last executing test programs: 13.443732226s ago: executing program 0 (id=1240): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x4b4d, &(0x7f00000000c0)) 12.439816769s ago: executing program 0 (id=1254): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', '', [], 0xa, "0ba390a3331bae805ac9fb83c1716b66c3e8a7f93349549e021bd54d3ba356b0dc477bd67986367c711846b41463517570d6c710c0492f064e30aeb6c6e7923ddab832eb46028bdb221c815427bdd82b94e7feb58372f03c2e61bddf242e4524a02eb750f5d87d55ddd36141a3d3587d44951befc5dcf30cf663b3dbba51465302ebf57428"}, 0x89) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={0x0}) 8.189106482s ago: executing program 0 (id=1258): r0 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0xf0b, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x60}}, 0x0) 7.99950881s ago: executing program 0 (id=1261): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1001}, 0x4) sendmmsg(r5, &(0x7f0000007fc0), 0x2d, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143ffd, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r6, &(0x7f0000000180), 0x20000000}, 0x20) 7.771349691s ago: executing program 0 (id=1268): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0xffffffffffffffa7, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3], 0x48}}, 0x0) 5.194530679s ago: executing program 0 (id=1274): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000100)={[{@jqfmt_vfsv0}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") chdir(&(0x7f0000000140)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r1, &(0x7f0000000140)='./file1\x00', r1, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x5) 5.070155761s ago: executing program 3 (id=1275): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x700, 0x12) 4.892542227s ago: executing program 3 (id=1278): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 4.582061206s ago: executing program 3 (id=1281): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2300000c0000000000000c0000000c00018008000100", @ANYRES32=r4, @ANYBLOB="0c0003800800038004"], 0x2c}}, 0x0) 4.394064863s ago: executing program 3 (id=1283): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e7ec6c7a536a08d21e53aa4e60cad0bd8eb60a00943"], 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RLERRORu(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="62e660b98bdd1598f8ad8697227d8b982b425215aa251fbca367cfe0e35e38616913614e23ca1a", @ANYRES32, @ANYRES8=r4, @ANYRESDEC=r1], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x0, 0xb00, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc}]}], {0x14, 0x10}}, 0xa0}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000001240)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@nolazytime}, {}]}, 0x8, 0x60b, &(0x7f0000001b40)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) mount$tmpfs(0x0, &(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00), 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB='fscontext=unconMinad_u\"\x00']) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r9) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r10 = inotify_init1(0x0) fcntl$setown(r10, 0x8, 0xffffffffffffffff) fcntl$getownex(r10, 0x10, &(0x7f0000000140)={0x0, 0x0}) r12 = syz_open_procfs(r11, &(0x7f0000000600)='fd/4\x00') open_by_handle_at(r12, &(0x7f0000000640)=@shmem={0xc, 0x1, {0x30}}, 0x9e4b) 3.929126757s ago: executing program 2 (id=1287): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r1, 0x0) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={0x0}) 3.605730666s ago: executing program 2 (id=1291): socket$inet(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe(&(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2.37612916s ago: executing program 3 (id=1292): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000100)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[@ANYBLOB="6d61703d6f66662c6d61703d61636f726e006e6f726f636b2c73657373696f6e3d307830203030303030303030332c636865636b3d7209f50fd18a6059846f726f636b416e0400000000000000c86b2c6d6f44653d30783030303030303090cf5cee73e4fdbccf1ad8f6238d714830303030303030756e686964652c6d61703d61636f726e2c6f76657272696467726f636b706572916964652c00add51ea2b35249a135fa479f9069028397e9808a385f6e0c9ab44fb55e327ad812fe293a6347f7f50263af07e2638e5c5522fc046bdeb75ac5ae4dfa74f42b394b1587068ecfa5acd43d2ca29a5d67adb9bfb87ce6ccb875b9ae05ac0000000000"], 0xfd, 0x6b1, &(0x7f0000000280)="$eJzs3V1vG1kdx/Hf2E7iZFFVAapWVbc5bVkpFcW1nW2qqFzsMBknA7bHmnEgkZBWhSarqk6Btkg0NyU3PEjLG+Bub7jgRazE9b4LuAJpBXcgJDRoZjx+iB9St0m6D99P1Ho8c+ac/5zj+t+JPWcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABkORvlcsVS3Wtu75jJnI3Ab2RP8hrZntY2p5vpws1pbc7F7UpW/EfFot5OV7/9zX6RS/Ff13UlfXZFxfihqMO3Ll28941CLtt/SsCvQrNW+PT54aP7nc7ek5com9fM1b9Jyr1EoU236YW+17A3XeOFvllfWyvf3qqFpubV3XA3bLsN4wRuru0HZsW5aSrr66vGLe36283NDbvuZivvfqdaLq+Z7y+kAy2pFDpbXr3uNTeTMvHmuMxd89GP0wKu3TBm/2Fnb3Ugnhfj+jguVDnpSOJC1ZMKVcvVaqVSrVbW7qzfuVsuF0ZWlGNWuUcjJU79RYsvmNN9AwdeQy7O/3+1pLqKampbOzJjfxxtKJCvxoTtXVn+f/e2O7XdwfyfZfm5/ubLSvL/1fTZ1Un5f0IsRibZYdwWa8L62X7mkoiMnuq5DvVI99VRR3t6cgp1G5nlU6nlHH425aopT6F8eWrITtaY7hqjda1pTWV9oC3VFMqoJk91uQq1q1BtufEraj4eLVe22vIVyGhFjm7KqKJ1rWtVRq5K2pWvbTW1qQ3Z+ncURft6mPT7aj+m/PGRV1aoMuEgFlTIXnd7qk452kn5/ycv0r27+b9M/v+qSl8HC+nDp9PKAJ8DUff8f0bLZxMNAAAAAAA4C1by23cr+VT+HUmRal7dLb/psAAAAAAAwCmyFC3oiqz0W/l6Rxbn/wAAAAAAfNlYyTV2lqSl5Ev9Vv9yqZf5JUD+HEIEAAAAAACvKbny/+q8FCWTVizLmun8HwAAAAAAfAH8bmCO/UI2x26Ufayfk7T8twXrk38uKJizjlo737IO7HiLfdAtM/INgHbtsnWhO1Fv8jAvKXnmuFesbmvdSTB78w5+tn/SXP9WcCyA+fxgBRMCsOKW1wrdZ/pI19JdrnXnmX9wmFOyJW1lqebV3ZLj1+9VZNsXcm13p/3Lxw9/JQW949x/2Nkr/fRnnQdJLEfxqqODuNIXQ+HkxndGP5ZnyXwLyTUX4454UbWsyd83G0tW0m45O/687IPcYEPTBqDf5m90PR2z61FadumwN+O+JS0nkz9USsmQDR19MGf1o6gcP/JxAzEhimISxY20zI2VG+lDFl9cT84qfjsvVUujYzAURXUwipP7wvrXSF9Mi0JWMe6L1TiKv8QVHYviR5+kO6/OFsXIiADAm7Lfz0LJJOYjeTdLD9mb2ivlnZOz+/vD2f3ZH6M0Q+WlQveziamtFBW/o69YSR6aTyd0L1we845eLv0niiL7QlGD7+j/i1K9HPty2e0oiqLjx/rn/j2QumGPRPHfKIruVZJM8odjWfXjeIePJ7Yb1qv5uAtvPzv4eTIBfuzDvQ/3Hlerq2vl98rlO1XNJf9V6D7kRe4BAIw4+R47SYnclBLWe7qW1nHtwT/eTZeGMt7Xu18pyHT0QLeyWwgsj691aeBrCLfSs1bp+lL6uHRoLl28tygNlLUKyR1ebk08q0ty6UC91V7Z7L5Dx88A+2VXz3IIAAA4d9cn5GFpKP9rOP8Xh/L/La2kJVYujz3vHs7l3bPj3in9pLKVk4N//5Q7AwCArwg3+Mxaav/WCgKv9UFlfb1it7dcE/jOD0zgbWy6xmu23cDZspubrmkFftt3/LppBVrwFt3QhNutlh+0Tc0PTMsPvZ3kzu+me+v30G3YzbbnhK26a4eucfxm23baZsMLHdPa/l7dC7fcINk5bLmOV/Mcu+35TRP624HjlowJXXegoLfhNttezYsXm6YVeA072DU/9OvbDddsuKETeK22n1aYteU1a37QSKotKZr5RocAAHwZPX1++Oh+p7P35PjCYnxqnq450oQyowvzYypkjiAAAD5n+ul6hp2KZxgQAAAAAAAAAAAAAAAAAAAAAAAYcfIlfTMuzI27WFDqrfnFhe4a/Vr9SwxH6rF02oHNspCbda/skojDR59OKbzYW5N1/2CZo1ka1UXplQ/w71+T3krWKF1TOP0+XJwyuGex8N39tEcn95gm9NhCbywKp//PIV54/KcJm6IoiqbvvjDch/PTDnB4oSDpyfxrDMH5vxcBOF//DwAA//9wiz37") 2.180268649s ago: executing program 2 (id=1293): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202d437b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000003c0)={@val, @void, @eth={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x2000, 0x0, 0x2f, 0x0, @private, @multicast1, {[@ssrr={0x89, 0x0, 0xed, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010100]}, @cipso={0x86, 0x0, 0xffffffffffffffff, [{0x5, 0x0, "3ab5d8ab40acf5"}, {0x73bc398533ed021, 0x0, "354e7ab6d51c319a"}]}]}}, {0x0, 0x6558, 0x12, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "0ae26a316425"}}}}}}}, 0x16) 1.83659505s ago: executing program 1 (id=1294): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}, 0x4}, 0x80, 0x0}, 0x0) 1.698179783s ago: executing program 4 (id=1295): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendmsg$inet6(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ac0)="2f6c62fdf406a1a017d356c35c10e4d1be87033978d275293527325d1cd47e250c86", 0x22}], 0x1}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000340), 0x4) 1.679106175s ago: executing program 1 (id=1296): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1001}, 0x4) sendmmsg(r5, &(0x7f0000007fc0), 0x2d, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000180), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000180), 0x0}, 0x20) 1.498720902s ago: executing program 4 (id=1297): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) 1.39816532s ago: executing program 1 (id=1298): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x8, 0x7fff, 0x0, 0xffffffffffffffff, 0xffffffbc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) fchmod(0xffffffffffffffff, 0x0) 1.156100903s ago: executing program 4 (id=1299): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0xee00, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0x0, 0x0) 1.092494869s ago: executing program 1 (id=1300): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$kcm(0x2, 0xa, 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 878.120608ms ago: executing program 4 (id=1301): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) io_setup(0x3, &(0x7f0000000340)) 679.903777ms ago: executing program 4 (id=1302): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="350b00000000000000000d000f000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 652.52062ms ago: executing program 2 (id=1303): socket$inet(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe(&(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 461.095397ms ago: executing program 1 (id=1304): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 454.757668ms ago: executing program 4 (id=1305): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) pause() recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8001) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) 414.442432ms ago: executing program 2 (id=1306): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setfsgid(0xee00) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400005, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}, 0x4}, 0x80, 0x0}, 0x0) 154.055506ms ago: executing program 2 (id=1307): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(0x0, 0x100000000000600d, 0x1) openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0) 112.607329ms ago: executing program 1 (id=1308): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1001}, 0x4) sendmmsg(r5, &(0x7f0000007fc0), 0x2d, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000180), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000180), 0x0}, 0x20) 0s ago: executing program 3 (id=1309): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xffd, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000001c0)={0x8}, 0x10) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040)={0x80, 0x3, 0x1, 0x521}, 0x8) sendto$inet(r2, &(0x7f0000000300)="ab", 0x1a000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) kernel console output (not intermixed with test programs): .824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837f37def9 code=0x7ffc0000 [ 433.685394][ T3654] Bluetooth: hci0: command tx timeout [ 433.703947][ T6992] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.711374][ T6992] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.740865][ T6992] device bridge_slave_0 entered promiscuous mode [ 433.747413][ T27] audit: type=1326 audit(1727157331.232:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.4.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837f37def9 code=0x7ffc0000 [ 433.789226][ T6917] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.802278][ T6917] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.805322][ T27] audit: type=1326 audit(1727157331.232:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.4.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f837f37def9 code=0x7ffc0000 [ 433.819966][ T6917] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.856021][ T6917] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.863766][ T27] audit: type=1326 audit(1727157331.232:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.4.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837f37def9 code=0x7ffc0000 [ 433.876150][ T6961] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 433.908690][ T6961] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 433.923475][ T27] audit: type=1326 audit(1727157331.232:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.4.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837f37def9 code=0x7ffc0000 [ 433.946112][ T6992] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.953248][ T6992] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.961953][ T6992] device bridge_slave_1 entered promiscuous mode [ 433.972111][ T3646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 433.981960][ T3646] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 433.990902][ T3646] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 434.031570][ T3646] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 434.039991][ T3646] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 434.047528][ T3646] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 434.051407][ T6992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.096792][ T6992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.215583][ T6992] team0: Port device team_slave_0 added [ 434.264337][ T6992] team0: Port device team_slave_1 added [ 434.297860][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.324532][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.392377][ T6992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.405877][ T6992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.434154][ T6992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.456554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 434.506259][ T6992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.513421][ T6992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.540210][ T6992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.646674][ T3851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.655536][ T3851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.684891][ T6992] device hsr_slave_0 entered promiscuous mode [ 434.764129][ T7031] nfs4: Unknown parameter 'context' [ 435.777361][ T3646] Bluetooth: hci0: command tx timeout [ 436.085961][ T3646] Bluetooth: hci3: command tx timeout [ 437.753497][ T6992] device hsr_slave_1 entered promiscuous mode [ 437.765148][ T6992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 437.772745][ T6992] Cannot create hsr debugfs directory [ 437.836360][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 437.844023][ T3646] Bluetooth: hci0: command tx timeout [ 438.081839][ T6961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.111225][ T7036] loop0: detected capacity change from 0 to 2048 [ 438.164195][ T3646] Bluetooth: hci3: command tx timeout [ 438.191211][ T7036] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 438.218595][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 438.228122][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 438.254607][ T6961] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.321094][ T7036] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 438.418768][ T6917] EXT4-fs (loop0): unmounting filesystem. [ 438.498446][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 438.540397][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 438.572614][ T3999] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.579810][ T3999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.593262][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 438.602056][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 438.611180][ T3999] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.618309][ T3999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.665836][ T7047] loop0: detected capacity change from 0 to 512 [ 438.672791][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 438.681226][ T7047] EXT4-fs: Ignoring removed oldalloc option [ 438.706789][ T7027] chnl_net:caif_netlink_parms(): no params data found [ 438.722185][ T7047] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.828: Parent and EA inode have the same ino 15 [ 438.754951][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 438.763823][ T7047] EXT4-fs (loop0): Remounting filesystem read-only [ 438.773998][ T7047] EXT4-fs error (device loop0): ext4_evict_inode:290: comm syz.0.828: couldn't truncate inode 15 (err -30) [ 438.795456][ T7047] EXT4-fs (loop0): 1 orphan inode deleted [ 438.801238][ T7047] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 438.877391][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 438.899271][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 438.917476][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 438.919512][ T6917] EXT4-fs (loop0): unmounting filesystem. [ 439.025545][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 439.033594][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 439.055609][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 439.108215][ T7058] loop4: detected capacity change from 0 to 1024 [ 439.145632][ T7058] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 439.184473][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 439.197948][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 439.305077][ T6857] EXT4-fs (loop4): unmounting filesystem. [ 439.309358][ T6961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 439.322480][ T6961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 439.419791][ T7027] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.484063][ T7068] nfs4: Unknown parameter 'context' [ 439.485797][ T7027] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.923986][ T3646] Bluetooth: hci0: command tx timeout [ 440.246306][ T3646] Bluetooth: hci3: command tx timeout [ 440.247712][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.280630][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.692365][ T7027] device bridge_slave_0 entered promiscuous mode [ 441.745833][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 441.763539][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 441.852743][ T7027] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.877166][ T7027] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.891626][ T7027] device bridge_slave_1 entered promiscuous mode [ 442.324394][ T3654] Bluetooth: hci3: command tx timeout [ 442.576706][ T7084] loop0: detected capacity change from 0 to 512 [ 442.583518][ T7084] EXT4-fs: Ignoring removed oldalloc option [ 442.601765][ T7027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.661398][ T27] audit: type=1326 audit(1727157340.242:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837f37def9 code=0x7ffc0000 [ 442.687759][ T27] audit: type=1326 audit(1727157340.272:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f837f37def9 code=0x7ffc0000 [ 442.695870][ T7084] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.839: Parent and EA inode have the same ino 15 [ 442.710255][ T27] audit: type=1326 audit(1727157340.272:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837f37def9 code=0x7ffc0000 [ 442.746922][ T27] audit: type=1326 audit(1727157340.272:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f837f37def9 code=0x7ffc0000 [ 442.759761][ T7084] EXT4-fs (loop0): Remounting filesystem read-only [ 442.769521][ T27] audit: type=1326 audit(1727157340.272:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837f37def9 code=0x7ffc0000 [ 442.799180][ T27] audit: type=1326 audit(1727157340.272:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f837f37def9 code=0x7ffc0000 [ 442.801822][ T7084] EXT4-fs error (device loop0): ext4_evict_inode:290: comm syz.0.839: couldn't truncate inode 15 (err -30) [ 442.821930][ T27] audit: type=1326 audit(1727157340.272:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837f37def9 code=0x7ffc0000 [ 442.821975][ T27] audit: type=1326 audit(1727157340.272:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f837f37def9 code=0x7ffc0000 [ 442.822011][ T27] audit: type=1326 audit(1727157340.272:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837f37def9 code=0x7ffc0000 [ 442.822048][ T27] audit: type=1326 audit(1727157340.272:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f837f37def9 code=0x7ffc0000 [ 442.934014][ T7084] EXT4-fs (loop0): 1 orphan inode deleted [ 442.954617][ T7084] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 442.973149][ T7027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.985885][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 442.997202][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 443.009180][ T6961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.059593][ T7027] team0: Port device team_slave_0 added [ 443.080746][ T3853] device hsr_slave_0 left promiscuous mode [ 443.087755][ T3853] device hsr_slave_1 left promiscuous mode [ 443.094464][ T3853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.101948][ T3853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.110290][ T3853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.121443][ T3853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.129315][ T3853] device bridge_slave_1 left promiscuous mode [ 443.135902][ T3853] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.145202][ T3853] device bridge_slave_0 left promiscuous mode [ 443.151455][ T3853] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.165368][ T3853] device hsr_slave_0 left promiscuous mode [ 443.171822][ T3853] device hsr_slave_1 left promiscuous mode [ 443.178285][ T3853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.185958][ T3853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.193624][ T3853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.201333][ T3853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.210026][ T3853] device bridge_slave_1 left promiscuous mode [ 443.216515][ T3853] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.225457][ T3853] device bridge_slave_0 left promiscuous mode [ 443.231637][ T3853] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.276867][ T3853] device veth1_macvtap left promiscuous mode [ 443.282990][ T3853] device veth0_macvtap left promiscuous mode [ 443.289664][ T3853] device veth1_vlan left promiscuous mode [ 443.295779][ T3853] device veth0_vlan left promiscuous mode [ 443.302794][ T3853] device veth1_macvtap left promiscuous mode [ 443.309026][ T3853] device veth0_macvtap left promiscuous mode [ 443.315356][ T3853] device veth1_vlan left promiscuous mode [ 443.321201][ T3853] device veth0_vlan left promiscuous mode [ 443.867259][ T7098] nfs4: Unknown parameter 'context' [ 446.149051][ T3853] team0 (unregistering): Port device team_slave_1 removed [ 446.227254][ T3853] team0 (unregistering): Port device team_slave_0 removed [ 446.355655][ T3853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.437572][ T3853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.883121][ T3853] bond0 (unregistering): Released all slaves [ 447.329535][ T3853] team0 (unregistering): Port device team_slave_1 removed [ 447.370045][ T3853] team0 (unregistering): Port device team_slave_0 removed [ 447.409090][ T3853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.450801][ T3853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.876792][ T3853] bond0 (unregistering): Released all slaves [ 447.978382][ T7027] team0: Port device team_slave_1 added [ 448.020742][ T6917] EXT4-fs (loop0): unmounting filesystem. [ 448.022269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 448.035923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 448.081059][ T7027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.089950][ T7027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.142726][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.846'. [ 448.174364][ T7027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.208540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 448.228365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 448.246991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 448.264687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 448.273150][ T7027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.280598][ T7027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.308346][ T7027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.320408][ T6961] device veth0_vlan entered promiscuous mode [ 448.362385][ T6961] device veth1_vlan entered promiscuous mode [ 448.466956][ T7027] device hsr_slave_0 entered promiscuous mode [ 448.490772][ T7027] device hsr_slave_1 entered promiscuous mode [ 448.533324][ T6992] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 448.586032][ T6992] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 448.602217][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 448.628867][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 448.656771][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 448.667308][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 448.696036][ T6992] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 448.714817][ T6992] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 448.734319][ T6961] device veth0_macvtap entered promiscuous mode [ 448.763522][ T7121] loop0: detected capacity change from 0 to 512 [ 448.776174][ T6961] device veth1_macvtap entered promiscuous mode [ 448.785096][ T7121] EXT4-fs: Ignoring removed oldalloc option [ 448.827140][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.844744][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.863193][ T7121] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.853: Parent and EA inode have the same ino 15 [ 448.865851][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.892419][ T7121] EXT4-fs (loop0): Remounting filesystem read-only [ 448.894547][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.909696][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.920630][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.932525][ T6961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.937647][ T7121] EXT4-fs error (device loop0): ext4_evict_inode:290: comm syz.0.853: couldn't truncate inode 15 (err -30) [ 448.946102][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.961791][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.973361][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.981450][ T7121] EXT4-fs (loop0): 1 orphan inode deleted [ 448.983990][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.984008][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.997641][ T7121] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 448.999758][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.030615][ T6961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.062459][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 449.077920][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 449.095204][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 449.112597][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 449.121771][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 449.133483][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 449.145965][ T6961] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.164118][ T6961] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.172862][ T6961] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.182188][ T6961] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.289084][ T6917] EXT4-fs (loop0): unmounting filesystem. [ 449.299468][ T7027] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.320062][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.858'. [ 449.439621][ T3803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.473886][ T3803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.494661][ T6992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.531278][ T7027] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.565337][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 449.647704][ T7027] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.667224][ T3803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.681816][ T3803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.691838][ T6992] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.714396][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 449.724916][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 449.733791][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 449.907166][ T7027] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.951375][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 449.962979][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 449.971913][ T3875] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.979058][ T3875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.987000][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 450.022473][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 450.046229][ T3875] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.053497][ T3875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.076588][ T7144] loop4: detected capacity change from 0 to 164 [ 450.089595][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 450.675060][ T7153] loop2: detected capacity change from 0 to 512 [ 450.682249][ T7153] EXT4-fs: Ignoring removed oldalloc option [ 450.722217][ T7153] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.866: Parent and EA inode have the same ino 15 [ 450.740798][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 450.757780][ T7153] EXT4-fs (loop2): Remounting filesystem read-only [ 450.784872][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.867'. [ 450.801916][ T7153] EXT4-fs error (device loop2): ext4_evict_inode:290: comm syz.2.866: couldn't truncate inode 15 (err -30) [ 450.816803][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 450.853591][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 450.862203][ T7153] EXT4-fs (loop2): 1 orphan inode deleted [ 450.887957][ T7153] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 450.903146][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 450.938396][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 450.957381][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 450.981196][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 451.017004][ T6992] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 451.053886][ T6992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 451.110721][ T27] kauditd_printk_skb: 218 callbacks suppressed [ 451.110738][ T27] audit: type=1326 audit(1727157348.692:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.0.