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.52'. [ 130.240873][ T6129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.52'. [ 130.307557][ T5810] rc_core: IR keymap rc-hauppauge not found [ 130.320759][ T5810] Registered IR keymap rc-empty [ 130.340467][ T5810] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 130.408156][ T5810] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 130.477562][ T5810] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 130.538478][ T5810] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input5 [ 130.650801][ T5810] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 130.777331][ T5810] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 130.824642][ T5810] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 130.844310][ T5810] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 130.882164][ T5810] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 130.935493][ T5810] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 130.956754][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.968489][ T5810] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 131.022651][ T5810] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 131.064398][ T5810] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 131.116396][ T5810] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 131.177576][ T5810] mceusb 6-1:0.0: Registered І with mce emulator interface version 1 [ 131.230606][ T5810] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 131.256246][ T6163] Zero length message leads to an empty skb [ 131.280171][ T5810] usb 6-1: USB disconnect, device number 2 [ 131.537388][ T6167] random: crng reseeded on system resumption [ 134.011677][ T6188] syzkaller0: entered promiscuous mode [ 134.044314][ T6188] syzkaller0: entered allmulticast mode [ 134.073697][ T6193] tipc: Started in network mode [ 134.078874][ T6193] tipc: Node identity b6c76d297a59, cluster identity 4711 [ 134.087268][ T6193] tipc: Enabled bearer , priority 0 [ 134.426263][ T36] Bluetooth: hci6: Frame reassembly failed (-84) [ 134.658228][ T6053] Set syz1 is full, maxelem 65536 reached [ 134.825230][ T6197] loop3: detected capacity change from 0 to 512 [ 134.845905][ T6197] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 134.916588][ T6197] EXT4-fs (loop3): 1 truncate cleaned up [ 134.925489][ T6197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.013150][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.105970][ T6060] tipc: Node number set to 3432934697 [ 135.448871][ T6191] syzkaller0: entered promiscuous mode [ 135.464313][ T6191] syzkaller0: entered allmulticast mode [ 135.475387][ T6191] tipc: Resetting bearer [ 135.484400][ T6190] tipc: Resetting bearer [ 136.434539][ T5838] Bluetooth: hci6: command 0x1003 tx timeout [ 136.434760][ T52] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 136.765878][ T6190] tipc: Disabling bearer [ 136.806678][ T6207] ip6gre0 speed is unknown, defaulting to 1000 [ 136.829315][ T6207] ip6gre0 speed is unknown, defaulting to 1000 [ 136.852413][ T6207] ip6gre0 speed is unknown, defaulting to 1000 [ 137.667830][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'. [ 137.860831][ T6060] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 138.521782][ T6060] usb 1-1: Using ep0 maxpacket: 16 [ 138.591726][ T6060] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.644543][ T6060] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 138.647512][ T6207] infiniband syz0: set active [ 138.661927][ T5810] ip6gre0 speed is unknown, defaulting to 1000 [ 138.672500][ T6060] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 138.681604][ T6207] infiniband syz0: added ip6gre0 [ 138.710991][ T6060] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 138.727955][ T6207] syz0: rxe_create_cq: returned err = -12 [ 138.762147][ T6060] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.765716][ T6232] random: crng reseeded on system resumption [ 138.791443][ T6207] infiniband syz0: Couldn't create ib_mad CQ [ 138.805829][ T6060] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 138.824426][ T6207] infiniband syz0: Couldn't open port 1 [ 138.830599][ T6060] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 138.855843][ T6060] usb 1-1: Manufacturer: syz [ 138.958277][ T6060] usb 1-1: config 0 descriptor?? [ 139.015447][ T6207] RDS/IB: syz0: added [ 139.030477][ T6207] smc: adding ib device syz0 with port count 1 [ 139.044948][ T6207] smc: ib device syz0 port 1 has no pnetid [ 139.070226][ T6236] loop4: detected capacity change from 0 to 2048 [ 139.072446][ T43] ip6gre0 speed is unknown, defaulting to 1000 [ 139.108002][ T6207] ip6gre0 speed is unknown, defaulting to 1000 [ 139.160551][ T6004] Alternate GPT is invalid, using primary GPT. [ 139.194393][ T6004] loop4: p1 p2 p3 [ 139.198192][ T6004] loop4: partition table partially beyond EOD, truncated [ 139.348961][ T6236] Alternate GPT is invalid, using primary GPT. [ 139.374369][ T6236] loop4: p1 p2 p3 [ 139.378218][ T6236] loop4: partition table partially beyond EOD, truncated [ 139.385373][ T6060] rc_core: IR keymap rc-hauppauge not found [ 139.404273][ T6060] Registered IR keymap rc-empty [ 139.409303][ T6060] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 139.497239][ T6060] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 139.540495][ T6060] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 139.632608][ T6238] syzkaller0: entered promiscuous mode [ 139.643469][ T6060] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 139.671631][ T6238] syzkaller0: entered allmulticast mode [ 139.691729][ T6060] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 139.775460][ T6060] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 139.805357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 139.824485][ T6060] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 139.884328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 139.894519][ T6060] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 139.962037][ T6060] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.027046][ T6060] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.104633][ T6060] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.155169][ T6060] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.192404][ T6004] udevd[6004]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 140.208495][ T5888] udevd[5888]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 140.234870][ T5887] udevd[5887]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 140.255739][ T6060] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.284832][ T6060] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.332080][ T6060] mceusb 1-1:0.0: Registered І with mce emulator interface version 1 [ 140.375887][ T6060] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 140.399238][ T5888] udevd[5888]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 140.412824][ T6004] udevd[6004]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 140.432960][ T6002] udevd[6002]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 140.464931][ T6060] usb 1-1: USB disconnect, device number 2 [ 142.387259][ T6268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.99'. [ 142.446505][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.453201][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.683537][ T6249] tipc: Enabling of bearer rejected, failed to enable media [ 142.701459][ T6207] ip6gre0 speed is unknown, defaulting to 1000 [ 142.733316][ T6265] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 142.921797][ T6270] veth3: entered promiscuous mode [ 143.169574][ T6282] netlink: 348 bytes leftover after parsing attributes in process `syz.0.104'. [ 143.235396][ T6274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.100'. [ 143.664568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 143.673138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 143.994540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 144.001697][ T6207] ip6gre0 speed is