last executing test programs: 3.744737231s ago: executing program 0 (id=188): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r3, &(0x7f0000000080)='./file0\x00') 3.560867329s ago: executing program 0 (id=190): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f"], 0x104}}, 0x0) 3.53449255s ago: executing program 1 (id=192): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280), 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000022, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0xffff]}}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x101, 0x0) close(r7) 3.432073964s ago: executing program 0 (id=194): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0xfffffffffffffe3c, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x70bd21, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x4}]}}}]}, 0x3c}}, 0x24000004) 3.385930886s ago: executing program 3 (id=195): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r0}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.448931836s ago: executing program 0 (id=197): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_ext={0x1c, 0x28, 0x0, 0x0, 0xb6, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x19b28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x402) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$kcm(0xa, 0x2, 0x88) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x8}, 0x18) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) connect$tipc(r2, &(0x7f0000000140)=@id, 0x10) fcntl$lock(r1, 0x25, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r5, 0x25, &(0x7f00000000c0)) close(r1) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./bus\x00', 0x2000404, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f0000000ac0)="$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") ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000c40000000800"]) 2.391685979s ago: executing program 3 (id=198): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, 0x0, 0x0) 2.268295623s ago: executing program 1 (id=200): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xb, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x60600, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x1}, 0x5f) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r4}, 0x18) mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3}) 2.10838259s ago: executing program 3 (id=202): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000180), 0x5, 0x46b, &(0x7f0000000a00)="$eJzs3M1vFOUfAPDvzLbw+/HWivgColaJsfGlpQWVgxeNJh4wmugB9VTbQgiFGloTIUSqMXgxMSR6Vo8m/gXevBj1ZGLiSe+GhCgX0FPNzM5Ad9ltt3TZrd3PJxl4nn2e7TzfPvPMPDPPbgPoWUPZP0nEtoj4LSIGqtnaCkPV/65dOTf595Vzk0ksLr72Z5LXu3rl3GRZtXzf1iIznEakHyXFTmrNnTl7YmJmZvp0kR+dP/nO6NyZs08ePzlxbPrY9KnxQ4cOHhh75unxp9oSZxbX1T3vz+7d/dIbF1+ePHLx7R+/ydq7rShfGsct2XTzS0NZ4H8t5urLHon/r2l36832Jemkr4sNYVUqEZF1V38+/geiEjc6byBe/LCrjQNuq+zatLl58cIisIEl0e0WAN1RXuiz+99y69DUY124/Fz1BiiL+1qxVUv6Ii3q9Nfd37bTUEQcWfjni2yLdjyHAABYwSeTnx+OJxrN/9K4e0m9HcUaymBE3BEROyPizojYFRF3ReR174mIe1e5//qloZvnP+mlWwqsRdn879libat2/lfO/mKwUuS25/H3J0ePz0zvL34nw9G/OcuPLbOP71745dNmZUvnf9mW7b+cCxbtuNRX94BuamJ+Ip+UtsHlDyL29DWKP7m+EpBExO6I2LO6H72jTBx/7Ou9zSqtHP8y2rDOtPhVxKPV/l+IuvhLyfLrk6P/i5np/aPlUXGzn36+8Gqz/a8p/jbI+n9L7fFflHx5pkgMvrV0vXYuVr1yeeH3j5ve09zq8b8peT0/H5XLru9NzM+fHovYlBzO8zWvj994b5kv62fxD+9rPP53Fu/J+v++iMgO4vsj4oGIeLBo+0MR8XBE7Fsm/h+eb162Hvp/quH57/rxP5jU9P/qE5UT33/bbP+t9f/BPDVcvJKf/1bQagPX8rsDAACA/4o0/wx8ko5cT6fpyEj1M/y7Yks6Mzs3//jR2XdPTVU/Kz8Y/Wn5pGtgyfPQsWSh+InV/HjxrLgsP1A8N/6sEnl+ZHJ2ZqrLsUOv29pk/Gf+qHS7dcBt12gdbbzBF9qAjad+/Ke12fOvdLIxQEf5vjb0rhXGf9qpdgCd5/oPvavR+D9fl7cWABuT6z/0LuMfepfxD72rbvxX4tdutQTooLV8r1+ilxORrotmtJRo/e9B3O7Em+ujGS0kun1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI9/AwAA//9sbvBf") lseek(0xffffffffffffffff, 0x3d6, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x3, 0x1, 0x8000c62) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x19c, r4, 0xe701ac47a3d23ecd, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x17e, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00\x91d\xe6,\xd3@I\x17\xf3\xbeeI8bz\xdb\xb8s0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\xacs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=40\xe8R\x83p,J\xca\x85\xcb\xfa:\xdb\xda\x05\xed\xc8\xad\xa2\xfc0C\x9e3\x8e*\xae\x91\xa4\xc7)\xc0\x87\x9b\xee~\xdb\xac\x03\x90\xb1\x05\x81\xb1j\xfaO`\xa7\xa0\xeb\x83\x13 \xc8\x98\xdb\v \x95\x8eD\xc3\xc6:\xcc%\x88\xc7\xa5\xe5\xfc\xccl\x96F_\x92\xa2\xc3\xea@\"\xb1\x1b`o~B\xb4W\xd8\v\xabCBL\x81A\x92D\xd5{K\xf0\xd5\x91\n\x94\x9b\xd9\xdb2E\\\xb1\x90\xf1\xfc\xc1}\x96\xf4\xba3g\xc8\xf7j\xbc\xf1\x11\xe3\x05\xean9M\xeb&\xd2\xdf\xbe\xa1\xe8[\x91\xa5\x90uX\xd0IH!\xe3\x8a9k\x94\xc8\xde\xea\xc6^\x96\xceV\xb2\xcba\x8b\xbc\xe9'}]}, 0x19c}, 0x1, 0x0, 0x0, 0x2}, 0x4000840) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0xb) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) ppoll(&(0x7f0000000000)=[{r7, 0x2029}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x9, 0x0, 0x0, 0x0, 0x1, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) syz_emit_ethernet(0x3a, &(0x7f0000002040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb08004500002c0b00000000119078ac1e0001e000000100004e220018907804000000000000800800000000000000"], 0x0) writev(r5, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x60000}], 0x1) 2.1081806s ago: executing program 1 (id=203): r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x4000000000) 1.793044753s ago: executing program 1 (id=204): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x17) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000007c0)=""/7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) sync() fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 1.792855103s ago: executing program 2 (id=205): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0}, 0x18) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, 0x0, 0x0) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) listen(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 