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 451.144415][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 451.171934][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 451.195602][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 451.224586][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 451.238237][ T6961] EXT4-fs (loop2): unmounting filesystem. [ 451.256289][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 451.268169][ T27] audit: type=1326 audit(1727157348.762:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.0.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 451.370667][ T27] audit: type=1326 audit(1727157348.762:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.0.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 451.433454][ T27] audit: type=1326 audit(1727157348.762:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.0.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 451.573567][ T7166] netlink: 28 bytes leftover after parsing attributes in process `syz.0.871'. [ 451.584148][ T7166] netlink: 28 bytes leftover after parsing attributes in process `syz.0.871'. [ 451.694177][ T7027] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 451.745873][ T27] audit: type=1326 audit(1727157349.332:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7173 comm="syz.0.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 451.776100][ T27] audit: type=1326 audit(1727157349.332:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7173 comm="syz.0.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 451.798781][ T7027] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 451.805982][ T27] audit: type=1326 audit(1727157349.362:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7173 comm="syz.0.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 451.845127][ T7172] batman_adv: batadv0: Adding interface: dummy0 [ 451.862340][ T7172] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.893052][ T27] audit: type=1326 audit(1727157349.362:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7173 comm="syz.0.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 451.894276][ T7172] batman_adv: batadv0: Interface activated: dummy0 [ 451.923912][ T27] audit: type=1326 audit(1727157349.362:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7173 comm="syz.0.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 451.948283][ T7027] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 451.960829][ T27] audit: type=1326 audit(1727157349.382:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7173 comm="syz.0.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 452.026661][ T7027] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 452.057830][ T6992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.113127][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 452.134906][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 452.213256][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 452.226278][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 452.258831][ T7188] loop0: detected capacity change from 0 to 512 [ 452.279074][ T7185] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 452.299617][ T7188] EXT4-fs: Ignoring removed oldalloc option [ 452.339336][ T7188] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.877: Parent and EA inode have the same ino 15 [ 452.376762][ T7188] EXT4-fs (loop0): Remounting filesystem read-only [ 452.383456][ T7188] EXT4-fs error (device loop0): ext4_evict_inode:290: comm syz.0.877: couldn't truncate inode 15 (err -30) [ 452.434011][ T7188] EXT4-fs (loop0): 1 orphan inode deleted [ 452.439806][ T7188] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 452.446368][ T6992] device veth0_vlan entered promiscuous mode [ 452.465771][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 452.495575][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 452.515532][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 452.536167][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 452.551818][ T7195] loop4: detected capacity change from 0 to 128 [ 452.593542][ T7195] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 452.607172][ T7195] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 452.688775][ T7027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.745925][ T9] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 452.746836][ T6917] EXT4-fs (loop0): unmounting filesystem. [ 452.761301][ T6992] device veth1_vlan entered promiscuous mode [ 452.825530][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 452.841483][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 452.852306][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 453.034451][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 453.837532][ T7027] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.953620][ T6992] device veth0_macvtap entered promiscuous mode [ 453.965961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 453.988092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 454.027779][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.035092][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.127747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 454.167729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 454.199234][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.206472][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.214024][ T7213] loop0: detected capacity change from 0 to 2048 [ 454.227562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 454.245186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 454.261437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 454.262224][ T7213] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 454.272360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 454.294467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 454.311142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 454.364488][ T6917] EXT4-fs (loop0): unmounting filesystem. [ 454.380515][ T6992] device veth1_macvtap entered promiscuous mode [ 454.483406][ T3853] device hsr_slave_0 left promiscuous mode [ 454.499240][ T3853] device hsr_slave_1 left promiscuous mode [ 454.522633][ T3853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.546328][ T3853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.571874][ T3853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.583943][ T3853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.602364][ T3853] device bridge_slave_1 left promiscuous mode [ 454.611835][ T3853] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.630838][ T3853] device bridge_slave_0 left promiscuous mode [ 454.655438][ T3853] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.726196][ T3853] device veth1_macvtap left promiscuous mode [ 454.732293][ T3853] device veth0_macvtap left promiscuous mode [ 454.752274][ T3853] device veth1_vlan left promiscuous mode [ 454.764768][ T3853] device veth0_vlan left promiscuous mode [ 455.469576][ T7235] loop0: detected capacity change from 0 to 2048 [ 455.750713][ T7235] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 455.921393][ T6917] EXT4-fs (loop0): unmounting filesystem. [ 456.056902][ T7245] No such timeout policy "syz0" [ 456.196023][ T7253] loop0: detected capacity change from 0 to 512 [ 456.235973][ T7253] EXT4-fs (loop0): orphan cleanup on readonly fs [ 456.263316][ T7253] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 456.284260][ T7253] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.900: invalid indirect mapped block 2683928664 (level 1) [ 456.309132][ T7253] EXT4-fs (loop0): Remounting filesystem read-only [ 456.320936][ T7253] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 456.338611][ T7253] EXT4-fs (loop0): 1 truncate cleaned up [ 456.344733][ T7253] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 456.411326][ T6917] EXT4-fs (loop0): unmounting filesystem. [ 456.551814][ T7258] netlink: 36 bytes leftover after parsing attributes in process `syz.0.902'. [ 456.563021][ T3853] team0 (unregistering): Port device team_slave_1 removed [ 456.633579][ T3853] team0 (unregistering): Port device team_slave_0 removed [ 456.725509][ T7261] nfs4: Unknown parameter 'context' [ 457.842924][ T3853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.914572][ T3853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.075828][ T7268] loop2: detected capacity change from 0 to 2048 [ 458.130805][ T7268] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 458.209411][ T6961] EXT4-fs (loop2): unmounting filesystem. [ 458.368192][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 458.368209][ T27] audit: type=1326 audit(1727157355.952:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.2.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5377def9 code=0x7ffc0000 [ 458.397544][ T27] audit: type=1326 audit(1727157355.972:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.2.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5377def9 code=0x7ffc0000 [ 458.419845][ T27] audit: type=1326 audit(1727157355.972:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.2.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f4a5377def9 code=0x7ffc0000 [ 458.444682][ T27] audit: type=1326 audit(1727157355.972:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.2.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5377def9 code=0x7ffc0000 [ 458.620179][ T3853] bond0 (unregistering): Released all slaves [ 458.698215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 458.711554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 458.719973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 458.728475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 458.738305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 458.756208][ T7264] netlink: 96 bytes leftover after parsing attributes in process `syz.0.904'. [ 458.767575][ T7277] netlink: 28 bytes leftover after parsing attributes in process `syz.2.909'. [ 458.783867][ T7277] netlink: 28 bytes leftover after parsing attributes in process `syz.2.909'. [ 458.811313][ T7027] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 458.851225][ T7027] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 458.908737][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.945533][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.961833][ T7281] netlink: 36 bytes leftover after parsing attributes in process `syz.4.911'. [ 458.990820][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.010410][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.033045][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.057376][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.077285][ T6992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.142083][ T7289] nfs4: Unknown parameter 'context' [ 459.567314][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 461.855845][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 462.934683][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 462.943217][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 462.952806][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 462.962719][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 462.972591][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 463.007243][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.071794][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.104912][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.143772][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.180934][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.199855][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.212722][ T7301] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 463.212984][ T6992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.248254][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 463.261835][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 463.281639][ T6992] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.312134][ T6992] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.330047][ T6992] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.341125][ T6992] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.607646][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 463.621431][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 464.807137][ T7027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.904605][ T7315] netlink: 36 bytes leftover after parsing attributes in process `syz.4.922'. [ 465.119195][ T7318] nfs4: Unknown parameter 'context' [ 467.349521][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 468.368683][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 468.447799][ T7321] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 468.449113][ T7320] IPVS: stopping master sync thread 7321 ... [ 468.531438][ T7032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.545893][ T7032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.567583][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 468.586500][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 468.619395][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 468.639897][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 468.649510][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 468.663574][ T7027] device veth0_vlan entered promiscuous mode [ 468.710554][ T3875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.728630][ T7027] device veth1_vlan entered promiscuous mode [ 468.743128][ T3875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.799074][ T3853] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 468.874362][ T3853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 468.896666][ T3853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 468.913908][ T27] audit: type=1326 audit(1727157366.492:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.4.