unknown, defaulting to 1000 [ 144.045025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 144.084969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 144.349701][ T6307] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 144.557483][ T6308] syzkaller0: entered promiscuous mode [ 144.563057][ T6308] syzkaller0: entered allmulticast mode [ 144.583508][ T6312] netlink: 16 bytes leftover after parsing attributes in process `syz.5.116'. [ 144.698923][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 144.698947][ T30] audit: type=1326 audit(1760031703.728:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 144.784235][ T30] audit: type=1326 audit(1760031703.758:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 144.851227][ T30] audit: type=1326 audit(1760031703.758:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 144.913685][ T30] audit: type=1326 audit(1760031703.758:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 144.980937][ T30] audit: type=1326 audit(1760031703.758:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 145.059905][ T6324] loop4: detected capacity change from 0 to 2048 [ 145.072550][ T30] audit: type=1326 audit(1760031703.788:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 145.146947][ T30] audit: type=1326 audit(1760031703.788:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 145.155207][ T6324] Alternate GPT is invalid, using primary GPT. [ 145.214433][ T6324] loop4: p1 p2 p3 [ 145.226263][ T6324] loop4: partition table partially beyond EOD, truncated [ 145.231955][ T30] audit: type=1326 audit(1760031703.788:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 145.297198][ T30] audit: type=1326 audit(1760031703.788:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 145.320255][ T30] audit: type=1326 audit(1760031703.788:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 145.706702][ T5888] udevd[5888]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 145.730931][ T5887] udevd[5887]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 145.735415][ T6002] udevd[6002]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 146.685589][ T6315] tipc: Started in network mode [ 146.690619][ T6315] tipc: Node identity 6a0f9c093358, cluster identity 4711 [ 146.698517][ T6315] tipc: Enabled bearer , priority 0 [ 146.759438][ T6310] syzkaller0: entered promiscuous mode [ 146.766492][ T6310] syzkaller0: entered allmulticast mode [ 146.778703][ T6310] tipc: Resetting bearer [ 146.882412][ T13] tipc: Resetting bearer [ 146.898124][ T6207] ip6gre0 speed is unknown, defaulting to 1000 [ 146.934604][ T6309] tipc: Resetting bearer [ 146.973668][ T6349] random: crng reseeded on system resumption [ 148.216910][ T9] tipc: Node number set to 1498913801 [ 149.137240][ T6309] tipc: Disabling bearer [ 149.148828][ T6351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.132'. [ 149.189185][ T6207] ip6gre0 speed is unknown, defaulting to 1000 [ 149.598147][ T6389] loop0: detected capacity change from 0 to 764 [ 149.615316][ T6393] random: crng reseeded on system resumption [ 149.622953][ T6394] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 149.681469][ T6389] rock: directory entry would overflow storage [ 149.699551][ T6381] syzkaller0: entered promiscuous mode [ 149.714753][ T6389] rock: sig=0x4f50, size=4, remaining=3 [ 149.720328][ T6389] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 149.748153][ T6381] syzkaller0: entered allmulticast mode [ 150.093516][ T6398] netlink: 24 bytes leftover after parsing attributes in process `syz.4.149'. [ 150.837418][ T6410] loop5: detected capacity change from 0 to 1024 [ 150.853664][ T6410] ======================================================= [ 150.853664][ T6410] WARNING: The mand mount option has been deprecated and [ 150.853664][ T6410] and is ignored by this kernel. Remove the mand [ 150.853664][ T6410] option from the mount to silence this warning. [ 150.853664][ T6410] ======================================================= [ 150.906856][ T6410] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.001651][ T6410] EXT4-fs: inline encryption not supported [ 151.240317][ T6410] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.324495][ T30] kauditd_printk_skb: 95 callbacks suppressed [ 151.324524][ T30] audit: type=1800 audit(1760031710.318:164): pid=6410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.153" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 151.388403][ T6410] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4192: comm syz.5.153: Allocating blocks 497-513 which overlap fs metadata [ 151.411257][ T6410] EXT4-fs (loop5): pa ffff888030e08bc8: logic 256, phys. 385, len 8 [ 151.419629][ T6410] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5443: group 0, free 0, pa_free 1 [ 152.176534][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.577849][ T6419] netlink: 3 bytes leftover after parsing attributes in process `syz.5.155'. [ 153.040521][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.049678][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.057814][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.067495][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.076107][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.392122][ T6398] IPVS: Error connecting to the multicast addr [ 153.400008][ T6419] 0X: renamed from caif0 [ 153.405440][ T6207] ip6gre0 speed is unknown, defaulting to 1000 [ 153.455086][ T6419] 0X: entered allmulticast mode [ 153.460329][ T6419] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 154.617426][ T6427] syzkaller0: entered promiscuous mode [ 154.623172][ T6427] syzkaller0: entered allmulticast mode [ 154.664427][ T6432] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 154.675244][ T6437] netlink: 16 bytes leftover after parsing attributes in process `syz.4.160'. [ 154.697880][ T6437] netlink: 136 bytes leftover after parsing attributes in process `syz.4.160'. [ 154.727764][ T6437] netlink: 40 bytes leftover after parsing attributes in process `syz.4.160'. [ 154.867438][ T6441] loop4: detected capacity change from 0 to 512 [ 154.931338][ T6441] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 155.007120][ T6441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.063159][ T6441] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.165526][ T5838] Bluetooth: hci6: command tx timeout [ 155.422385][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.601729][ T6207] ip6gre0 speed is unknown, defaulting to 1000 [ 157.884656][ T5838] Bluetooth: hci6: command tx timeout [ 157.934923][ T6479] loop4: detected capacity change from 0 to 512 [ 159.954949][ T5838] Bluetooth: hci6: command tx timeout [ 160.456144][ T6492] loop3: detected capacity change from 0 to 512 [ 160.516113][ T6492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.554372][ T6492] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.671487][ T6492] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 96 vs 864 free clusters [ 160.758631][ T6492] Quota error (device loop3): write_blk: dquota write failed [ 160.771692][ T30] audit: type=1326 audit(1760031719.798:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73e78eec9 code=0x7ffc0000 [ 160.787731][ T6492] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 160.821681][ T6493] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.830038][ T6493] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.873682][ T6492] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.180: Failed to acquire dquot type 1 [ 160.874180][ T30] audit: type=1326 audit(1760031719.798:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73e78eec9 code=0x7ffc0000 [ 160.967803][ T30] audit: type=1326 audit(1760031719.848:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb73e78eec9 code=0x7ffc0000 [ 160.992637][ T30] audit: type=1326 audit(1760031719.858:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73e78eec9 code=0x7ffc0000 [ 161.021937][ T30] audit: type=1326 audit(1760031719.858:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73e78eec9 