last executing test programs: 5.90529694s ago: executing program 1 (id=59): r0 = socket(0x10, 0x3, 0x9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x2f, 0x64, 0x8, 0x7, 0x20, @remote, @remote, 0x20, 0x8000, 0x0, 0x100}}) 5.588732964s ago: executing program 1 (id=64): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000140)) setsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '\xb3'}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") 3.154285554s ago: executing program 2 (id=74): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x800, 0x0, 0x0, 0x0, 0xb, 0x4, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000feff0700", [0x0, 0x22000000000001]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 3.103840998s ago: executing program 1 (id=75): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) close(0x3) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) 2.705216559s ago: executing program 2 (id=78): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019700)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}}], {0x14}}, 0x88}}, 0x40000) 2.482055026s ago: executing program 2 (id=80): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b2008500"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.30529466s ago: executing program 0 (id=82): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x2]}}) 2.097727687s ago: executing program 0 (id=85): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 1.737181564s ago: executing program 2 (id=86): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) io_uring_setup(0x22625, 0x0) syz_clone3(&(0x7f0000001040)={0x20400, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000001000)=[0x0], 0x1}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r1, &(0x7f0000000ec0)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r3}, 0xffffffffffffff43) sendmsg$can_bcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa00000001000008004d1e00bb1a6fb0441c0fc10a01010100000005ac14d4e23e91431cf661080000000002004e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000290781e83"], 0x0) fcntl$setsig(r4, 0xa, 0x13) fcntl$setlease(r4, 0x400, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 1.308667438s ago: executing program 3 (id=87): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2286dd601996460014060100000000000000000000000000000000fe8000000000000200000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 1.124591452s ago: executing program 3 (id=88): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x419, 0xffffffffffffffff, 0x4}, 0x38) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) 1.038279639s ago: executing program 0 (id=89): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040840}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 958.785825ms ago: executing program 3 (id=90): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 799.492747ms ago: executing program 2 (id=91): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000000)="410c49bc3c388e413819", 0x0, 0x100b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) 685.324536ms ago: executing program 1 (id=92): syz_open_procfs(0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 685.118406ms ago: executing program 3 (id=93): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0xdc7, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xf}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) 615.384842ms ago: executing program 2 (id=94): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x800000000, 0x0, 0x1}], 0x1, 0x100000c01, 0x38, 0x0, 0x2}) 568.130145ms ago: executing program 0 (id=95): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0xf}}}}], 0x20}, 0x0) 485.347292ms ago: executing program 1 (id=96): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x0) 462.892344ms ago: executing program 3 (id=97): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000ac0)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @rand_addr=0x64010100}, {0x2000, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x20000000000000ba, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd71}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 372.719051ms ago: executing program 0 (id=98): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000009, 0x12, r1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e99005d02ff6284860186dd", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 93.287582ms ago: executing program 0 (id=99): r0 = syz_io_uring_setup(0x107, &(0x7f0000000500)={0x0, 0x747f, 0x0, 0x4, 0xae}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000680)=0xfffffffc, 0x0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x569, &(0x7f00000002c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000940)=ANY=[], 0x361, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYRESHEX=r3, @ANYRESHEX], 0xfe37, 0x0) sendmsg$inet(r2, 0x0, 0x8094) io_uring_enter(r0, 0x3518, 0xaddf, 0x2, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000180), 0x8) r5 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f0000000080)={'bond0\x00', 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) capset(&(0x7f0000000380)={0x20080522}, 0x0) setrlimit(0x40000000000008, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r7, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYBLOB], 0x30}}], 0x1, 0x4000804) 34.906927ms ago: executing program 3 (id=100): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x9) ptrace$setregset(0x4205, 0x0, 0x2, 0x0) 