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837f37def9 code=0x7ffc0000 [ 468.916852][ T7027] device veth0_macvtap entered promiscuous mode [ 468.962147][ T27] audit: type=1326 audit(1727157366.502:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.4.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837f37def9 code=0x7ffc0000 [ 469.029477][ T7027] device veth1_macvtap entered promiscuous mode [ 469.033544][ T27] audit: type=1326 audit(1727157366.502:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.4.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f837f37def9 code=0x7ffc0000 [ 469.072043][ T7027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.102725][ T7027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.122743][ T27] audit: type=1326 audit(1727157366.502:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.4.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837f37def9 code=0x7ffc0000 [ 469.224684][ T7345] netlink: 36 bytes leftover after parsing attributes in process `syz.4.933'. [ 469.243825][ T27] audit: type=1326 audit(1727157366.502:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.4.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837f37def9 code=0x7ffc0000 [ 469.271934][ T7027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.314984][ T7027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.337924][ T7027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.619591][ T7354] nfs4: Unknown parameter 'context' [ 469.658064][ T7027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.821649][ T7027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.947837][ T7027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.996965][ T7027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.046038][ T7027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.063308][ T7027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.073257][ T7027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.083970][ T7027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.093861][ T7027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.104367][ T7027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.146127][ T7027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.184181][ T7027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.232715][ T7027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.254113][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 470.272060][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 470.302495][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 470.321929][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 470.359320][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 470.378525][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 470.397696][ T7370] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 470.400405][ T7027] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.439870][ T7027] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.459178][ T7027] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.498510][ T7027] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.528696][ T7374] Driver unsupported XDP return value 0 on prog (id 367) dev N/A, expect packet loss! [ 470.662534][ T3803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.694194][ T3803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.718114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 470.880957][ T7384] netlink: 36 bytes leftover after parsing attributes in process `syz.3.947'. [ 470.898176][ T3803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.954169][ T3803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.605637][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 471.939477][ T7391] nfs4: Unknown parameter 'context' [ 474.930486][ T7397] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 474.940882][ T7396] IPVS: stopping master sync thread 7397 ... [ 475.043980][ T7399] 9pnet_fd: Insufficient options for proto=fd [ 475.225130][ T7412] netlink: 'syz.2.958': attribute type 2 has an invalid length. [ 476.769581][ T7440] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 477.666899][ T7444] nfs4: Unknown parameter 'context' [ 481.848646][ T7450] 9pnet_fd: Insufficient options for proto=fd [ 481.981663][ T7454] smc: net device bond0 applied user defined pnetid SYZ0 [ 481.991075][ T27] audit: type=1326 audit(1727157379.572:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefcfd7def9 code=0x7ffc0000 [ 482.023426][ T7454] smc: net device bond0 erased user defined pnetid SYZ0 [ 482.030757][ T27] audit: type=1326 audit(1727157379.572:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefcfd7def9 code=0x7ffc0000 [ 482.081236][ T27] audit: type=1326 audit(1727157379.572:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefcfd7def9 code=0x7ffc0000 [ 482.105930][ T27] audit: type=1326 audit(1727157379.572:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefcfd7def9 code=0x7ffc0000 [ 482.128885][ T27] audit: type=1326 audit(1727157379.572:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefcfd7def9 code=0x7ffc0000 [ 482.170394][ T27] audit: type=1326 audit(1727157379.612:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefcfd7def9 code=0x7ffc0000 [ 482.234164][ T27] audit: type=1326 audit(1727157379.742:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefcfd7def9 code=0x7ffc0000 [ 482.287047][ T7458] netlink: 20 bytes leftover after parsing attributes in process `syz.4.974'. [ 482.300781][ T27] audit: type=1326 audit(1727157379.742:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefcfd7def9 code=0x7ffc0000 [ 482.369267][ T27] audit: type=1326 audit(1727157379.782:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fefcfd7def9 code=0x7ffc0000 [ 482.453467][ T7456] loop0: detected capacity change from 0 to 8192 [ 482.466328][ T27] audit: type=1326 audit(1727157379.782:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefcfd7def9 code=0x7ffc0000 [ 482.521062][ T7456] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 482.539940][ T7464] netlink: 16 bytes leftover after parsing attributes in process `syz.4.977'. [ 482.555810][ T7464] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 482.736526][ T7473] 9pnet_fd: Insufficient options for proto=fd [ 483.849289][ T7486] loop4: detected capacity change from 0 to 128 [ 483.864011][ T7486] EXT4-fs: Ignoring removed nobh option [ 483.873526][ T7486] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 483.888216][ T7486] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038 (0x7fffffff) [ 484.024511][ T7490] nfs4: Unknown parameter 'context' [ 488.046877][ T6857] EXT4-fs (loop4): unmounting filesystem. [ 488.401402][ T7503] loop4: detected capacity change from 0 to 512 [ 488.439205][ T7503] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 488.492662][ T7503] EXT4-fs (loop4): 1 truncate cleaned up [ 488.504228][ T7503] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 488.877166][ T6857] EXT4-fs (loop4): unmounting filesystem. [ 489.484506][ T7515] netlink: 'syz.1.993': attribute type 6 has an invalid length. [ 489.697810][ T7521] loop1: detected capacity change from 0 to 512 [ 489.717061][ T3646] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 489.738218][ T3646] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 489.746355][ T3646] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 489.754838][ T3646] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 489.763311][ T3646] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 489.770791][ T3646] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 489.809355][ T7521] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 489.854042][ T7521] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 489.868989][ T7492] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.887234][ T7521] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.997: Failed to acquire dquot type 1 [ 489.910418][ T7521] EXT4-fs (loop1): 1 truncate cleaned up [ 489.919078][ T7521] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 489.954356][ T7521] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff) [ 490.045607][ T7532] nfs4: Unknown parameter 'context' [ 492.132005][ T3654] Bluetooth: hci2: command tx timeout [ 492.858504][ T7534] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1001'. [ 492.973530][ T7492] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.014836][ T7027] EXT4-fs (loop1): unmounting filesystem. [ 493.086600][ T7492] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.214885][ T7492] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.342949][ T7538] loop3: detected capacity change from 0 to 8192 [ 493.352174][ T7538] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 493.422141][ T7547] loop0: detected capacity change from 0 to 1024 [ 493.429624][ T7547] EXT4-fs: Ignoring removed oldalloc option [ 493.491949][ T7547] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 493.534802][ T7548] ptrace attach of "./syz-executor exec"[6857] was attempted by "./syz-executor exec"[7548] [ 493.665159][ T6917] EXT4-fs (loop0): unmounting filesystem. [ 493.742504][ T7522] chnl_net:caif_netlink_parms(): no params data found [ 494.188308][ T7574] Cannot find set identified by id 0 to match [ 494.404046][ T3654] Bluetooth: hci2: command tx timeout [ 495.087611][ T7522] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.161820][ T7522] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.179343][ T7587] nfs4: Unknown parameter 'context' [ 495.183204][ T7522] device bridge_slave_0 entered promiscuous mode [ 496.493884][ T3651] Bluetooth: hci2: command tx timeout [ 497.953439][ T7522] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.967714][ T7522] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.989590][ T7522] device bridge_slave_1 entered promiscuous mode [ 498.080714][ T7522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.206124][ T7522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.218640][ T27] audit: type=1326 audit(1727157395.802:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7594 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 498.289633][ T27] audit: type=1326 audit(1727157395.802:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7594 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 498.333083][ T27] audit: type=1326 audit(1727157395.802:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7594 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 498.374948][ T7600] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 498.380785][ T7522] team0: Port device team_slave_0 added [ 498.390786][ T27] audit: type=1326 audit(1727157395.802:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7594 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 498.411572][ T7522] team0: Port device team_slave_1 added [ 498.458851][ T27] audit: type=1326 audit(1727157395.802:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7594 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 498.563845][ T3651] Bluetooth: hci2: command tx timeout [ 498.599787][ T7492] IPVS: stopping master sync thread 7370 ... [ 498.609476][ T7522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.623929][ T7522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.717569][ T7522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.902307][ T7615] nfs4: Unknown parameter 'context' [ 498.984687][ T7522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.695173][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.701792][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.708285][ T7522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.961369][ T7522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.002227][ T7609] netlink: 'syz.4.1027': attribute type 1 has an invalid length. [ 504.157645][ T27] audit: type=1326 audit(1727157401.742:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 504.220973][ T27] audit: type=1326 audit(1727157401.782:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 504.278584][ T27] audit: type=1326 audit(1727157401.782:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 504.358126][ T7630] loop0: detected capacity change from 0 to 164 [ 504.369902][ T7632] loop3: detected capacity change from 0 to 128 [ 504.378548][ T7632] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 504.391643][ T7630] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 504.402133][ T7632] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 504.414276][ T7630] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 504.447804][ T7522] device hsr_slave_0 entered promiscuous mode [ 504.469463][ T7522] device hsr_slave_1 entered promiscuous mode [ 504.491431][ T7522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 504.523862][ T7522] Cannot create hsr debugfs directory [ 504.535448][ T7492] device hsr_slave_0 left promiscuous mode [ 504.574012][ T7492] device hsr_slave_1 left promiscuous mode [ 504.604394][ T7492] batman_adv: batadv0: Interface deactivated: dummy0 [ 504.611166][ T7492] batman_adv: batadv0: Removing interface: dummy0 [ 504.617174][ T7634] loop4: detected capacity change from 0 to 2048 [ 504.658345][ T7492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.682243][ T7639] xt_CT: You must specify a L4 protocol and not use inversions on it [ 504.690783][ T7492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.704706][ T7634] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 504.733058][ T7492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.743403][ T27] audit: type=1326 audit(1727157402.322:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.0.