code=0x7ffc0000 [ 161.071446][ T6493] 0X: left allmulticast mode [ 161.106179][ T30] audit: type=1326 audit(1760031719.868:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb73e78eec9 code=0x7ffc0000 [ 161.132996][ T30] audit: type=1326 audit(1760031719.868:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73e78eec9 code=0x7ffc0000 [ 161.141503][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.156450][ T30] audit: type=1326 audit(1760031719.868:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73e78eec9 code=0x7ffc0000 [ 161.349586][ T6507] loop0: detected capacity change from 0 to 764 [ 161.368062][ T6507] rock: directory entry would overflow storage [ 161.374382][ T6507] rock: sig=0x4f50, size=4, remaining=3 [ 161.380359][ T6507] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 161.437996][ T12] Bluetooth: hci7: Frame reassembly failed (-84) [ 161.679017][ T6510] loop0: detected capacity change from 0 to 128 [ 161.907731][ T6510] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.909940][ T6493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.922270][ T6510] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.952086][ T6493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.046353][ T52] Bluetooth: hci6: command tx timeout [ 162.083181][ T5826] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.399547][ T6421] ip6gre0 speed is unknown, defaulting to 1000 [ 162.547499][ T6514] syzkaller0: entered promiscuous mode [ 162.561674][ T6514] syzkaller0: entered allmulticast mode [ 162.577757][ T6041] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.048532][ T6538] loop5: detected capacity change from 0 to 1024 [ 163.088112][ T6538] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.223638][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.238172][ T5838] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 163.256501][ T6502] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 163.635049][ T5838] Bluetooth: hci0: command 0x0c20 tx timeout [ 164.009561][ T6041] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.018802][ T6041] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.044242][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 164.120526][ T6041] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.314566][ T6554] random: crng reseeded on system resumption [ 165.202303][ T6570] loop0: detected capacity change from 0 to 512 [ 165.258164][ T6570] EXT4-fs: Ignoring removed oldalloc option [ 165.719986][ T6570] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.206: Parent and EA inode have the same ino 15 [ 166.217094][ T6570] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.206: Parent and EA inode have the same ino 15 [ 166.398448][ T6570] EXT4-fs (loop0): 1 orphan inode deleted [ 166.427051][ T6570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.630304][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.718808][ T6041] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.825729][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.212'. [ 167.872034][ T6589] netlink: 28 bytes leftover after parsing attributes in process `syz.0.210'. [ 167.993418][ T6041] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.043715][ T6597] loop3: detected capacity change from 0 to 2048 [ 168.066535][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.214'. [ 168.095581][ T6591] syzkaller0: entered promiscuous mode [ 168.101266][ T6591] syzkaller0: entered allmulticast mode [ 168.102961][ T6597] Alternate GPT is invalid, using primary GPT. [ 168.116640][ T6597] loop3: p1 p2 p3 [ 168.120387][ T6597] loop3: partition table partially beyond EOD, truncated [ 168.180310][ T6594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.321673][ T6041] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.393947][ T6421] chnl_net:caif_netlink_parms(): no params data found [ 168.612763][ T6026] kernel write not supported for file /92/net/rt_acct (pid: 6026 comm: kworker/0:6) [ 168.633733][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 168.633755][ T30] audit: type=1326 audit(1760031727.658:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.1.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 168.663130][ T30] audit: type=1326 audit(1760031727.678:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.1.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 168.693090][ T30] audit: type=1326 audit(1760031727.678:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.1.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 168.718041][ T30] audit: type=1326 audit(1760031727.678:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.1.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 168.740650][ T30] audit: type=1326 audit(1760031727.678:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.1.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 168.763356][ T30] audit: type=1326 audit(1760031727.678:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.1.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 168.789680][ T30] audit: type=1326 audit(1760031727.678:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.1.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 168.814633][ T6615] loop1: detected capacity change from 0 to 8192 [ 168.817846][ T30] audit: type=1326 audit(1760031727.678:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.1.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 168.845161][ T30] audit: type=1326 audit(1760031727.678:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.1.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 168.867699][ T30] audit: type=1326 audit(1760031727.678:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.1.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 168.907071][ T6615] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 168.922205][ T6615] FAT-fs (loop1): Filesystem has been set read-only [ 169.672462][ T6629] netlink: 16 bytes leftover after parsing attributes in process `syz.0.229'. [ 169.764791][ T6041] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.795708][ T6611] vxcan1: entered allmulticast mode [ 169.805712][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.226'. [ 171.192228][ T6421] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.235869][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.284569][ T6421] bridge_slave_0: entered allmulticast mode [ 171.335547][ T6421] bridge_slave_0: entered promiscuous mode [ 171.454940][ T6421] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.484456][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.531692][ T6421] bridge_slave_1: entered allmulticast mode [ 171.584843][ T6421] bridge_slave_1: entered promiscuous mode [ 171.877265][ T6421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.880315][ T6661] 9pnet: p9_errstr2errno: server reported unknown error @000000000000000000000040xffffffffffffffff [ 171.925438][ T6041] bridge_slave_1: left allmulticast mode [ 171.954316][ T6041] bridge_slave_1: left promiscuous mode [ 171.984729][ T6041] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.053887][ T6041] bridge_slave_0: left allmulticast mode [ 172.071359][ T6041] bridge_slave_0: left promiscuous mode [ 172.115945][ T6041] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.259900][ T6667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'. [ 172.385740][ T5950] smc: removing ib device syz0 [ 172.948401][ T6689] loop4: detected capacity change from 0 to 128 [ 173.060435][ T6689] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 173.073055][ T6689] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 173.445193][ T5829] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 174.218165][ T6041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.363419][ T6041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.379570][ T6698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.249'. [ 174.396862][ T6041] bond0 (unregistering): Released all slaves [ 174.541265][ T6421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.826876][ T5810] ip6gre0 speed is unknown, defaulting to 1000 [ 174.838979][ T5810] syz0: Port: 1 Link DOWN [ 175.046452][ T6706] loop4: detected capacity change from 0 to 512 [ 175.077140][ T6706] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 175.146940][ T6706] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.251: invalid block [ 175.197569][ T6706] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #11: comm syz.4.251: invalid indirect mapped block 4294967295 (level 1) [ 175.270972][ T6706] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #11: comm syz.4.251: invalid indirect mapped block 4294967295 (level 1) [ 175.306953][ T6706] EXT4-fs (loop4): 2 truncates cleaned up [ 175.330862][ T6706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.408216][ T6706] EXT4-fs error (device loop4): ext4_get_parent:1833: inode #11: comm syz.4.251: bad parent inode number: 3 [ 175.529832][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.838893][ T6680] syzkaller0: entered promiscuous mode [ 176.844609][ T6680] syzkaller0: entered allmulticast mode [ 176.967947][ T6421] team0: Port device team_slave_0 added [ 177.531513][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 177.531538][ T30] audit: type=1326 audit(1760031736.558:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61678eec9 code=0x7ffc0000 [ 177.562370][ T30] audit: type=1326 audit(1760031736.598:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61678eec9 code=0x7ffc0000 [ 177.600400][ T30] audit: type=1326 audit(1760031736.628:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff61678eec9 code=0x7ffc0000 [ 177.633230][ T30] audit: type=1326 audit(1760031736.628:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61678eec9 code=0x7ffc0000 [ 178.361428][ T30] audit: type=1326 audit(1760031736.628:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61678eec9 code=0x7ffc0000 [ 178.392458][ T30] audit: type=1326 audit(1760031736.628:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff61678eec9 code=0x7ffc0000 [ 178.419241][ T30] audit: type=1326 audit(1760031737.388:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61678eec9 code=0x7ffc0000 [ 178.442691][ T30] audit: type=1326 audit(1760031737.388:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61678eec9 code=0x7ffc0000 [ 178.522791][ T30] audit: type=1326 audit(1760031737.418:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7ff61678eec9 code=0x7ffc0000 [ 178.558758][ T30] audit: type=1326 audit(1760031737.418:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61678eec9 code=0x7ffc0000 [ 178.597074][ T6733] loop3: detected capacity change from 0 to 512 [ 178.605233][ T6733] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 178.654566][ T6733] EXT4-fs (loop3): 1 truncate cleaned up [ 178.675337][ T6733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.779895][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.411085][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.268'. [ 179.833406][ T6421] team0: Port device team_slave_1 added [ 180.001733][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.5.256'. [ 180.012961][ T6718] netlink: 'syz.5.256': attribute type 30 has an invalid length. [ 180.181685][ T6757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'. [ 180.221391][ T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.238667][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.271'. [ 180.255851][ T60] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.443210][ T6421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.468297][ T6770] loop3: detected capacity change from 0 to 512 [ 180.471236][ T6421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.514617][ T6770] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 180.555750][ T6421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.586148][ T6421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.602355][ T6421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.638359][ T6770] EXT4-fs (loop3): 1 truncate cleaned up [ 180.656874][ T6770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.681091][ T6421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.707447][ T60] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.739082][ T60] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.799535][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.910126][ T6765] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.100435][ T6782] netlink: 24 bytes leftover after parsing attributes in process `syz.0.277'. [ 181.926772][ T6765] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.247483][ T6782] IPVS: Error connecting to the multicast addr [ 183.928620][ T6765] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.174287][ T6817] ieee802154 phy0 wpan0: encryption failed: -22 [ 184.775125][ T6820] capability: warning: `syz.1.287' uses 32-bit capabilities (legacy support in use) [ 185.083749][ T6765] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.202700][ T6421] hsr_slave_0: entered promiscuous mode [ 185.238192][ T6421] hsr_slave_1: entered promiscuous mode [ 185.246741][ T6421] debugfs: 'hsr0' already exists in 'hsr' [ 185.252494][ T6421] Cannot create hsr debugfs directory [ 185.292258][ T6827] loop0: detected capacity change from 0 to 512 [ 185.302475][ T6041] hsr_slave_0: left promiscuous mode [ 185.319981][ T6041] hsr_slave_1: left promiscuous mode [ 185.330382][ T6041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.342698][ T6041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.353437][ T6041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.361656][ T6041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.390611][ T6827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.395918][ T6041] veth1_macvtap: left promiscuous mode [ 185.409918][ T6041] veth0_macvtap: left promiscuous mode [ 185.415876][ T6041] veth1_vlan: left promiscuous mode [ 185.421600][ T6041] veth0_vlan: left promiscuous mode [ 185.424394][ T6827] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.567060][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.855449][ T6836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.292'. [ 186.282866][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 186.282892][ T30] audit: type=1326 audit(1760031745.318:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.1.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 186.349954][ T30] audit: type=1326 audit(1760031745.318:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.1.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 186.397402][ T30] audit: type=1326 audit(1760031745.318:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.1.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 186.444401][ T30] audit: type=1326 audit(1760031745.318:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.1.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 186.491310][ T30] audit: type=1326 audit(1760031745.318:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.1.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 186.544273][ T30] audit: type=1326 audit(1760031745.318:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.1.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 186.596771][ T30] audit: type=1326 audit(1760031745.348:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.1.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 186.634280][ T30] audit: type=1326 audit(1760031745.358:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.1.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 186.663267][ T30] audit: type=1326 audit(1760031745.358:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.1.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 186.688192][ T30] audit: type=1326 audit(1760031745.358:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.1.