0s ago: executing program 1 (id=101): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) fsopen(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r1, 0x1, r0, 0x0, 0x80000}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.174' (ED25519) to the list of known hosts. [ 79.680918][ T5753] cgroup: Unknown subsys name 'net' [ 79.820626][ T5753] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.498434][ T5753] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.471565][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.479616][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.488287][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.496576][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.504044][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.513791][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.532793][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.535709][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.542250][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.549156][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.554914][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.562251][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.569433][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.576424][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.583351][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.589972][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.597221][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.603800][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.610463][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.617495][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.624295][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.638719][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.652819][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.660331][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.179351][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 84.198396][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 84.277473][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 84.410307][ T5763] chnl_net:caif_netlink_parms(): no params data found [ 84.509114][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.516861][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.525114][ T5764] bridge_slave_0: entered allmulticast mode [ 84.532545][ T5764] bridge_slave_0: entered promiscuous mode [ 84.548459][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.555783][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.563992][ T5764] bridge_slave_1: entered allmulticast mode [ 84.571102][ T5764] bridge_slave_1: entered promiscuous mode [ 84.578538][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.585890][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.593371][ T5767] bridge_slave_0: entered allmulticast mode [ 84.600733][ T5767] bridge_slave_0: entered promiscuous mode [ 84.610198][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.617498][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.624718][ T5767] bridge_slave_1: entered allmulticast mode [ 84.631547][ T5767] bridge_slave_1: entered promiscuous mode [ 84.638767][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.646134][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.653664][ T5765] bridge_slave_0: entered allmulticast mode [ 84.660654][ T5765] bridge_slave_0: entered promiscuous mode [ 84.707484][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.714797][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.723298][ T5765] bridge_slave_1: entered allmulticast mode [ 84.730381][ T5765] bridge_slave_1: entered promiscuous mode [ 84.799407][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.810871][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.823952][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.835776][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.848460][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.877030][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.963506][ T5764] team0: Port device team_slave_0 added [ 84.985325][ T5765] team0: Port device team_slave_0 added [ 84.991580][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.999201][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.006904][ T5763] bridge_slave_0: entered allmulticast mode [ 85.017270][ T5763] bridge_slave_0: entered promiscuous mode [ 85.025327][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.032794][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.039966][ T5763] bridge_slave_1: entered allmulticast mode [ 85.046990][ T5763] bridge_slave_1: entered promiscuous mode [ 85.055332][ T5764] team0: Port device team_slave_1 added [ 85.076217][ T5767] team0: Port device team_slave_0 added [ 85.085775][ T5767] team0: Port device team_slave_1 added [ 85.109789][ T5765] team0: Port device team_slave_1 added [ 