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 504.753688][ T7492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.788291][ T27] audit: type=1326 audit(1727157402.332:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.0.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 504.823992][ T27] audit: type=1326 audit(1727157402.332:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.0.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 504.866043][ T27] audit: type=1326 audit(1727157402.382:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.0.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 504.894704][ T27] audit: type=1326 audit(1727157402.382:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.0.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 504.918211][ T6857] EXT4-fs (loop4): unmounting filesystem. [ 504.933316][ T7492] device bridge_slave_1 left promiscuous mode [ 504.998962][ T7649] nfs4: Unknown parameter 'context' [ 506.865056][ T7492] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.103767][ T27] audit: type=1326 audit(1727157402.392:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.0.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 507.145302][ T7492] device bridge_slave_0 left promiscuous mode [ 507.151620][ T7492] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.174506][ T27] audit: type=1326 audit(1727157402.392:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.0.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 507.309306][ T7492] device veth1_macvtap left promiscuous mode [ 507.328225][ T7492] device veth0_macvtap left promiscuous mode [ 507.347509][ T7492] device veth1_vlan left promiscuous mode [ 507.353351][ T7492] device veth0_vlan left promiscuous mode [ 507.402216][ T7660] loop1: detected capacity change from 0 to 128 [ 507.460968][ T7660] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 507.544310][ T7660] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 507.647211][ T3805] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 507.780898][ T7676] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 507.787701][ T7676] PKCS7: Only support pkcs7_signedData type [ 507.950480][ T7675] Cannot find del_set index 0 as target [ 508.174320][ T1174] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 508.643958][ T1174] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.654539][ T1174] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 508.764011][ T1174] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 508.773483][ T1174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 508.799779][ T1174] usb 1-1: SerialNumber: syz [ 508.864002][ T153] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 509.213067][ T7688] loop4: detected capacity change from 0 to 32768 [ 509.223987][ T153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.235696][ T153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.245553][ T153] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 509.254729][ T153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.258960][ T7492] team0 (unregistering): Port device team_slave_1 removed [ 509.265952][ T153] usb 4-1: config 0 descriptor?? [ 509.276487][ T7688] loop4: p1 p2 p3 < p5 p6 p7 > [ 509.342086][ T7492] team0 (unregistering): Port device team_slave_0 removed [ 509.399660][ T7492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.470160][ T7492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.523198][ T7685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.556237][ T7685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.310035][ T7492] bond0 (unregistering): Released all slaves [ 510.447318][ T7678] device syzkaller1 entered promiscuous mode [ 510.464631][ T7685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1055'. [ 510.478606][ T7685] device vlan2 entered promiscuous mode [ 510.505340][ T7685] device bridge0 entered promiscuous mode [ 510.513535][ T7685] device bridge0 left promiscuous mode [ 510.641993][ T7699] loop4: detected capacity change from 0 to 2048 [ 510.694873][ T1174] usb 1-1: 0:2 : does not exist [ 510.699845][ T1174] usb 1-1: unit 5: unexpected type 0x0b [ 510.724679][ T7699] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 510.734004][ T153] usbhid 4-1:0.0: can't add hid device: -71 [ 510.740367][ T153] usbhid: probe of 4-1:0.0 failed with error -71 [ 510.760655][ T153] usb 4-1: USB disconnect, device number 3 [ 510.794055][ T1174] usb 1-1: USB disconnect, device number 6 [ 510.812565][ T7706] loop1: detected capacity change from 0 to 128 [ 510.820198][ T7706] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 510.838280][ T7706] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 510.925364][ T42] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 511.071407][ T27] kauditd_printk_skb: 79 callbacks suppressed [ 511.071425][ T27] audit: type=1326 audit(1727157408.652:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 511.105128][ T7712] loop0: detected capacity change from 0 to 512 [ 511.144725][ T27] audit: type=1326 audit(1727157408.652:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 511.167331][ T27] audit: type=1326 audit(1727157408.652:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 511.190544][ T27] audit: type=1326 audit(1727157408.652:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 511.250155][ T6857] EXT4-fs (loop4): unmounting filesystem. [ 511.317205][ T27] audit: type=1326 audit(1727157408.652:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 511.400848][ T27] audit: type=1326 audit(1727157408.652:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 511.494040][ T27] audit: type=1326 audit(1727157408.652:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 511.571200][ T27] audit: type=1326 audit(1727157408.652:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 511.653932][ T27] audit: type=1326 audit(1727157408.652:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 511.734792][ T7726] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 511.741214][ T7726] PKCS7: Only support pkcs7_signedData type [ 511.838650][ T7522] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 511.856136][ T27] audit: type=1326 audit(1727157408.652:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8005f7def9 code=0x7ffc0000 [ 511.990753][ T7522] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 512.113874][ T3686] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 512.531296][ T7522] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 512.538865][ T3686] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 512.556258][ T3686] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 512.582812][ T7522] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 512.601804][ T7733] loop4: detected capacity change from 0 to 128 [ 512.638513][ T7733] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 512.656870][ T7734] device vlan2 entered promiscuous mode [ 512.662932][ T7733] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 512.672430][ T3686] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 512.681950][ T7734] team0: Device vlan2 is already an upper device of the team interface [ 512.693419][ T3686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 512.708715][ T3686] usb 4-1: SerialNumber: syz [ 512.804204][ T3694] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 512.991976][ T7522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.027493][ T7739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1077'. [ 513.068384][ T7739] device vlan2 entered promiscuous mode [ 513.118751][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 513.139274][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 513.184779][ T7522] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.267330][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 513.305603][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 513.380642][ T7746] nfs4: Unknown parameter 'context' [ 513.434347][ T3694] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.441480][ T3694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.860787][ T7749] loop1: detected capacity change from 0 to 512 [ 516.732455][ T3686] usb 4-1: 0:2 : does not exist [ 516.737491][ T3686] usb 4-1: unit 5: unexpected type 0x0b [ 516.749493][ T3686] usb 4-1: USB disconnect, device number 4 [ 516.753561][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 516.763558][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 516.815927][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 516.879405][ T7749] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1081: bg 0: block 393: padding at end of block bitmap is not set [ 516.900157][ T3694] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.906612][ T7749] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 516.907322][ T3694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.932707][ T7749] EXT4-fs (loop1): 2 truncates cleaned up [ 516.941359][ T7749] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 516.992349][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 517.018760][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 517.031447][ T3654] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 517.044991][ T3654] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 517.059811][ T3654] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 517.067098][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 517.068641][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 517.086588][ T3646] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 517.096415][ T3646] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 517.104232][ T3646] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 517.147672][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 517.163495][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 517.174700][ T7027] EXT4-fs (loop1): unmounting filesystem. [ 517.210565][ T7522] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 517.264125][ T7522] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 517.294075][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 517.301721][ T7763] loop4: detected capacity change from 0 to 164 [ 517.302282][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 517.332098][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 517.341448][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 517.350371][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 517.361207][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 517.373395][ T7762] device vlan2 entered promiscuous mode [ 517.379598][ T7762] team0: Device vlan2 is already an upper device of the team interface [ 517.640457][ T7771] nfs4: Unknown parameter 'context' [ 519.211245][ T3646] Bluetooth: hci1: command tx timeout [ 521.283994][ T3646] Bluetooth: hci1: command tx timeout [ 521.975040][ T7777] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 521.981419][ T7777] PKCS7: Only support pkcs7_signedData type [ 522.038225][ T7492] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.122585][ T7754] chnl_net:caif_netlink_parms(): no params data found [ 522.231954][ T7492] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.265294][ T4140] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 522.381747][ T7492] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.420943][ T7522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.438732][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 522.470989][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 522.545494][ T7754] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.552711][ T7754] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.580398][ T7754] device bridge_slave_0 entered promiscuous mode [ 522.623976][ T4140] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.640397][ T7492] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.643855][ T4140] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 522.696939][ T7754] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.714070][ T7754] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.722163][ T7754] device bridge_slave_1 entered promiscuous mode [ 522.759664][ T4140] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 522.782406][ T4140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 522.805087][ T4140] usb 4-1: SerialNumber: syz [ 522.858970][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 522.872986][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 522.946956][ T7754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.970690][ T3651] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 522.984323][ T3651] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 522.994427][ T3651] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 523.005987][ T3651] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 523.013043][ T7522] device veth0_vlan entered promiscuous mode [ 523.021466][ T3651] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 523.029090][ T3651] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 523.074398][ T7754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.084362][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 523.100036][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 523.162494][ T7790] can0: slcan on ttyS3. [ 523.181057][ T7522] device veth1_vlan entered promiscuous mode [ 523.210016][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 523.223375][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 523.244955][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 523.338435][ T7754] team0: Port device team_slave_0 added [ 523.339217][ T7791] can0 (unregistered): slcan off ttyS3. [ 523.350985][ T7791] Falling back ldisc for ttyS3. [ 523.363939][ T3646] Bluetooth: hci1: command tx timeout [ 523.370294][ T7522] device veth0_macvtap entered promiscuous mode [ 523.405529][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 523.428396][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 523.461393][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 523.509036][ T7754] team0: Port device team_slave_1 added [ 523.551265][ T7793] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1096'. [ 523.596868][ T4140] usb 4-1: 0:2 : does not exist [ 523.601837][ T4140] usb 