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 186.739259][ T6041] team0 (unregistering): Port device team_slave_1 removed [ 186.783518][ T6041] team0 (unregistering): Port device team_slave_0 removed [ 187.201248][ T6836] IPVS: Error connecting to the multicast addr [ 188.688215][ T3520] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.720762][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.302'. [ 188.752944][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.852963][ T3520] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.927033][ T6870] loop1: detected capacity change from 0 to 512 [ 188.939262][ T6870] EXT4-fs: Ignoring removed nobh option [ 188.982366][ T6869] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.013964][ T6870] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #3: comm syz.1.304: corrupted inode contents [ 189.041798][ T6870] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #3: comm syz.1.304: mark_inode_dirty error [ 189.059645][ T6870] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #3: comm syz.1.304: corrupted inode contents [ 189.079497][ T6870] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.304: mark_inode_dirty error [ 189.103392][ T3520] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.145883][ T6870] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.304: Failed to acquire dquot type 0 [ 189.195636][ T6870] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.304: corrupted inode contents [ 189.206694][ T6869] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.233576][ T6870] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #16: comm syz.1.304: mark_inode_dirty error [ 189.286435][ T6870] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.304: corrupted inode contents [ 189.329719][ T6870] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.304: mark_inode_dirty error [ 189.350062][ T6870] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.304: corrupted inode contents [ 189.367109][ T6877] : renamed from wg2 (while UP) [ 189.375952][ T6880] loop4: detected capacity change from 0 to 1024 [ 189.383041][ T6870] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 189.387571][ T6859] infiniband syz!: set active [ 189.396497][ T6870] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.304: corrupted inode contents [ 189.397009][ T6859] infiniband syz!: added team_slave_0 [ 189.409344][ T6870] EXT4-fs error (device loop1): ext4_truncate:4637: inode #16: comm syz.1.304: mark_inode_dirty error [ 189.416216][ T6859] syz!: rxe_create_cq: returned err = -12 [ 189.426430][ T6870] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 189.433156][ T6859] infiniband syz!: Couldn't create ib_mad CQ [ 189.447855][ T6859] infiniband syz!: Couldn't open port 1 [ 189.449844][ T6880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.474729][ T6870] EXT4-fs (loop1): 1 truncate cleaned up [ 189.482737][ T6870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.497532][ T6859] RDS/IB: syz!: added [ 189.501726][ T6859] smc: adding ib device syz! with port count 1 [ 189.508804][ T6859] smc: ib device syz! port 1 has no pnetid [ 189.513598][ T6870] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.535914][ T6870] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.543640][ T6869] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.725193][ T6869] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.752904][ T6885] netlink: 24 bytes leftover after parsing attributes in process `syz.5.308'. [ 189.763116][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.309'. [ 189.785624][ T6421] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 189.817383][ T6421] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 189.847084][ T6885] IPVS: Error connecting to the multicast addr [ 189.864555][ T6421] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 189.893874][ T6421] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 190.042334][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.127187][ T60] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.167609][ T60] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.242993][ T6041] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.251496][ T6901] random: crng reseeded on system resumption [ 190.306113][ T6900] loop4: detected capacity change from 0 to 2048 [ 190.327883][ T49] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.384764][ T6900] Alternate GPT is invalid, using primary GPT. [ 190.410036][ T6900] loop4: p1 p2 p3 [ 190.431347][ T6900] loop4: partition table partially beyond EOD, truncated [ 190.575923][ T6421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.634578][ T6421] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.683663][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.690937][ T5943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.749952][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.757166][ T5943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.875992][ T6909] netlink: 20 bytes leftover after parsing attributes in process `syz.3.316'. [ 190.938644][ T6910] netlink: 32 bytes leftover after parsing attributes in process `syz.4.315'. [ 191.188280][ T6914] random: crng reseeded on system resumption [ 191.343224][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 191.343249][ T30] audit: type=1326 audit(1760031750.368:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73e78eec9 code=0x7ffc0000 [ 191.471171][ T30] audit: type=1326 audit(1760031750.408:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73e78eec9 code=0x7ffc0000 [ 192.257645][ T30] audit: type=1326 audit(1760031750.428:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73e78eec9 code=0x7ffc0000 [ 192.285283][ T30] audit: type=1326 audit(1760031750.428:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73e78eec9 code=0x7ffc0000 [ 192.307811][ T30] audit: type=1326 audit(1760031750.428:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73e78eec9 code=0x7ffc0000 [ 192.436997][ T6924] loop4: detected capacity change from 0 to 1024 [ 192.443189][ T6926] loop1: detected capacity change from 0 to 512 [ 192.515438][ T6924] EXT4-fs: Ignoring removed nobh option [ 192.530516][ T6924] EXT4-fs: Ignoring removed bh option [ 192.587414][ T6924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.723962][ T30] audit: type=1804 audit(1760031751.748:402): pid=6924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.320" name="/newroot/63/file2/bus" dev="loop4" ino=18 res=1 errno=0 [ 192.785378][ T6924] EXT4-fs (loop4): shut down requested (0) [ 192.798239][ T6421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.840668][ T30] audit: type=1804 audit(1760031751.868:403): pid=6936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.320" name="/newroot/63/file2/bus" dev="loop4" ino=18 res=1 errno=0 [ 193.113876][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.505001][ T6949] netlink: 60 bytes leftover after parsing attributes in process `syz.4.326'. [ 193.562371][ T6951] netlink: 60 bytes leftover after parsing attributes in process `syz.4.326'. [ 193.874587][ T6421] veth0_vlan: entered promiscuous mode [ 193.917525][ T6421] veth1_vlan: entered promiscuous mode [ 193.970430][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.327'. [ 194.078586][ T6421] veth0_macvtap: entered promiscuous mode [ 194.104910][ T30] audit: type=1326 audit(1760031753.128:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 194.112102][ T6421] veth1_macvtap: entered promiscuous mode [ 194.164367][ T30] audit: type=1326 audit(1760031753.128:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 194.197856][ T30] audit: type=1326 audit(1760031753.168:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ad338eec9 code=0x7ffc0000 [ 194.246396][ T6421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.288077][ T6421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.329261][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.342435][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.373120][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.390132][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.574083][ T3520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.623711][ T3520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.719514][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.738976][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.117145][ T6970] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 195.123942][ T6970] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 195.143504][ T6970] vhci_hcd vhci_hcd.0: Device attached [ 195.152464][ T6972] vhci_hcd: connection closed [ 195.155020][ T1141] vhci_hcd: stop threads [ 195.175164][ T1141] vhci_hcd: release socket [ 195.184210][ T1141] vhci_hcd: disconnect device [ 195.230484][ T6979] loop1: detected capacity change from 0 to 1024 [ 195.463175][ T6988] netlink: 24 bytes leftover after parsing attributes in process `syz.4.338'. [ 195.472730][ T6988] team0: No ports can be present during mode change [ 195.672195][ T5932] IPVS: starting estimator thread 0... [ 195.784322][ T6993] IPVS: using max 21 ests per chain, 50400 per kthread [ 196.135793][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.343'. [ 196.234713][ T5932] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 196.300873][ T5932] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 196.786391][ T7013] loop6: detected capacity change from 0 to 512 [ 196.844561][ T7013] EXT4-fs: test_dummy_encryption requires encrypt feature [ 196.976640][ T7013] wireguard0: entered promiscuous mode [ 196.982153][ T7013] wireguard0: entered allmulticast mode [ 197.027637][ T7017] loop6: detected capacity change from 0 to 512 [ 197.133569][ T7017] [ 197.135930][ T7017] ====================================================== [ 197.142942][ T7017] WARNING: possible circular locking dependency detected [ 197.149951][ T7017] syzkaller #0 Not tainted [ 197.154360][ T7017] ------------------------------------------------------ [ 197.161373][ T7017] syz.6.348/7017 is trying to acquire lock: [ 197.167264][ T7017] ffff888029742b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x27a/0x600 [ 197.177158][ T7017] [ 197.177158][ T7017] but task is already holding lock: [ 197.184508][ T7017] ffff88804f42f388 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x4ba/0x870 [ 197.194465][ T7017] [ 197.194465][ T7017] which lock already depends on the new lock. [ 197.194465][ T7017] [ 197.204860][ T7017] [ 197.204860][ T7017] the existing dependency chain (in reverse order) is: [ 197.213952][ T7017] [ 197.213952][ T7017] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 197.221525][ T7017] down_write+0x92/0x200 [ 197.226303][ T7017] ext4_inline_data_truncate+0x1b3/0xc80 [ 197.232479][ T7017] ext4_truncate+0x9b4/0x1210 [ 197.237682][ T7017] ext4_evict_inode+0x7a8/0x18e0 [ 197.243170][ T7017] evict+0x3e6/0x920 [ 197.247586][ T7017] iput.part.0+0x6a9/0xb00 [ 197.252545][ T7017] iput+0x35/0x40 [ 197.256706][ T7017] ext4_orphan_cleanup+0x731/0x11e0 [ 197.262453][ T7017] ext4_fill_super+0x8db7/0xaf70 [ 197.267927][ T7017] get_tree_bdev_flags+0x38c/0x620 [ 197.273593][ T7017] vfs_get_tree+0x8e/0x340 [ 197.278536][ T7017] path_mount+0x7b9/0x23a0 [ 197.283469][ T7017] __x64_sys_mount+0x293/0x310 [ 197.288838][ T7017] do_syscall_64+0xcd/0xfa0 [ 197.293960][ T7017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.300394][ T7017] [ 197.300394][ T7017] -> #1 (sb_internal){++++}-{0:0}: [ 197.307801][ T7017] ext4_evict_inode+0xe3e/0x18e0 [ 197.313268][ T7017] evict+0x3e6/0x920 [ 197.317697][ T7017] iput.part.0+0x6a9/0xb00 [ 197.322634][ T7017] iput+0x35/0x40 [ 197.326788][ T7017] ext4_ext_migrate+0xc6f/0x1ee0 [ 197.332250][ T7017] __ext4_ioctl+0x3178/0x4410 [ 197.337457][ T7017] __x64_sys_ioctl+0x18e/0x210 [ 197.342762][ T7017] do_syscall_64+0xcd/0xfa0 [ 197.347792][ T7017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.354209][ T7017] [ 197.354209][ T7017] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 197.362669][ T7017] __lock_acquire+0x12a6/0x1ce0 [ 197.368067][ T7017] lock_acquire+0x179/0x350 [ 197.373086][ T7017] ext4_writepages+0x224/0x7d0 [ 197.378379][ T7017] do_writepages+0x27a/0x600 [ 197.383491][ T7017] __writeback_single_inode+0x160/0xfb0 [ 197.389716][ T7017] writeback_single_inode+0x2bc/0x550 [ 197.395708][ T7017] write_inode_now+0x170/0x1e0 [ 197.401003][ T7017] iput.part.0+0x487/0xb00 [ 197.405942][ T7017] iput+0x35/0x40 [ 197.410102][ T7017] ext4_xattr_block_set+0x67c/0x3650 [ 197.415936][ T7017] ext4_expand_extra_isize_ea+0x1442/0x1ab0 [ 197.422375][ T7017] __ext4_expand_extra_isize+0x346/0x480 [ 197.428548][ T7017] __ext4_mark_inode_dirty+0x544/0x870 [ 197.434541][ T7017] ext4_evict_inode+0x74e/0x18e0 [ 197.440010][ T7017] evict+0x3e6/0x920 [ 197.444422][ T7017] iput.part.0+0x6a9/0xb00 [ 197.449372][ T7017] iput+0x35/0x40 [ 197.453523][ T7017] ext4_orphan_cleanup+0x731/0x11e0 [ 197.459262][ T7017] ext4_fill_super+0x8db7/0xaf70 [ 197.464737][ T7017] get_tree_bdev_flags+0x38c/0x620 [ 197.470387][ T7017] vfs_get_tree+0x8e/0x340 [ 197.475331][ T7017] path_mount+0x7b9/0x23a0 [ 197.480264][ T7017] __x64_sys_mount+0x293/0x310 [ 197.485549][ T7017] do_syscall_64+0xcd/0xfa0 [ 197.490584][ T7017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.497084][ T7017] [ 197.497084][ T7017] other info that might help us debug this: [ 197.497084][ T7017] [ 197.507391][ T7017] Chain exists of: [ 197.507391][ T7017] &sbi->s_writepages_rwsem --> sb_internal --> &ei->xattr_sem [ 197.507391][ T7017] [ 197.520806][ T7017] Possible unsafe locking scenario: [ 197.520806][ T7017] [ 197.528257][ T7017] CPU0 CPU1 [ 197.533708][ T7017] ---- ---- [ 197.539060][ T7017] lock(&ei->xattr_sem); [ 197.543391][ T7017] lock(sb_internal); [ 197.549988][ T7017] lock(&ei->xattr_sem); [ 197.556843][ T7017] rlock(&sbi->s_writepages_rwsem); [ 197.562149][ T7017] [ 197.562149][ T7017] *** DEADLOCK *** [ 197.562149][ T7017] [ 197.570461][ T7017] 3 locks held by syz.6.348/7017: [ 197.575476][ T7017] #0: ffff8880297440e0 (&type->s_umount_key#27/1){+.+.}-{4:4}, at: alloc_super+0x1e3/0xb60 [ 197.585652][ T7017] #1: ffff888029744610 (sb_internal){++++}-{0:0}, at: evict+0x3e6/0x920 [ 197.594132][ T7017] #2: ffff88804f42f388 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x4ba/0x870 [ 197.604543][ T7017] [ 197.604543][ T7017] stack backtrace: [ 197.610434][ T7017] CPU: 1 UID: 0 PID: 7017 Comm: syz.6.348 Not tainted syzkaller #0 PREEMPT(full) [ 197.610474][ T7017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 197.610493][ T7017] Call Trace: [ 197.610504][ T7017] [ 197.610517][ T7017] dump_stack_lvl+0x116/0x1f0 [ 197.610557][ T7017] print_circular_bug+0x275/0x350 [ 197.610616][ T7017] check_noncircular+0x14c/0x170 [ 197.610674][ T7017] __lock_acquire+0x12a6/0x1ce0 [ 197.610730][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.610774][ T7017] lock_acquire+0x179/0x350 [ 197.610801][ T7017] ? do_writepages+0x27a/0x600 [ 197.610834][ T7017] ? __pfx___might_resched+0x10/0x10 [ 197.610880][ T7017] ext4_writepages+0x224/0x7d0 [ 197.610919][ T7017] ? do_writepages+0x27a/0x600 [ 197.610949][ T7017] ? __pfx_ext4_writepages+0x10/0x10 [ 197.610999][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.611040][ T7017] ? __pfx_ext4_writepages+0x10/0x10 [ 197.611081][ T7017] do_writepages+0x27a/0x600 [ 197.611113][ T7017] ? __pfx_do_writepages+0x10/0x10 [ 197.611149][ T7017] __writeback_single_inode+0x160/0xfb0 [ 197.611191][ T7017] ? __pfx___writeback_single_inode+0x10/0x10 [ 197.611230][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.611269][ T7017] ? do_raw_spin_unlock+0x172/0x230 [ 197.611305][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.611347][ T7017] writeback_single_inode+0x2bc/0x550 [ 197.611391][ T7017] write_inode_now+0x170/0x1e0 [ 197.611431][ T7017] ? __pfx_write_inode_now+0x10/0x10 [ 197.611470][ T7017] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 197.611535][ T7017] ? find_held_lock+0x2b/0x80 [ 197.611580][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.611621][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.611663][ T7017] iput.part.0+0x487/0xb00 [ 197.611701][ T7017] iput+0x35/0x40 [ 197.611731][ T7017] ext4_xattr_block_set+0x67c/0x3650 [ 197.611795][ T7017] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 197.611851][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.611890][ T7017] ? xattr_find_entry+0x289/0x330 [ 197.611942][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.611981][ T7017] ? ext4_xattr_block_find+0x59/0x430 [ 197.612035][ T7017] ext4_expand_extra_isize_ea+0x1442/0x1ab0 [ 197.612083][ T7017] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 197.612124][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.612163][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.612201][ T7017] ? dquot_initialize_needed+0x183/0x2a0 [ 197.612238][ T7017] __ext4_expand_extra_isize+0x346/0x480 [ 197.612293][ T7017] __ext4_mark_inode_dirty+0x544/0x870 [ 197.612337][ T7017] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 197.612379][ T7017] ? __pfx___might_resched+0x10/0x10 [ 197.612425][ T7017] ? ext4_journal_check_start+0x22b/0x340 [ 197.612463][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.612501][ T7017] ? __ext4_journal_start_sb+0x19e/0x690 [ 197.612536][ T7017] ? ext4_evict_inode+0x5cf/0x18e0 [ 197.612586][ T7017] ext4_evict_inode+0x74e/0x18e0 [ 197.612630][ T7017] ? __pfx_ext4_evict_inode+0x10/0x10 [ 197.612671][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.612714][ T7017] ? __pfx_ext4_evict_inode+0x10/0x10 [ 197.612755][ T7017] evict+0x3e6/0x920 [ 197.612787][ T7017] ? __pfx_evict+0x10/0x10 [ 197.612817][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.612861][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.612906][ T7017] iput.part.0+0x6a9/0xb00 [ 197.612937][ T7017] ? __pfx_ext4_drop_inode+0x10/0x10 [ 197.612971][ T7017] iput+0x35/0x40 [ 197.613001][ T7017] ext4_orphan_cleanup+0x731/0x11e0 [ 197.613049][ T7017] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 197.613094][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.613132][ T7017] ? ext4_register_li_request+0xec/0x9b0 [ 197.613181][ T7017] ext4_fill_super+0x8db7/0xaf70 [ 197.613242][ T7017] ? __pfx_ext4_fill_super+0x10/0x10 [ 197.613287][ T7017] ? do_raw_spin_lock+0x12c/0x2b0 [ 197.613321][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.613359][ T7017] ? find_held_lock+0x2b/0x80 [ 197.613403][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.613442][ T7017] ? sb_set_blocksize+0x176/0x1d0 [ 197.613491][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.613530][ T7017] ? setup_bdev_super+0x369/0x730 [ 197.613580][ T7017] get_tree_bdev_flags+0x38c/0x620 [ 197.613625][ T7017] ? __pfx_ext4_fill_super+0x10/0x10 [ 197.613671][ T7017] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 197.613719][ T7017] ? apparmor_capable+0x114/0x1d0 [ 197.613765][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.613804][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.613842][ T7017] ? security_capable+0x7e/0x260 [ 197.613884][ T7017] vfs_get_tree+0x8e/0x340 [ 197.613921][ T7017] path_mount+0x7b9/0x23a0 [ 197.613955][ T7017] ? __pfx_path_mount+0x10/0x10 [ 197.613987][ T7017] ? putname+0x154/0x1a0 [ 197.614021][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.614060][ T7017] ? putname+0x154/0x1a0 [ 197.614092][ T7017] ? __x64_sys_mount+0x293/0x310 [ 197.614120][ T7017] __x64_sys_mount+0x293/0x310 [ 197.614152][ T7017] ? __pfx___x64_sys_mount+0x10/0x10 [ 197.614190][ T7017] do_syscall_64+0xcd/0xfa0 [ 197.614229][ T7017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.614262][ T7017] RIP: 0033:0x7f45a5f9066a [ 197.614287][ T7017] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.614318][ T7017] RSP: 002b:00007f45a6e9ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 197.614348][ T7017] RAX: ffffffffffffffda RBX: 00007f45a6e9eef0 RCX: 00007f45a5f9066a [ 197.614370][ T7017] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f45a6e9eeb0 [ 197.614390][ T7017] RBP: 0000200000000180 R08: 00007f45a6e9eef0 R09: 0000000001800700 [ 197.614411][ T7017] R10: 0000000001800700 R11: 0000000000000246 R12: 00002000000001c0 [ 197.614431][ T7017] R13: 00007f45a6e9eeb0 R14: 000000000000047c R15: 00002000000004c0 [ 197.614465][ T7017] [ 198.521478][ T7017] ------------[ cut here ]------------ [ 198.527044][ T7017] EA inode 11 i_nlink=2 [ 198.527613][ T7017] WARNING: CPU: 1 PID: 7017 at fs/ext4/xattr.c:1056 ext4_xattr_inode_update_ref+0x4ec/0x610 [ 198.542164][ T7017] Modules linked in: [ 198.546287][ T7017] CPU: 1 UID: 0 PID: 7017 Comm: syz.6.348 Not tainted syzkaller #0 PREEMPT(full) [ 198.555817][ T7017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 198.566071][ T7017] RIP: 0010:ext4_xattr_inode_update_ref+0x4ec/0x610 [ 198.572732][ T7017] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 23 01 00 00 48 8b 73 40 44 89 e2 48 c7 c7 c0 4c a8 8b e8 55 17 ed fe 90 <0f> 0b 90 90 e9 d9 fe ff ff e8 56 de 2e ff 44 0f b6 2d 01 59 de 0d [ 198.593217][ T7017] RSP: 0018:ffffc90003507178 EFLAGS: 00010282 [ 198.599868][ T7017] RAX: 0000000000000000 RBX: ffff88804f42b268 RCX: ffffc9001c711000 [ 198.607945][ T7017] RDX: 0000000000080000 RSI: ffffffff817a9ef5 RDI: 0000000000000001 [ 198.615966][ T7017] RBP: ffffc90003507240 R08: 0000000000000001 R09: 0000000000000000 [ 198.623977][ T7017] R10: 0000000000000001 R11: 000000002d2d2d2d R12: 0000000000000002 [ 198.632020][ T7017] R13: 0000000000000000 R14: 1ffff920006a0e32 R15: ffff88804f42b458 [ 198.640046][ T7017] FS: 00007f45a6e9f6c0(0000) GS:ffff888124ae0000(0000) knlGS:0000000000000000 [ 198.649036][ T7017] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 198.655664][ T7017] CR2: 00007f4f1d1e7dac CR3: 0000000086a78000 CR4: 0000000000350ef0 [ 198.663834][ T7017] Call Trace: [ 198.667140][ T7017] [ 198.670078][ T7017] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 198.676694][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.682931][ T7017] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 198.688878][ T7017] ext4_xattr_set_entry+0x158f/0x1f00 [ 198.694548][ T7017] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 198.700331][ T7017] ? xattr_find_entry+0x289/0x330 [ 198.705444][ T7017] ext4_xattr_ibody_set+0x3d6/0x5d0 [ 198.710749][ T7017] ext4_expand_extra_isize_ea+0x148c/0x1ab0 [ 198.716706][ T7017] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 198.722974][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.728658][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.734351][ T7017] ? dquot_initialize_needed+0x183/0x2a0 [ 198.740017][ T7017] __ext4_expand_extra_isize+0x346/0x480 [ 198.745729][ T7017] __ext4_mark_inode_dirty+0x544/0x870 [ 198.751222][ T7017] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 198.757291][ T7017] ? __pfx___might_resched+0x10/0x10 [ 198.762663][ T7017] ? ext4_journal_check_start+0x22b/0x340 [ 198.768446][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.774157][ T7017] ? __ext4_journal_start_sb+0x19e/0x690 [ 198.779824][ T7017] ? ext4_evict_inode+0x5cf/0x18e0 [ 198.785323][ T7017] ext4_evict_inode+0x74e/0x18e0 [ 198.790371][ T7017] ? __pfx_ext4_evict_inode+0x10/0x10 [ 198.796198][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.801962][ T7017] ? __pfx_ext4_evict_inode+0x10/0x10 [ 198.807379][ T7017] evict+0x3e6/0x920 [ 198.811277][ T7017] ? __pfx_evict+0x10/0x10 [ 198.815709][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.821349][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.827063][ T7017] iput.part.0+0x6a9/0xb00 [ 198.831481][ T7017] ? __pfx_ext4_drop_inode+0x10/0x10 [ 198.836962][ T7017] iput+0x35/0x40 [ 198.840601][ T7017] ext4_orphan_cleanup+0x731/0x11e0 [ 198.846021][ T7017] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 198.851667][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.857418][ T7017] ? ext4_register_li_request+0xec/0x9b0 [ 198.863083][ T7017] ext4_fill_super+0x8db7/0xaf70 [ 198.868102][ T7017] ? __pfx_ext4_fill_super+0x10/0x10 [ 198.873435][ T7017] ? do_raw_spin_lock+0x12c/0x2b0 [ 198.878507][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.884266][ T7017] ? find_held_lock+0x2b/0x80 [ 198.889431][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.895507][ T7017] ? sb_set_blocksize+0x176/0x1d0 [ 198.900619][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.906287][ T7017] ? setup_bdev_super+0x369/0x730 [ 198.911355][ T7017] get_tree_bdev_flags+0x38c/0x620 [ 198.916727][ T7017] ? __pfx_ext4_fill_super+0x10/0x10 [ 198.922054][ T7017] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 198.927820][ T7017] ? apparmor_capable+0x114/0x1d0 [ 198.932855][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.938516][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.944190][ T7017] ? security_capable+0x7e/0x260 [ 198.949237][ T7017] vfs_get_tree+0x8e/0x340 [ 198.953695][ T7017] path_mount+0x7b9/0x23a0 [ 198.958155][ T7017] ? __pfx_path_mount+0x10/0x10 [ 198.963106][ T7017] ? putname+0x154/0x1a0 [ 198.967400][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.973048][ T7017] ? putname+0x154/0x1a0 [ 198.977359][ T7017] ? __x64_sys_mount+0x293/0x310 [ 198.982303][ T7017] __x64_sys_mount+0x293/0x310 [ 198.987194][ T7017] ? __pfx___x64_sys_mount+0x10/0x10 [ 198.992969][ T7017] do_syscall_64+0xcd/0xfa0 [ 198.997964][ T7017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.003898][ T7017] RIP: 0033:0x7f45a5f9066a [ 199.008428][ T7017] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.028106][ T7017] RSP: 002b:00007f45a6e9ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 199.036547][ T7017] RAX: ffffffffffffffda RBX: 00007f45a6e9eef0 RCX: 00007f45a5f9066a [ 199.044555][ T7017] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f45a6e9eeb0 [ 199.052562][ T7017] RBP: 0000200000000180 R08: 00007f45a6e9eef0 R09: 0000000001800700 [ 199.060574][ T7017] R10: 0000000001800700 R11: 0000000000000246 R12: 00002000000001c0 [ 199.068582][ T7017] R13: 00007f45a6e9eeb0 R14: 000000000000047c R15: 00002000000004c0 [ 199.076629][ T7017] [ 199.079672][ T7017] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 199.086943][ T7017] CPU: 1 UID: 0 PID: 7017 Comm: syz.6.348 Not tainted syzkaller #0 PREEMPT(full) [ 199.096137][ T7017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 199.106187][ T7017] Call Trace: [ 199.109476][ T7017] [ 199.112408][ T7017] dump_stack_lvl+0x3d/0x1f0 [ 199.117010][ T7017] vpanic+0x640/0x6f0 [ 199.121113][ T7017] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 199.127120][ T7017] panic+0xca/0xd0 [ 199.130870][ T7017] ? __pfx_panic+0x10/0x10 [ 199.135360][ T7017] check_panic_on_warn+0xab/0xb0 [ 199.140332][ T7017] __warn+0xf6/0x3c0 [ 199.144231][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.149878][ T7017] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 199.155892][ T7017] report_bug+0x3c3/0x580 [ 199.160231][ T7017] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 199.166255][ T7017] handle_bug+0x184/0x210 [ 199.170606][ T7017] exc_invalid_op+0x17/0x50 [ 199.175211][ T7017] asm_exc_invalid_op+0x1a/0x20 [ 199.180071][ T7017] RIP: 0010:ext4_xattr_inode_update_ref+0x4ec/0x610 [ 199.186689][ T7017] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 23 01 00 00 48 8b 73 40 44 89 e2 48 c7 c7 c0 4c a8 8b e8 55 17 ed fe 90 <0f> 0b 90 90 e9 d9 fe ff ff e8 56 de 2e ff 44 0f b6 2d 01 59 de 0d [ 199.206400][ T7017] RSP: 0018:ffffc90003507178 EFLAGS: 00010282 [ 199.212477][ T7017] RAX: 0000000000000000 RBX: ffff88804f42b268 RCX: ffffc9001c711000 [ 199.220450][ T7017] RDX: 0000000000080000 RSI: ffffffff817a9ef5 RDI: 0000000000000001 [ 199.228433][ T7017] RBP: ffffc90003507240 R08: 0000000000000001 R09: 0000000000000000 [ 199.236608][ T7017] R10: 0000000000000001 R11: 000000002d2d2d2d R12: 0000000000000002 [ 199.244580][ T7017] R13: 0000000000000000 R14: 1ffff920006a0e32 R15: ffff88804f42b458 [ 199.252563][ T7017] ? __warn_printk+0x1a5/0x350 [ 199.257364][ T7017] ? ext4_xattr_inode_update_ref+0x4eb/0x610 [ 199.263372][ T7017] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 199.269730][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.275376][ T7017] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 199.280863][ T7017] ext4_xattr_set_entry+0x158f/0x1f00 [ 199.286362][ T7017] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 199.292118][ T7017] ? xattr_find_entry+0x289/0x330 [ 199.297171][ T7017] ext4_xattr_ibody_set+0x3d6/0x5d0 [ 199.302380][ T7017] ext4_expand_extra_isize_ea+0x148c/0x1ab0 [ 199.308293][ T7017] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 199.314555][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.320203][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.325848][ T7017] ? dquot_initialize_needed+0x183/0x2a0 [ 199.331491][ T7017] __ext4_expand_extra_isize+0x346/0x480 [ 199.337151][ T7017] __ext4_mark_inode_dirty+0x544/0x870 [ 199.342631][ T7017] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 199.348624][ T7017] ? __pfx___might_resched+0x10/0x10 [ 199.353933][ T7017] ? ext4_journal_check_start+0x22b/0x340 [ 199.359662][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.365307][ T7017] ? __ext4_journal_start_sb+0x19e/0x690 [ 199.370955][ T7017] ? ext4_evict_inode+0x5cf/0x18e0 [ 199.376089][ T7017] ext4_evict_inode+0x74e/0x18e0 [ 199.381045][ T7017] ? __pfx_ext4_evict_inode+0x10/0x10 [ 199.386430][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.392374][ T7017] ? __pfx_ext4_evict_inode+0x10/0x10 [ 199.397803][ T7017] evict+0x3e6/0x920 [ 199.401718][ T7017] ? __pfx_evict+0x10/0x10 [ 199.406146][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.411812][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.417472][ T7017] iput.part.0+0x6a9/0xb00 [ 199.421898][ T7017] ? __pfx_ext4_drop_inode+0x10/0x10 [ 199.427190][ T7017] iput+0x35/0x40 [ 199.430919][ T7017] ext4_orphan_cleanup+0x731/0x11e0 [ 199.436140][ T7017] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 199.441801][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.447450][ T7017] ? ext4_register_li_request+0xec/0x9b0 [ 199.453109][ T7017] ext4_fill_super+0x8db7/0xaf70 [ 199.458180][ T7017] ? __pfx_ext4_fill_super+0x10/0x10 [ 199.463486][ T7017] ? do_raw_spin_lock+0x12c/0x2b0 [ 199.468519][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.474164][ T7017] ? find_held_lock+0x2b/0x80 [ 199.478866][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.484516][ T7017] ? sb_set_blocksize+0x176/0x1d0 [ 199.489593][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.495356][ T7017] ? setup_bdev_super+0x369/0x730 [ 199.500491][ T7017] get_tree_bdev_flags+0x38c/0x620 [ 199.505644][ T7017] ? __pfx_ext4_fill_super+0x10/0x10 [ 199.510950][ T7017] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 199.516605][ T7017] ? apparmor_capable+0x114/0x1d0 [ 199.521654][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.527294][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.532942][ T7017] ? security_capable+0x7e/0x260 [ 199.537898][ T7017] vfs_get_tree+0x8e/0x340 [ 199.542327][ T7017] path_mount+0x7b9/0x23a0 [ 199.546756][ T7017] ? __pfx_path_mount+0x10/0x10 [ 199.551617][ T7017] ? putname+0x154/0x1a0 [ 199.555958][ T7017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.561810][ T7017] ? putname+0x154/0x1a0 [ 199.566068][ T7017] ? __x64_sys_mount+0x293/0x310 [ 199.571010][ T7017] __x64_sys_mount+0x293/0x310 [ 199.575878][ T7017] ? __pfx___x64_sys_mount+0x10/0x10 [ 199.581173][ T7017] do_syscall_64+0xcd/0xfa0 [ 199.585695][ T7017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.591603][ T7017] RIP: 0033:0x7f45a5f9066a [ 199.596020][ T7017] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.615666][ T7017] RSP: 002b:00007f45a6e9ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 199.624086][ T7017] RAX: ffffffffffffffda RBX: 00007f45a6e9eef0 RCX: 00007f45a5f9066a [ 199.632145][ T7017] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f45a6e9eeb0 [ 199.640290][ T7017] RBP: 0000200000000180 R08: 00007f45a6e9eef0 R09: 0000000001800700 [ 199.648275][ T7017] R10: 0000000001800700 R11: 0000000000000246 R12: 00002000000001c0 [ 199.656679][ T7017] R13: 00007f45a6e9eeb0 R14: 000000000000047c R15: 00002000000004c0 [ 199.664662][ T7017] [ 199.667921][ T7017] Kernel Offset: disabled [ 199.672235][ T7017] Rebooting in 86400 seconds..