85.179320][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.216031][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.223103][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.250290][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.265239][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.272329][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.298409][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.312557][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.340526][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.347548][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.373851][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.387035][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.394425][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.426770][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.438641][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.445669][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.472192][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.502759][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.509750][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.535826][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.558764][ T5763] team0: Port device team_slave_0 added [ 85.568229][ T5763] team0: Port device team_slave_1 added [ 85.642784][ T51] Bluetooth: hci0: command tx timeout [ 85.669644][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.676819][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.703880][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.718024][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.725409][ T51] Bluetooth: hci1: command tx timeout [ 85.725431][ T5775] Bluetooth: hci3: command tx timeout [ 85.726253][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.736553][ T51] Bluetooth: hci2: command tx timeout [ 85.768188][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.784464][ T5767] hsr_slave_0: entered promiscuous mode [ 85.790932][ T5767] hsr_slave_1: entered promiscuous mode [ 85.826113][ T5765] hsr_slave_0: entered promiscuous mode [ 85.832858][ T5765] hsr_slave_1: entered promiscuous mode [ 85.839135][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.847055][ T5765] Cannot create hsr debugfs directory [ 85.893922][ T5764] hsr_slave_0: entered promiscuous mode [ 85.900325][ T5764] hsr_slave_1: entered promiscuous mode [ 85.907321][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.915634][ T5764] Cannot create hsr debugfs directory [ 85.985183][ T5763] hsr_slave_0: entered promiscuous mode [ 85.994782][ T5763] hsr_slave_1: entered promiscuous mode [ 86.000928][ T5763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.010118][ T5763] Cannot create hsr debugfs directory [ 86.399279][ T5764] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.415418][ T5764] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.435090][ T5764] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.460310][ T5764] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.509327][ T5767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.520301][ T5767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.535337][ T5767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.547376][ T5767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.629903][ T5763] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.670974][ T5763] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.683850][ T5763] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.694342][ T5763] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.758511][ T5765] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.773283][ T5765] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.794160][ T5765] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.805289][ T5765] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.874082][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.954147][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.986903][ T2945] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.994378][ T2945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.006356][ T2945] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.013521][ T2945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.104825][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.117360][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.153771][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.194127][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.217248][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.231378][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.268218][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.275438][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.294464][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.301648][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.314684][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.321916][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.366552][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.373755][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.397109][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.404329][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.425690][ T2942] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.432929][ T2942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.572523][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.721803][ T5764] veth0_vlan: entered promiscuous mode [ 87.724220][ T51] Bluetooth: hci0: command tx timeout [ 87.737605][ T5764] veth1_vlan: entered promiscuous mode [ 87.803348][ T51] Bluetooth: hci3: command tx timeout [ 87.808972][ T51] Bluetooth: hci2: command tx timeout [ 87.814081][ T5775] Bluetooth: hci1: command tx timeout [ 87.819041][ T5764] veth0_macvtap: entered promiscuous mode [ 87.856608][ T5764] veth1_macvtap: entered promiscuous mode [ 