4-1: unit 5: unexpected type 0x0b [ 523.630979][ T4140] usb 4-1: USB disconnect, device number 5 [ 523.660118][ T7522] device veth1_macvtap entered promiscuous mode [ 523.676941][ T7797] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1097'. [ 523.689528][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 523.705134][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 523.732478][ T7522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.752820][ T7522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.765485][ T7522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.777153][ T7522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.787128][ T7522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.797945][ T7522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.812010][ T7803] loop3: detected capacity change from 0 to 512 [ 523.818916][ T7522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.819174][ T7803] EXT4-fs: Ignoring removed oldalloc option [ 523.835494][ T7522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.837359][ T7522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.879688][ T7803] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.1097: Parent and EA inode have the same ino 15 [ 523.893799][ T7803] EXT4-fs (loop3): Remounting filesystem read-only [ 523.900423][ T7803] EXT4-fs error (device loop3): ext4_evict_inode:290: comm syz.3.1097: couldn't truncate inode 15 (err -30) [ 523.913559][ T7797] gre0 speed is unknown, defaulting to 1000 [ 523.941995][ T7754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.956549][ T7803] EXT4-fs (loop3): 1 orphan inode deleted [ 523.962341][ T7803] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 523.974119][ T7754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.020713][ T7754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.034709][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 524.048544][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 524.112905][ T7754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.120323][ T7754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.150972][ T7754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.183085][ T7522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.193818][ T7522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.208780][ T7522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.219307][ T7522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.231659][ T7522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.242146][ T7522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.251995][ T7522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.262455][ T7522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.274338][ T7522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.281808][ T7797] gre0 speed is unknown, defaulting to 1000 [ 524.380216][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 524.389365][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 524.401608][ T7522] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.410834][ T7522] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.419587][ T7522] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.429069][ T7522] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.439402][ T7797] gre0 speed is unknown, defaulting to 1000 [ 524.627192][ T7754] device hsr_slave_0 entered promiscuous mode [ 524.646563][ T7797] infiniband syz2: set active [ 524.653035][ T7754] device hsr_slave_1 entered promiscuous mode [ 524.653249][ T7797] infiniband syz2: added gre0 [ 524.667269][ T7797] rdma_rxe: unable to create cq [ 524.672803][ T7797] infiniband syz2: Couldn't create ib_mad CQ [ 524.680278][ T7754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 524.681265][ T7797] infiniband syz2: Couldn't open port 1 [ 524.701948][ T7754] Cannot create hsr debugfs directory [ 524.749402][ T7797] RDS/IB: syz2: added [ 524.754597][ T3686] gre0 speed is unknown, defaulting to 1000 [ 524.760021][ T7797] smc: adding ib device syz2 with port count 1 [ 524.802958][ T7797] smc: ib device syz2 port 1 has pnetid [ 524.823091][ T4140] gre0 speed is unknown, defaulting to 1000 [ 524.854416][ T7817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1103'. [ 524.879882][ T7787] chnl_net:caif_netlink_parms(): no params data found [ 524.916192][ T7797] gre0 speed is unknown, defaulting to 1000 [ 525.044403][ T3646] Bluetooth: hci4: command tx timeout [ 525.158088][ T7823] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1105'. [ 525.190360][ T7797] gre0 speed is unknown, defaulting to 1000 [ 525.196707][ T3875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.230661][ T3875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.344897][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 525.354397][ T7797] gre0 speed is unknown, defaulting to 1000 [ 525.444048][ T3646] Bluetooth: hci1: command tx timeout [ 525.458093][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.467531][ T7787] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.475142][ T7787] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.483347][ T7787] device bridge_slave_0 entered promiscuous mode [ 525.484575][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.517820][ T7787] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.525902][ T7787] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.542828][ T7787] device bridge_slave_1 entered promiscuous mode [ 525.549978][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 525.592807][ T7797] gre0 speed is unknown, defaulting to 1000 [ 525.671459][ T7787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.683810][ T4141] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 525.710390][ T7787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.798516][ T7787] team0: Port device team_slave_0 added [ 525.830660][ T7787] team0: Port device team_slave_1 added [ 525.840116][ T7797] gre0 speed is unknown, defaulting to 1000 [ 525.930593][ T7787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.946709][ T7787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.992803][ T7787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.014208][ T7787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.033800][ T7787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.060162][ T7787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.073041][ T7797] gre0 speed is unknown, defaulting to 1000 [ 526.073971][ T4141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.114239][ T4141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.130039][ T4141] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 526.145891][ T4141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.164824][ T4141] usb 2-1: config 0 descriptor?? [ 526.225423][ T7787] device hsr_slave_0 entered promiscuous mode [ 526.240129][ T7787] device hsr_slave_1 entered promiscuous mode [ 526.257474][ T27] kauditd_printk_skb: 68 callbacks suppressed [ 526.257491][ T27] audit: type=1326 audit(1727157423.842:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.2.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89c237def9 code=0x7ffc0000 [ 526.294316][ T7787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 526.306147][ T7787] Cannot create hsr debugfs directory [ 526.363842][ T27] audit: type=1326 audit(1727157423.842:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.2.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f89c237def9 code=0x7ffc0000 [ 526.402235][ T27] audit: type=1326 audit(1727157423.842:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.2.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89c237def9 code=0x7ffc0000 [ 526.426016][ T27] audit: type=1326 audit(1727157423.842:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.2.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89c237def9 code=0x7ffc0000 [ 526.431420][ T7829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.457878][ T7797] gre0 speed is unknown, defaulting to 1000 [ 526.482619][ T7754] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 526.522261][ T27] audit: type=1326 audit(1727157423.932:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.2.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89c237def9 code=0x7ffc0000 [ 526.545548][ T7829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.556842][ T7754] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 526.588458][ T7754] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 526.622455][ T27] audit: type=1326 audit(1727157423.942:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.2.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89c237def9 code=0x7ffc0000 [ 526.647045][ T27] audit: type=1326 audit(1727157423.982:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.2.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f89c237def9 code=0x7ffc0000 [ 526.669649][ T7754] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 526.693924][ T4141] usbhid 2-1:0.0: can't add hid device: -71 [ 526.699960][ T4141] usbhid: probe of 2-1:0.0 failed with error -71 [ 526.720300][ T4141] usb 2-1: USB disconnect, device number 3 [ 526.796267][ T7787] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.839189][ T6992] EXT4-fs (loop3): unmounting filesystem. [ 526.950463][ T7787] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.960542][ T7841] usb usb1: usbfs: process 7841 (syz.3.1110) did not claim interface 0 before use [ 526.985094][ T7492] device hsr_slave_0 left promiscuous mode [ 527.000144][ T7492] device hsr_slave_1 left promiscuous mode [ 527.007331][ T7492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.015401][ T7492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.034833][ T7492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.042317][ T7492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.071345][ T7492] device bridge_slave_1 left promiscuous mode [ 527.081034][ T7492] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.103015][ T7492] device bridge_slave_0 left promiscuous mode [ 527.114069][ T7492] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.124108][ T3646] Bluetooth: hci4: command tx timeout [ 527.182901][ T7492] device veth1_macvtap left promiscuous mode [ 527.189466][ T7492] device veth0_macvtap left promiscuous mode [ 527.197692][ T7492] device veth1_vlan left promiscuous mode [ 527.203577][ T7492] device veth0_vlan left promiscuous mode [ 527.341794][ T7847] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1113'. [ 527.677907][ T7855] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1117'. [ 528.267756][ T3686] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 528.282097][ T7492] team0 (unregistering): Port device team_slave_1 removed [ 528.355692][ T7865] loop2: detected capacity change from 0 to 164 [ 528.366071][ T7492] team0 (unregistering): Port device team_slave_0 removed [ 528.427941][ T7492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.497128][ T7492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.678995][ T3686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.704945][ T3686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.734351][ T3686] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 528.743442][ T3686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.765801][ T3686] usb 4-1: config 0 descriptor?? [ 529.031839][ T7861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.051130][ T7861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.100485][ T7492] bond0 (unregistering): Released all slaves [ 529.204656][ T3646] Bluetooth: hci4: command tx timeout [ 529.205420][ T3686] usbhid 4-1:0.0: can't add hid device: -71 [ 529.223782][ T3686] usbhid: probe of 4-1:0.0 failed with error -71 [ 529.239341][ T3686] usb 4-1: USB disconnect, device number 6 [ 529.279873][ T7787] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.366836][ T7869] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1123'. [ 529.395923][ T7787] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.514902][ T7754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.555322][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 529.573869][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 529.596243][ T7754] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.627443][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 529.646261][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 529.664714][ T2526] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.671883][ T2526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.735488][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 529.745882][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 529.755168][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 529.780442][ T2526] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.787627][ T2526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.809235][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1127'. [ 529.836872][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 529.857405][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 529.914751][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 529.938320][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 529.971447][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 530.005521][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1130'. [ 530.045055][ T7882] device batadv0 entered promiscuous mode [ 530.056549][ T7882] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 530.075558][ T7882] device batadv0 left promiscuous mode [ 530.127083][ T7887] loop2: detected capacity change from 0 to 2048 [ 530.139098][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 530.206062][ T7890] nfs4: Unknown parameter 'context' [ 531.286750][ T3646] Bluetooth: hci4: command tx timeout [ 532.144515][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 532.193274][ T7787] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 532.216587][ T7887] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 532.233853][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 532.243170][ T7887] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 532.274532][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 532.312699][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 532.348956][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 532.401500][ T7754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 532.417624][ T7522] EXT4-fs (loop2): unmounting filesystem. [ 532.418190][ T7787] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 532.443449][ T27] audit: type=1326 audit(1727157430.032:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88fa37def9 code=0x7ffc0000 [ 532.492321][ T7899] device pim6reg1 entered promiscuous mode [ 532.525173][ T7787] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 532.541076][ T7787] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 532.553764][ T27] audit: type=1326 audit(1727157430.032:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88fa37def9 code=0x7ffc0000 [ 532.634893][ T27] audit: type=1326 audit(1727157430.032:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88fa37def9 code=0x7ffc0000 [ 532.708035][ T27] audit: type=1326 audit(1727157430.032:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f88fa37def9 code=0x7ffc0000 [ 532.779168][ T27] audit: type=1326 audit(1727157430.032:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88fa37def9 code=0x7ffc0000 [ 532.859751][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1139'. [ 532.878856][ T27] audit: type=1326 audit(1727157430.052:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88fa37def9 code=0x7ffc0000 [ 532.932127][ T27] audit: type=1326 audit(1727157430.452:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7909 comm="syz.3.