87.945121][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.995514][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.037504][ T5764] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.064125][ T5764] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.081987][ T5764] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.090748][ T5764] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.167742][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.197260][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.225893][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.268640][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.294422][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.343350][ T747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.364522][ T747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.411333][ T5763] veth0_vlan: entered promiscuous mode [ 88.447093][ T5765] veth0_vlan: entered promiscuous mode [ 88.478283][ T5765] veth1_vlan: entered promiscuous mode [ 88.508123][ T5767] veth0_vlan: entered promiscuous mode [ 88.555185][ T5763] veth1_vlan: entered promiscuous mode [ 88.596058][ T5767] veth1_vlan: entered promiscuous mode [ 88.679230][ T5765] veth0_macvtap: entered promiscuous mode [ 88.694838][ T5763] veth0_macvtap: entered promiscuous mode [ 88.724440][ T5763] veth1_macvtap: entered promiscuous mode [ 88.747059][ T5765] veth1_macvtap: entered promiscuous mode [ 88.773583][ T28] audit: type=1326 audit(1766066737.192:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942ef8f749 code=0x7ffc0000 [ 88.778594][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.807139][ T28] audit: type=1326 audit(1766066737.192:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942ef8f749 code=0x7ffc0000 [ 88.816037][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.847656][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.852082][ T28] audit: type=1326 audit(1766066737.252:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f942ef8f749 code=0x7ffc0000 [ 88.889254][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.899864][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.915789][ T28] audit: type=1326 audit(1766066737.252:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942ef8f749 code=0x7ffc0000 [ 88.950999][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.962816][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.967763][ T28] audit: type=1326 audit(1766066737.252:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942ef8f749 code=0x7ffc0000 [ 88.975356][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.010959][ T5767] veth0_macvtap: entered promiscuous mode [ 89.025330][ T5767] veth1_macvtap: entered promiscuous mode [ 89.034406][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.045802][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.057438][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.066377][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.077139][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.087555][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.098468][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.110392][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.166444][ T5765] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.181636][ T5765] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.195621][ T5765] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.212097][ T5765] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.238767][ T5865] syz.3.8[5865]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 89.257795][ T5763] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.268276][ T5763] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.271315][ T5865] loop3: detected capacity change from 0 to 128 [ 89.277289][ T5763] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.277388][ T5763] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.357091][ T5865] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.381098][ T5865] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 89.390570][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.428160][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.439931][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.450679][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.461069][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.471879][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.493471][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.505240][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.516007][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.525898][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.536592][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.546470][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.557002][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.570664][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.605128][ T5767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.614357][ T5767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.626010][ T5767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.635045][ T5767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.698656][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.715028][ T5764] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.724260][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.804343][ T5772] Bluetooth: hci0: command tx timeout [ 89.818719][ T2942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.846043][ T2942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.882267][ T5772] Bluetooth: hci1: command tx timeout [ 89.887740][ T5772] Bluetooth: hci2: command tx timeout [ 89.893411][ T5775] Bluetooth: hci3: command tx timeout [ 89.912555][ T2942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.920418][ T2942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.051322][ T2942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.080712][ T2942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.118711][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.138165][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.214707][ T2942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.227939][ T28] audit: type=1326 audit(1766066738.632:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5876 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb398f749 code=0x7ffc0000 [ 90.262329][ T2942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.276844][ T28] audit: type=1326 audit(1766066738.652:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5876 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8bb398f749 code=0x7ffc0000 [ 90.332867][ T28] audit: type=1326 audit(1766066738.752:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5876 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb398f749 code=0x7ffc0000 [ 90.393722][ T28] audit: type=1326 audit(1766066738.752:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5876 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb398f749 code=0x7ffc0000 [ 90.444282][ T28] audit: type=1326 audit(1766066738.752:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8bb39c2005 code=0x7ffc0000 [ 90.778642][ T5890] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13'. [ 90.849147][ T5884] netlink: 'syz.0.1': attribute type 9 has an invalid length. [ 90.874645][ T5884] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1'. [ 91.004338][ T5899] Zero length message leads to an empty skb [ 91.119838][ T5902] loop1: detected capacity change from 0 to 512 [ 91.202384][ T5902] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.17: bg 0: block 393: padding at end of block bitmap is not set [ 91.275431][ T5902] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 91.303597][ T5902] EXT4-fs (loop1): 2 truncates cleaned up [ 91.323928][ T5902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.445479][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.734423][ T5914] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 91.788731][ T5914] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 91.882883][ T5772] Bluetooth: hci0: command tx timeout [ 91.899701][ T5923] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.926420][ T5923] loop3: detected capacity change from 0 to 256 [ 91.930482][ T5770] kernel write not supported for file bpf-prog (pid: 5770 comm: kworker/1:3) [ 91.962140][ T5772] Bluetooth: hci2: command tx timeout [ 91.964010][ T51] Bluetooth: hci1: command tx timeout [ 91.967676][ T5775] Bluetooth: hci3: command tx timeout [ 91.997593][ T1193] cfg80211: failed to load regulatory.db [ 91.998499][ T5923] FAT-fs (loop3): bogus number of FAT sectors [ 92.031570][ T5923] FAT-fs (loop3): Can't find a valid FAT filesystem [ 92.259564][ T5932] ======================================================= [ 92.259564][ T5932] WARNING: The mand mount option has been deprecated and [ 92.259564][ T5932] and is ignored by this kernel. Remove the mand [ 92.259564][ T5932] option from the mount to silence this warning. [ 92.259564][ T5932] ======================================================= [ 92.569105][ T5939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.32'. [ 92.599103][ T5939] tipc: Started in network mode [ 92.613936][ T5939] tipc: Node identity 7, cluster identity 4711 [ 92.633174][ T5939] tipc: Node number set to 7 [ 92.755536][ T5947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.34'. [ 93.300077][ T5957] loop0: detected capacity change from 0 to 1024 [ 93.324080][ T5957] EXT4-fs: inline encryption not supported [ 93.330026][ T5957] EXT4-fs: Ignoring removed nobh option [ 93.354953][ T5957] EXT4-fs: Ignoring removed bh option [ 93.371484][ T5957] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.431727][ T5957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.147796][ T5969] netlink: 'syz.1.40': attribute type 4 has an invalid length. [ 95.314440][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.416596][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 95.416611][ T28] audit: type=1326 audit(1766066743.832:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5978 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42c98f749 code=0x7ffc0000 [ 95.455226][ T5980] tipc: Started in network mode [ 95.460157][ T5980] tipc: Node identity 3ae7dd74f5b8, cluster identity 4711 [ 95.478300][ T28] audit: type=1326 audit(1766066743.832:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5978 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42c98f749 code=0x7ffc0000 [ 95.504112][ T5980] tipc: Enabled bearer , priority 0 [ 95.511954][ T28] audit: type=1326 audit(1766066743.842:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5978 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa42c98df90 code=0x7ffc0000 [ 95.533316][ T5980] syzkaller0: entered promiscuous mode [ 95.539641][ T5980] syzkaller0: entered allmulticast mode [ 95.539653][ T28] audit: type=1326 audit(1766066743.842:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5978 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa42c990f77 code=0x7ffc0000 [ 95.587426][ T28] audit: type=1326 audit(1766066743.842:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5978 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa42c98f749 code=0x7ffc0000 [ 95.649421][ T28] audit: type=1326 audit(1766066743.842:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5978 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa42c990f77 code=0x7ffc0000 [ 95.653631][ T5980] tipc: Resetting bearer [ 95.677722][ T28] audit: type=1326 audit(1766066743.842:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5978 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa42c98e3aa code=0x7ffc0000 [ 95.730448][ T5979] tipc: Resetting bearer [ 95.757803][ T28] audit: type=1326 audit(1766066743.842:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5978 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42c98f749 code=0x7ffc0000 [ 95.816541][ T5979] tipc: Disabling bearer [ 95.818532][ T28] audit: type=1326 audit(1766066743.872:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5978 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa42c98f749 code=0x7ffc0000 [ 95.855566][ T28] audit: type=1326 audit(1766066743.872:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5978 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42c98f749 code=0x7ffc0000 [ 96.075490][ T5997] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.244017][ T5990] loop1: detected capacity change from 0 to 1024 [ 96.344287][ T5990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.860516][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.315660][ T6031] netlink: 60 bytes leftover after parsing attributes in process `syz.3.65'. [ 97.347950][ T6031] unsupported nlmsg_type 40 [ 97.727050][ T6039] loop1: detected capacity change from 0 to 1024 [ 97.887366][ T6039] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.943234][ T6036] process 'syz.0.67' launched '/dev/fd/4' with NULL argv: empty string added [ 98.144086][ T6039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.281831][ C1] sched: RT throttling activated [ 99.286741][ T6061] netlink: 80 bytes leftover after parsing attributes in process `syz.3.71'. [ 99.317929][ T6059] Illegal XDP return value 4294967274 on prog (id 36) dev N/A, expect packet loss! [ 99.681747][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.795216][ T6069] loop2: detected capacity change from 0 to 128 [ 99.849525][ T6069] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 100.064297][ T49] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 101.054002][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 101.054016][ T28] audit: type=1326 audit(1766066749.472:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb398f749 code=0x7ffc0000 [ 101.134836][ T28] audit: type=1326 audit(1766066749.512:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb398f749 code=0x7ffc0000 [ 101.201947][ T28] audit: type=1326 audit(1766066749.512:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f8bb398f749 code=0x7ffc0000 [ 101.250178][ T28] audit: type=1326 audit(1766066749.512:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb398f749 code=0x7ffc0000 [ 101.301797][ T28] audit: type=1326 audit(1766066749.512:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb398f749 code=0x7ffc0000 [ 101.349159][ T28] audit: type=1326 audit(1766066749.512:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bb398f749 code=0x7ffc0000 [ 101.396348][ T28] audit: type=1326 audit(1766066749.512:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb398f749 code=0x7ffc0000 [ 101.465694][ T28] audit: type=1326 audit(1766066749.512:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb398f749 code=0x7ffc0000 [ 101.518437][ T28] audit: type=1326 audit(1766066749.512:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bb398f749 code=0x7ffc0000 [ 101.590812][ T28] audit: type=1326 audit(1766066749.512:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb398f749 code=0x7ffc0000 [ 101.710388][ T6102] syz.3.88[6102] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.710527][ T6102] syz.3.88[6102] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.429856][ T6118] loop1: detected capacity change from 0 to 4096 [ 102.482823][ T6118] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.539306][ T6118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.695535][ T6128] loop0: detected capacity change from 0 to 1024 [ 102.764644][ T6128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.785788][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.925667][ T6128] ================================================================== [ 102.933802][ T6128] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x94b/0x1e90 [ 102.941579][ T6128] Read of size 18446744073709551588 at addr ffff888078277040 by task syz.0.99/6128 [ 102.950898][ T6128] [ 102.953261][ T6128] CPU: 1 PID: 6128 Comm: syz.0.99 Not tainted syzkaller #0 [ 102.960575][ T6128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 102.970655][ T6128] Call Trace: [ 102.973967][ T6128] [ 102.976919][ T6128] dump_stack_lvl+0x16c/0x230 [ 102.981633][ T6128] ? read_lock_is_recursive+0x20/0x20 [ 102.987043][ T6128] ? show_regs_print_info+0x20/0x20 [ 102.992289][ T6128] ? load_image+0x3b0/0x3b0 [ 102.996805][ T6128] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 