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88fa37def9 code=0x7ffc0000 [ 533.013300][ T27] audit: type=1326 audit(1727157430.452:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7909 comm="syz.3.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88fa37def9 code=0x7ffc0000 [ 533.075402][ T7787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.146201][ T7919] nfs4: Unknown parameter 'context' [ 535.144376][ T27] audit: type=1326 audit(1727157430.462:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7909 comm="syz.3.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88fa37def9 code=0x7ffc0000 [ 535.221112][ T27] audit: type=1326 audit(1727157430.462:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7909 comm="syz.3.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88fa37def9 code=0x7ffc0000 [ 535.367505][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 535.405607][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 535.448594][ T7754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.511702][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 535.530881][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 535.546670][ T7787] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.625035][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 535.641553][ T7925] loop1: detected capacity change from 0 to 8192 [ 535.649208][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 535.660159][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 535.669417][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 535.670840][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1150'. [ 535.678221][ T3735] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.693591][ T3735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.716388][ T7925] loop1: p1 < > p4 [ 535.720260][ T7925] loop1: partition table partially beyond EOD, truncated [ 535.735257][ T7925] loop1: p1 start 295168 is beyond EOD, truncated [ 535.756029][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 535.766286][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 535.783368][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 535.792492][ T3735] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.799645][ T3735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.818917][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 535.833389][ T7936] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 536.096362][ T7931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.119696][ T7931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.199093][ T7945] nfs4: Unknown parameter 'context' [ 538.135101][ T7931] bond0 (unregistering): Released all slaves [ 538.256414][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 538.281886][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 538.322206][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 538.361240][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 538.381358][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 538.407504][ T7754] device veth0_vlan entered promiscuous mode [ 538.418524][ T7952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1159'. [ 538.486145][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 538.497977][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 538.513027][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 538.538067][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 538.575562][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 538.602274][ T7787] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 538.644222][ T7787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 538.670566][ T7754] device veth1_vlan entered promiscuous mode [ 538.723825][ T7959] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 538.755073][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 538.766381][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 538.788221][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 538.797642][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 538.814241][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 538.832687][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 538.956824][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 538.965715][ T7492] IPVS: stopping master sync thread 7440 ... [ 538.974494][ T7966] hub 6-0:1.0: USB hub found [ 538.981810][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 539.010830][ T7966] hub 6-0:1.0: 1 port detected [ 539.021945][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 539.055787][ T7754] device veth0_macvtap entered promiscuous mode [ 539.207271][ T7754] device veth1_macvtap entered promiscuous mode [ 539.229252][ T7962] device pim6reg1 entered promiscuous mode [ 539.264144][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 539.272584][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 539.567835][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1168'. [ 539.645785][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.657309][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.667463][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.695595][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.730751][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.753439][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.780662][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.799660][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.826676][ T7754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.860092][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 539.881473][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 539.944199][ T7787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.977191][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.021551][ T7992] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 540.029540][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.061835][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.101705][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.139553][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.202544][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.236616][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.263701][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.296506][ T7754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.308482][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 540.318482][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 540.353507][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 540.375283][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 540.413005][ T7492] device hsr_slave_0 left promiscuous mode [ 540.421659][ T7492] device hsr_slave_1 left promiscuous mode [ 540.497186][ T7492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.507692][ T7492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.520666][ T7492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.539148][ T7492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.551734][ T7492] device bridge_slave_1 left promiscuous mode [ 540.565045][ T7492] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.578280][ T7492] device bridge_slave_0 left promiscuous mode [ 540.588641][ T7492] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.680312][ T7492] device bond0 left promiscuous mode [ 540.689869][ T7492] device bond_slave_0 left promiscuous mode [ 540.702562][ T7492] device bond_slave_1 left promiscuous mode [ 540.730784][ T7492] device veth1_macvtap left promiscuous mode [ 540.750698][ T7492] device veth0_macvtap left promiscuous mode [ 540.772583][ T7492] device veth1_vlan left promiscuous mode [ 540.785580][ T7492] device veth0_vlan left promiscuous mode [ 541.017648][ T7492] team0 (unregistering): Port device vlan2 removed [ 541.060623][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 541.060639][ T27] audit: type=1326 audit(1727157438.642:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89c237def9 code=0x7ffc0000 [ 541.093870][ T27] audit: type=1326 audit(1727157438.652:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89c237def9 code=0x7ffc0000 [ 541.118500][ T27] audit: type=1326 audit(1727157438.672:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89c237def9 code=0x7ffc0000 [ 541.141659][ T27] audit: type=1326 audit(1727157438.702:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89c237def9 code=0x7ffc0000 [ 541.164790][ T27] audit: type=1326 audit(1727157438.702:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89c237def9 code=0x7ffc0000 [ 541.233739][ T27] audit: type=1326 audit(1727157438.812:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89c237def9 code=0x7ffc0000 [ 541.283052][ T27] audit: type=1326 audit(1727157438.812:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f89c237def9 code=0x7ffc0000 [ 541.306542][ T27] audit: type=1326 audit(1727157438.812:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89c237def9 code=0x7ffc0000 [ 541.422612][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1178'. [ 541.787856][ T27] audit: type=1326 audit(1727157439.372:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.3.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88fa37def9 code=0x7ffc0000 [ 541.823451][ T27] audit: type=1326 audit(1727157439.392:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.3.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88fa37def9 code=0x7ffc0000 [ 541.853278][ T8031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1184'. [ 541.946365][ T8033] loop2: detected capacity change from 0 to 128 [ 541.986107][ T7492] team0 (unregistering): Port device team_slave_1 removed [ 542.092678][ T7492] team0 (unregistering): Port device team_slave_0 removed [ 542.161448][ T7492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.224056][ T7492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.316291][ T8035] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 25 (only 8 groups) [ 542.987183][ T8039] netlink: 'syz.2.1187': attribute type 20 has an invalid length. [ 543.434764][ T7492] bond0 (unregistering): Released all slaves [ 543.547400][ T7754] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.571976][ T7754] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.601500][ T7754] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.628490][ T7754] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.645299][ T8060] loop3: detected capacity change from 0 to 2048 [ 543.730724][ T8060] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 543.776513][ T8060] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 543.917435][ T8070] netlink: 'syz.2.1197': attribute type 20 has an invalid length. [ 543.926420][ T3851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.928812][ T6992] EXT4-fs (loop3): unmounting filesystem. [ 543.954099][ T3851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.047087][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 544.105017][ T4000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.114162][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 544.123519][ T4000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.159014][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 544.184755][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 544.246787][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 544.266863][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 544.300235][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 544.321646][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 544.356670][ T7787] device veth0_vlan entered promiscuous mode [ 544.387138][ T8088] capability: warning: `syz.2.1206' uses 32-bit capabilities (legacy support in use) [ 544.435958][ T7787] device veth1_vlan entered promiscuous mode [ 544.522203][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 544.537289][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 544.559648][ T8090] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 544.566702][ T8090] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 544.574794][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 544.583542][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 544.613770][ T8090] vhci_hcd vhci_hcd.0: Device attached [ 544.622323][ T8093] vhci_hcd: connection closed [ 544.630292][ T8097] netlink: 'syz.2.1208': attribute type 20 has an invalid length. [ 544.650264][ T3999] vhci_hcd: stop threads [ 544.660944][ T8098] loop1: detected capacity change from 0 to 1024 [ 544.669212][ T3999] vhci_hcd: release socket [ 544.689403][ T7787] device veth0_macvtap entered promiscuous mode [ 544.713757][ T3999] vhci_hcd: disconnect device [ 544.723539][ T7787] device veth1_macvtap entered promiscuous mode [ 544.747789][ T8098] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 544.815471][ T7027] EXT4-fs (loop1): unmounting filesystem. [ 