103.002212][ T6128] ? __virt_addr_valid+0x18c/0x540 [ 103.007339][ T6128] ? __virt_addr_valid+0x469/0x540 [ 103.012477][ T6128] print_report+0xac/0x220 [ 103.016929][ T6128] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 103.022403][ T6128] kasan_report+0x117/0x150 [ 103.026927][ T6128] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 103.032407][ T6128] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 103.037882][ T6128] kasan_check_range+0x288/0x290 [ 103.042849][ T6128] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 103.048322][ T6128] __asan_memmove+0x29/0x70 [ 103.052836][ T6128] ext4_xattr_set_entry+0x94b/0x1e90 [ 103.058144][ T6128] ext4_xattr_block_set+0xae3/0x32a0 [ 103.063456][ T6128] ? ext4_destroy_inode+0x200/0x200 [ 103.068682][ T6128] ? proc_nr_inodes+0x230/0x230 [ 103.073553][ T6128] ? do_raw_spin_unlock+0x121/0x230 [ 103.078792][ T6128] ? _raw_spin_unlock+0x28/0x40 [ 103.083657][ T6128] ? ext4_xattr_block_find+0x350/0x350 [ 103.089134][ T6128] ? ext4_xattr_ibody_set+0x50d/0x6a0 [ 103.094520][ T6128] ext4_xattr_set_handle+0xbff/0x1290 [ 103.099914][ T6128] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 103.105916][ T6128] ? __ext4_journal_start_sb+0x259/0x570 [ 103.111570][ T6128] ext4_xattr_set+0x22d/0x320 [ 103.116270][ T6128] ? ext4_xattr_set_credits+0x2f0/0x2f0 [ 103.121866][ T6128] ? evm_protected_xattr_common+0x170/0x190 [ 103.127994][ T6128] ? evm_protect_xattr+0x534/0x7a0 [ 103.133123][ T6128] ? ext4_xattr_security_get+0x40/0x40 [ 103.138604][ T6128] __vfs_setxattr+0x431/0x470 [ 103.143303][ T6128] __vfs_setxattr_noperm+0x12d/0x5e0 [ 103.148601][ T6128] vfs_setxattr+0x16c/0x2f0 [ 103.153120][ T6128] ? xattr_permission+0x470/0x470 [ 103.158259][ T6128] ? __mnt_want_write+0x223/0x2a0 [ 103.163358][ T6128] ? path_setxattr+0x314/0x550 [ 103.168146][ T6128] path_setxattr+0x362/0x550 [ 103.172758][ T6128] ? simple_xattrs_free+0x150/0x150 [ 103.177984][ T6128] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 103.183977][ T6128] ? lock_chain_count+0x20/0x20 [ 103.188857][ T6128] __x64_sys_setxattr+0xbb/0xd0 [ 103.193743][ T6128] do_syscall_64+0x55/0xb0 [ 103.198169][ T6128] ? clear_bhb_loop+0x40/0x90 [ 103.202861][ T6128] ? clear_bhb_loop+0x40/0x90 [ 103.207546][ T6128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.213448][ T6128] RIP: 0033:0x7fd08198f749 [ 103.217882][ T6128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.237513][ T6128] RSP: 002b:00007fd08274b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 103.245953][ T6128] RAX: ffffffffffffffda RBX: 00007fd081be5fa0 RCX: 00007fd08198f749 [ 103.253942][ T6128] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100 [ 103.261932][ T6128] RBP: 00007fd081a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 103.269944][ T6128] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 103.277927][ T6128] R13: 00007fd081be6038 R14: 00007fd081be5fa0 R15: 00007ffe603fe0c8 [ 103.285920][ T6128] [ 103.288956][ T6128] [ 103.291312][ T6128] Allocated by task 6128: [ 103.295650][ T6128] kasan_set_track+0x4e/0x70 [ 103.300254][ T6128] __kasan_kmalloc+0x8f/0xa0 [ 103.304858][ T6128] __kmalloc_node_track_caller+0xb2/0x230 [ 103.310607][ T6128] kmemdup+0x2b/0x70 [ 103.314533][ T6128] ext4_xattr_block_set+0x9e5/0x32a0 [ 103.319847][ T6128] ext4_xattr_set_handle+0xbff/0x1290 [ 103.325259][ T6128] ext4_xattr_set+0x22d/0x320 [ 103.329953][ T6128] __vfs_setxattr+0x431/0x470 [ 103.334644][ T6128] __vfs_setxattr_noperm+0x12d/0x5e0 [ 103.339943][ T6128] vfs_setxattr+0x16c/0x2f0 [ 103.344481][ T6128] path_setxattr+0x362/0x550 [ 103.349097][ T6128] __x64_sys_setxattr+0xbb/0xd0 [ 103.353973][ T6128] do_syscall_64+0x55/0xb0 [ 103.358410][ T6128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.364324][ T6128] [ 103.366659][ T6128] The buggy address belongs to the object at ffff888078277000 [ 103.366659][ T6128] which belongs to the cache kmalloc-1k of size 1024 [ 103.380729][ T6128] The buggy address is located 64 bytes inside of [ 103.380729][ T6128] 1024-byte region [ffff888078277000, ffff888078277400) [ 103.394008][ T6128] [ 103.396334][ T6128] The buggy address belongs to the physical page: [ 103.402754][ T6128] page:ffffea0001e09c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78270 [ 103.412913][ T6128] head:ffffea0001e09c00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 103.421856][ T6128] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 103.430286][ T6128] page_type: 0xffffffff() [ 103.434625][ T6128] raw: 00fff00000000840 ffff888017841dc0 0000000000000000 dead000000000001 [ 103.443227][ T6128] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 103.451810][ T6128] page dumped because: kasan: bad access detected [ 103.458236][ T6128] page_owner tracks the page as allocated [ 103.463954][ T6128] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5685, tgid 5685 (dhcpcd-run-hook), ts 66842181071, free_ts 66778630963 [ 103.485605][ T6128] post_alloc_hook+0x1cd/0x210 [ 103.490397][ T6128] get_page_from_freelist+0x195c/0x19f0 [ 103.495964][ T6128] __alloc_pages+0x1e3/0x460 [ 103.500575][ T6128] alloc_slab_page+0x5d/0x170 [ 103.505272][ T6128] new_slab+0x87/0x2e0 [ 103.509358][ T6128] ___slab_alloc+0xc6d/0x1300 [ 103.514048][ T6128] __kmem_cache_alloc_node+0x1a2/0x260 [ 103.519519][ T6128] __kmalloc+0xa4/0x240 [ 103.523690][ T6128] load_elf_phdrs+0x136/0x230 [ 103.528482][ T6128] load_elf_binary+0x956/0x2700 [ 103.533361][ T6128] bprm_execve+0xaeb/0x16f0 [ 103.537895][ T6128] do_execveat_common+0x51b/0x6c0 [ 103.542935][ T6128] __x64_sys_execve+0x92/0xa0 [ 103.547624][ T6128] do_syscall_64+0x55/0xb0 [ 103.552307][ T6128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.558213][ T6128] page last free stack trace: [ 103.562886][ T6128] free_unref_page_prepare+0x7ce/0x8e0 [ 103.568383][ T6128] free_unref_page+0x32/0x2e0 [ 103.573105][ T6128] __unfreeze_partials+0x1cf/0x210 [ 103.578276][ T6128] put_cpu_partial+0x17c/0x250 [ 103.583126][ T6128] __slab_free+0x31d/0x410 [ 103.587591][ T6128] qlist_free_all+0x75/0xe0 [ 103.592109][ T6128] kasan_quarantine_reduce+0x143/0x160 [ 103.597584][ T6128] __kasan_slab_alloc+0x22/0x80 [ 103.602441][ T6128] slab_post_alloc_hook+0x6e/0x4d0 [ 103.607573][ T6128] kmem_cache_alloc+0x11e/0x2e0 [ 103.612434][ T6128] getname_flags+0xbb/0x500 [ 103.616946][ T6128] vfs_fstatat+0x111/0x1b0 [ 103.621367][ T6128] __x64_sys_newfstatat+0x117/0x190 [ 103.626575][ T6128] do_syscall_64+0x55/0xb0 [ 103.630996][ T6128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.636906][ T6128] [ 103.639232][ T6128] Memory state around the buggy address: [ 103.644863][ T6128] ffff888078276f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 103.652931][ T6128] ffff888078276f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 103.660999][ T6128] >ffff888078277000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 103.669059][ T6128] ^ [ 103.675213][ T6128] ffff888078277080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 103.683289][ T6128] ffff888078277100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 103.691353][ T6128] ================================================================== [ 103.763238][ T6128] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 103.770497][ T6128] CPU: 0 PID: 6128 Comm: syz.0.99 Not tainted syzkaller #0 [ 103.777726][ T6128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.787819][ T6128] Call Trace: [ 103.791120][ T6128] [ 103.794100][ T6128] dump_stack_lvl+0x16c/0x230 [ 103.798821][ T6128] ? show_regs_print_info+0x20/0x20 [ 103.804056][ T6128] ? load_image+0x3b0/0x3b0 [ 103.808587][ T6128] panic+0x2c0/0x710 [ 103.812506][ T6128] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 103.818693][ T6128] ? bpf_jit_dump+0xd0/0xd0 [ 103.823244][ T6128] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 103.829186][ T6128] ? _raw_spin_unlock+0x40/0x40 [ 103.834081][ T6128] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 103.839581][ T6128] check_panic_on_warn+0x84/0xa0 [ 103.844571][ T6128] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 103.850073][ T6128] end_report+0x6f/0x140 [ 103.854353][ T6128] kasan_report+0x128/0x150 [ 103.858894][ T6128] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 103.864397][ T6128] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 103.869897][ T6128] kasan_check_range+0x288/0x290 [ 103.874873][ T6128] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 103.880377][ T6128] __asan_memmove+0x29/0x70 [ 103.884922][ T6128] ext4_xattr_set_entry+0x94b/0x1e90 [ 103.890261][ T6128] ext4_xattr_block_set+0xae3/0x32a0 [ 103.895598][ T6128] ? ext4_destroy_inode+0x200/0x200 [ 103.900900][ T6128] ? proc_nr_inodes+0x230/0x230 [ 103.905789][ T6128] ? do_raw_spin_unlock+0x121/0x230 [ 103.911031][ T6128] ? _raw_spin_unlock+0x28/0x40 [ 103.915922][ T6128] ? ext4_xattr_block_find+0x350/0x350 [ 103.921423][ T6128] ? ext4_xattr_ibody_set+0x50d/0x6a0 [ 103.926841][ T6128] ext4_xattr_set_handle+0xbff/0x1290 [ 103.932264][ T6128] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 103.938308][ T6128] ? __ext4_journal_start_sb+0x259/0x570 [ 103.943981][ T6128] ext4_xattr_set+0x22d/0x320 [ 103.948691][ T6128] ? ext4_xattr_set_credits+0x2f0/0x2f0 [ 103.954251][ T6128] ? evm_protected_xattr_common+0x170/0x190 [ 103.960166][ T6128] ? evm_protect_xattr+0x534/0x7a0 [ 103.965305][ T6128] ? ext4_xattr_security_get+0x40/0x40 [ 103.970787][ T6128] __vfs_setxattr+0x431/0x470 [ 103.975479][ T6128] __vfs_setxattr_noperm+0x12d/0x5e0 [ 103.980815][ T6128] vfs_setxattr+0x16c/0x2f0 [ 103.985343][ T6128] ? xattr_permission+0x470/0x470 [ 103.990386][ T6128] ? __mnt_want_write+0x223/0x2a0 [ 103.995430][ T6128] ? path_setxattr+0x314/0x550 [ 104.000209][ T6128] path_setxattr+0x362/0x550 [ 104.004814][ T6128] ? simple_xattrs_free+0x150/0x150 [ 104.010036][ T6128] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 104.016032][ T6128] ? lock_chain_count+0x20/0x20 [ 104.020896][ T6128] __x64_sys_setxattr+0xbb/0xd0 [ 104.025766][ T6128] do_syscall_64+0x55/0xb0 [ 104.030191][ T6128] ? clear_bhb_loop+0x40/0x90 [ 104.034882][ T6128] ? clear_bhb_loop+0x40/0x90 [ 104.039593][ T6128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.045496][ T6128] RIP: 0033:0x7fd08198f749 [ 104.049923][ T6128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.069539][ T6128] RSP: 002b:00007fd08274b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 104.077984][ T6128] RAX: ffffffffffffffda RBX: 00007fd081be5fa0 RCX: 00007fd08198f749 [ 104.085964][ T6128] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100 [ 104.093949][ T6128] RBP: 00007fd081a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 104.101933][ T6128] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 104.109906][ T6128] R13: 00007fd081be6038 R14: 00007fd081be5fa0 R15: 00007ffe603fe0c8 [ 104.117890][ T6128] [ 104.121218][ T6128] Kernel Offset: disabled [ 104.125544][ T6128] Rebooting in 86400 seconds..