544.835011][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.885677][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.914076][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.946837][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.969538][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.992932][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.013732][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.027218][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 545.037577][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.065560][ T7787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.084340][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 545.117314][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 545.143446][ T8117] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 545.159212][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.171092][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.182649][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.194764][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.206290][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.217291][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.229917][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.240936][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.270002][ T7787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.293815][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 545.309515][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 545.319656][ T8123] 9pnet_fd: Insufficient options for proto=fd [ 545.335890][ T7787] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.373751][ T7787] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.393856][ T7787] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.402606][ T7787] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.612778][ T7492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.631602][ T7492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.669453][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 545.694797][ T7492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.702934][ T7492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.720785][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 545.782833][ T8140] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 545.782833][ T8140] program syz.0.1226 not setting count and/or reply_len properly [ 546.055172][ T8156] loop3: detected capacity change from 0 to 512 [ 546.069084][ T8156] EXT4-fs: Ignoring removed oldalloc option [ 546.109657][ T8156] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.1230: Parent and EA inode have the same ino 15 [ 546.128122][ T8156] EXT4-fs (loop3): Remounting filesystem read-only [ 546.142280][ T8156] EXT4-fs error (device loop3): ext4_evict_inode:290: comm syz.3.1230: couldn't truncate inode 15 (err -30) [ 546.157366][ T27] kauditd_printk_skb: 36 callbacks suppressed [ 546.157383][ T27] audit: type=1326 audit(1727157443.742:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.4.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fcf5b77def9 code=0x7ffc0000 [ 546.220022][ T8156] EXT4-fs (loop3): 1 orphan inode deleted [ 546.230050][ T27] audit: type=1326 audit(1727157443.762:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.4.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcf5b719879 code=0x7ffc0000 [ 546.246415][ T8156] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 546.257817][ T27] audit: type=1326 audit(1727157443.762:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.4.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5b77def9 code=0x7ffc0000 [ 546.284564][ T27] audit: type=1326 audit(1727157443.762:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.4.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5b77def9 code=0x7ffc0000 [ 546.465959][ T8171] capability: warning: `syz.4.1238' uses deprecated v2 capabilities in a way that may be insecure [ 546.488831][ T6992] EXT4-fs (loop3): unmounting filesystem. [ 546.491288][ T8171] program syz.4.1238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 546.852605][ T8185] team0: Port device team_slave_1 removed [ 547.118738][ T8195] device bond0 entered promiscuous mode [ 547.134202][ T8195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.290206][ T8203] loop2: detected capacity change from 0 to 512 [ 547.318158][ T8203] EXT4-fs: Ignoring removed oldalloc option [ 547.441489][ T8195] bond0 (unregistering): Released all slaves [ 547.468376][ T8203] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1251: Parent and EA inode have the same ino 15 [ 547.565965][ T8214] nfs4: Unknown parameter 'context' [ 551.514067][ T8203] EXT4-fs (loop2): Remounting filesystem read-only [ 551.521941][ T8203] EXT4-fs error (device loop2): ext4_evict_inode:290: comm syz.2.1251: couldn't truncate inode 15 (err -30) [ 551.575316][ T8203] EXT4-fs (loop2): 1 orphan inode deleted [ 551.614942][ T8203] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 551.720301][ T7522] EXT4-fs (loop2): unmounting filesystem. [ 551.982360][ T8232] tap0: tun_chr_ioctl cmd 1074025692 [ 552.076017][ T8234] 9pnet_fd: Insufficient options for proto=fd [ 552.242652][ T8244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1268'. [ 552.328550][ T8248] nfs4: Unknown parameter 'context' [ 554.575559][ T8247] loop2: detected capacity change from 0 to 512 [ 554.582577][ T8247] EXT4-fs: Ignoring removed oldalloc option [ 554.653313][ T8255] loop4: detected capacity change from 0 to 1024 [ 554.660708][ T8255] EXT4-fs: Ignoring removed mblk_io_submit option [ 554.667357][ T8255] EXT4-fs: Ignoring removed nomblk_io_submit option [ 554.668154][ T8251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1272'. [ 554.688515][ T8247] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1269: Parent and EA inode have the same ino 15 [ 554.731132][ T8247] EXT4-fs (loop2): Remounting filesystem read-only [ 554.735287][ T8255] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 554.757724][ T8247] EXT4-fs error (device loop2): ext4_evict_inode:290: comm syz.2.1269: couldn't truncate inode 15 (err -30) [ 554.782536][ T8262] loop0: detected capacity change from 0 to 2048 [ 554.795242][ T8247] EXT4-fs (loop2): 1 orphan inode deleted [ 554.802132][ T8247] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 555.031195][ T7522] EXT4-fs (loop2): unmounting filesystem. [ 555.053452][ T8271] syz.3.1278[8271] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 555.053569][ T8271] syz.3.1278[8271] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 555.129575][ T8271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1278'. [ 555.151135][ T8274] 9pnet_fd: Insufficient options for proto=fd [ 555.199951][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1278'. [ 555.209869][ T3646] Bluetooth: hci0: command 0x0406 tx timeout [ 555.480680][ T27] audit: type=1800 audit(1727157453.062:1021): pid=8255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1273" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 555.664707][ T7787] EXT4-fs (loop4): unmounting filesystem. [ 555.715088][ T8288] loop3: detected capacity change from 0 to 1024 [ 555.760081][ T8288] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 555.793755][ T8288] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 555.843760][ T8288] EXT4-fs error (device loop3): ext4_get_journal_inode:5733: inode #5: comm syz.3.1283: unexpected bad inode w/o EXT4_IGET_BAD [ 555.900153][ T8288] EXT4-fs (loop3): no journal found [ 555.913920][ T8288] EXT4-fs (loop3): can't get journal size [ 555.931611][ T8288] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 555.971800][ T8288] tmpfs: Unknown parameter 'fscontext' [ 556.010798][ T8288] syz.3.1283[8288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 556.301655][ T8303] loop4: detected capacity change from 0 to 512 [ 556.494573][ T8303] EXT4-fs: Ignoring removed oldalloc option [ 556.500181][ T8307] 9pnet_fd: Insufficient options for proto=fd [ 557.539643][ T8303] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1289: Parent and EA inode have the same ino 15 [ 557.576621][ T8303] EXT4-fs (loop4): Remounting filesystem read-only [ 557.605624][ T8303] EXT4-fs error (device loop4): ext4_evict_inode:290: comm syz.4.1289: couldn't truncate inode 15 (err -30) [ 557.708364][ T6992] EXT4-fs (loop3): unmounting filesystem. [ 557.801652][ T8303] EXT4-fs (loop4): 1 orphan inode deleted [ 557.839916][ T8303] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 558.195102][ T7787] EXT4-fs (loop4): unmounting filesystem. [ 558.255264][ T8320] loop3: detected capacity change from 0 to 164 [ 558.659980][ T27] audit: type=1326 audit(1727157456.242:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.1.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefcfd7def9 code=0x7ffc0000 [ 558.720142][ T27] audit: type=1326 audit(1727157456.242:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.1.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefcfd7def9 code=0x7ffc0000 [ 558.783512][ T27] audit: type=1326 audit(1727157456.242:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.1.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fefcfd7def9 code=0x7ffc0000 [ 558.868627][ T27] audit: type=1326 audit(1727157456.242:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.1.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefcfd7def9 code=0x7ffc0000 [ 558.931980][ T27] audit: type=1326 audit(1727157456.242:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.1.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefcfd7def9 code=0x7ffc0000 [ 559.351840][ T8341] 9pnet_fd: Insufficient options for proto=fd [ 559.647785][ T8349] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1305'. [ 559.677310][ T8348] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1305'. [ 559.813006][ T8352] device vlan2 entered promiscuous mode [ 559.849198][ T8352] device bond0 entered promiscuous mode [ 559.863716][ T8352] device bond_slave_0 entered promiscuous mode [ 559.878081][ T8352] device bond_slave_1 entered promiscuous mode [ 559.924613][ T8266] ------------[ cut here ]------------ [ 559.930217][ T8266] kernel BUG at fs/buffer.c:2666! [ 559.941024][ T8352] team0: Port device vlan2 added [ 559.947785][ T8266] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 559.953892][ T8266] CPU: 0 PID: 8266 Comm: kmmpd-loop0 Not tainted 6.1.111-syzkaller #0 [ 559.962077][ T8266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 559.972161][ T8266] RIP: 0010:submit_bh_wbc+0x4c0/0x4e0 [ 559.977577][ T8266] Code: 02 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c be fe ff ff 48 89 ef e8 61 62 e0 ff e9 b1 fe ff ff e8 27 e0 88 ff 0f 0b e8 20 e0 88 ff <0f> 0b e8 19 e0 88 ff 0f 0b e8 12 e0 88 ff 0f 0b e8 0b e0 88 ff 0f [ 559.997218][ T8266] RSP: 0018:ffffc90003b07c40 EFLAGS: 00010293 [ 560.003314][ T8266] RAX: ffffffff8201cf20 RBX: 0000000000000000 RCX: ffff8880763b5940 [ 560.011406][ T8266] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 560.019416][ T8266] RBP: ffffc90003b07d50 R08: ffffffff8201cafd R09: ffffed100b0d7123 [ 560.027423][ T8266] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100b0d7122 [ 560.035424][ T8266] R13: ffff8880586b8910 R14: 0000000000000000 R15: 0000000000003801 [ 560.043440][ T8266] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 560.052407][ T8266] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 560.059035][ T8266] CR2: 00007f88fb0656c0 CR3: 0000000056cf0000 CR4: 00000000003506f0 [ 560.067086][ T8266] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 560.075245][ T8266] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 560.083221][ T8266] Call Trace: [ 560.086516][ T8266] [ 560.089448][ T8266] ? __die_body+0x5e/0xa0 [ 560.093796][ T8266] ? die+0x83/0xb0 [ 560.098027][ T8266] ? do_trap+0x11e/0x350 [ 560.102283][ T8266] ? submit_bh_wbc+0x4c0/0x4e0 [ 560.107130][ T8266] ? submit_bh_wbc+0x4c0/0x4e0 [ 560.111939][ T8266] ? do_error_trap+0x13d/0x1e0 [ 560.116732][ T8266] ? submit_bh_wbc+0x4c0/0x4e0 [ 560.121514][ T8266] ? do_int3+0x30/0x30 [ 560.125600][ T8266] ? report_bug+0x3e0/0x500 [ 560.130122][ T8266] ? rcu_is_watching+0x11/0xb0 [ 560.134915][ T8266] ? handle_invalid_op+0x2c/0x40 [ 560.139866][ T8266] ? submit_bh_wbc+0x4c0/0x4e0 [ 560.144641][ T8266] ? exc_invalid_op+0x2f/0x40 [ 560.149337][ T8266] ? asm_exc_invalid_op+0x16/0x20 [ 560.154379][ T8266] ? submit_bh_wbc+0x9d/0x4e0 [ 560.159064][ T8266] ? submit_bh_wbc+0x4c0/0x4e0 [ 560.163842][ T8266] ? submit_bh_wbc+0x4c0/0x4e0 [ 560.168616][ T8266] write_mmp_block_thawed+0x3b6/0x5a0 [ 560.174044][ T8266] ? read_mmp_block+0x7e0/0x7e0 [ 560.178901][ T8266] ? update_process_times+0x1b0/0x1b0 [ 560.184281][ T8266] ? kmmpd+0x40c/0xa70 [ 560.188377][ T8266] write_mmp_block+0x13f/0x390 [ 560.193146][ T8266] kmmpd+0x40c/0xa70 [ 560.197054][ T8266] ? write_mmp_block_thawed+0x5a0/0x5a0 [ 560.202608][ T8266] ? __kthread_parkme+0x168/0x1c0 [ 560.207650][ T8266] kthread+0x28d/0x320 [ 560.211732][ T8266] ? write_mmp_block_thawed+0x5a0/0x5a0 [ 560.217282][ T8266] ? kthread_blkcg+0xd0/0xd0 [ 560.221875][ T8266] ret_from_fork+0x1f/0x30 [ 560.226327][ T8266] [ 560.229344][ T8266] Modules linked in: [ 560.237438][ T3646] Bluetooth: hci3: command 0x0406 tx timeout [ 560.250057][ T8266] ---[ end trace 0000000000000000 ]--- [ 560.255757][ T8266] RIP: 0010:submit_bh_wbc+0x4c0/0x4e0 [ 560.271290][ T8266] Code: 02 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c be fe ff ff 48 89 ef e8 61 62 e0 ff e9 b1 fe ff ff e8 27 e0 88 ff 0f 0b e8 20 e0 88 ff <0f> 0b e8 19 e0 88 ff 0f 0b e8 12 e0 88 ff 0f 0b e8 0b e0 88 ff 0f [ 560.302741][ T8266] RSP: 0018:ffffc90003b07c40 EFLAGS: 00010293 [ 560.312751][ T8266] RAX: ffffffff8201cf20 RBX: 0000000000000000 RCX: ffff8880763b5940 [ 560.321245][ T8266] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 560.332549][ T8266] RBP: ffffc90003b07d50 R08: ffffffff8201cafd R09: ffffed100b0d7123 [ 560.341179][ T8266] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100b0d7122 [ 560.351931][ T8266] R13: ffff8880586b8910 R14: 0000000000000000 R15: 0000000000003801 [ 560.369010][ T8266] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 560.387143][ T8266] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 560.396056][ T8266] CR2: 00007f89c2508178 CR3: 000000004b3aa000 CR4: 00000000003506f0 [ 560.404392][ T8266] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 560.412423][ T8266] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 560.422375][ T8266] Kernel panic - not syncing: Fatal exception [ 560.428793][ T8266] Kernel Offset: disabled [ 560.433121][ T8266] Rebooting in 86400 seconds..