1.692808318s ago: executing program 2 (id=206): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) bind$packet(r4, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="27738d50c7f5"}, 0x14) 1.466000727s ago: executing program 2 (id=207): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x14, r0, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@void, @void}}}, 0x14}}, 0x0) 1.442210428s ago: executing program 1 (id=208): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280), 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000022, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0xffff]}}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x101, 0x0) close(r7) 1.348890142s ago: executing program 3 (id=209): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7f3, &(0x7f0000001800)="$eJzs3U9oHOfZAPBnFMmWFfAX8n3kM8ZxxnZKbeoqu1KiVOSQbFYjeRJpV+yuik0pSYhtMJaTEBPS+NDEl6QtLaWnHtNcQy6FHgo9lPbQFgqF5tBLD4VATiWFFkpLCajM7K71x1pJTmQrTX8/Yb2z7z7zzjOzo3l21ruzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEUp+pVKrJwYhYOpsOVp9pNRe2uL8/3s/XNVssNyIp/sXoaBzqdh36v9W77yt+HY8j3VtHYrRoRuPa3ffd89j/Dg/1598ioU/q2A7jkog3iqQuPzcUcTsSuYO+87NbnuWfK8XvuayRt5v5Qm0uS/N2M52emqo8dGa2nc7m81n7XLuTLaT1VlbrNFvpyfqptDo9PZlm4+eaS425mdp81u989MsTlcpU+tT4YlZrtZuNh54ab9fP5PPzeWOujJmovBpFzKPFjvh03kk7WW0hTS9eWr4wuV2qRVB1Xc/+dY/XkQfv+fCVD/526UKxQw4aJOntmBPV6sREdeqR6UcerVSGJyoT6zsqG8SNiBiKKCJuy07LZ92B1YPE7h284VMa6tb/iPnIoxFLcTbSSGOo/L36MxKjMROtaMZCcfsPIxvuv6n+f+Ghv/xuq+WW9futoqiP3qjyh1bvPhxl/T/avXV0QP0vDsob89jZz4FbnePKbyPe62aztv9qvBbX4nI8F8uxHBfi5U+Yzx37Gdph3Gj/kdg6bi6yaEQe7WhGHgtRK3vSXk8a0zEVU1GJZ+JMzEY70piNPOYji3aci3Z0Iiv3qHq0IotadKIZrUjjZNTjVKRRjemYjslII4vxOBfNWIpGzMVM1MpRLsalcrtPbsjrvm8+m7zx+w/fLqZvBFW3WJGkeDJXBP11Xff6/aRXzB+IHdX/A70tuD4iiXR4j2sRu6r/p7LT+F04asPuWCnr//BepwEAAADcRkn56nsSESNxfzk1m89nX9vrtAAAAIBdVL6v+UjRjBRT90dSnP9XNol8/47nBgAAAOyOpPyMXRIRY/FAd6r/canNXgQAAAAA/gOV//9/tGjGIl4vO5z/AwAAwOfMtwZdY/+Dfb1r7LcX9yd39aIXzz6YXKkVU7Urvb5e89UbI3ZmDycHe4OUzdTwtbuTiBiuZ0eS/tUvP97fbT8qRzi8egHCQdf6T1qtkeT64ARi6wTKW/HdONaNOXa+257v39NdythsPp+N15vzj1WT3osjnVdeuPSNiGLp324sHEzi4qXlC+PPv7h8vszlejHK9Su9y8Mnt5DLSm8LxP2br/FI+UGM3nLHusutrF3/oe7sQ1svM1m7zDfjeDfm+Fi3HVu//qPFMqvjj1WjVjs41MnOdl5ZWbP2vSyqn3LN34wT3ZgTJ090m02ymFiXxQs3ZzGxNoudbYstsyj0s3j72Otn//6rZpJNbpfF5KfMAmCvXCyv+rNahQ6UVehfK11F/d9Qd/tXNd/0KPfFn/SOoRuOchdXn2X0519T64Zjd6r7m3GyDPnFye7zieHD6+rKE2VdqWxyRH/p0ku/7h3RH373hz/6+tHf/Hi1um04Rj/RfVYwOIt341Q3stfEvb+8qboVQ1TLLfu9DVX1nWKOdwZW1fb8RDISESv/c+Pu8nGKiInJqcrDlcojEzFSPlXoNYMz3b/zvQSAz5ttv2NnB9/C8/DmZ9XRr3j33nhLwXg8Hy/GcpyP0+WnDSLigc1HHVvzNoTT25y1jq35hpfT25xbrsZObIzdfyKJAbGTa7bY//+gbP5x+x4TALjdjm9Th3dS/0/3zrtj8/PuDbX8VPeLc/tnxzG4lm/mK7d7gwDAf4Gs9VEy1nkrabXyxWeq09PVWudMlraa9afTVj4zl6V5o5O16mdqjbksXWw1O816/wXxmaydtpcWF5sfd9LZZitdbLbzs+U3v6e9r35vZwu1xqtRby/OZ7V2ltabjU6t3kln8nY9XVx6cj5vn8la5cztxayez+b1WidvNtJ2c6lVz8bTtJ1lawLzmazRyWfzYrKRLrbyhVrrekTMLy1k6UzWrrfyxU6zO2B/WXljttlaqA1Y/T/fwU0NAJ8ZV1+7dvm55eULL6+fWEk29mw+8ccdxFyNWNnr1QQA1lhbpQEAAAAAAAAAAAAAgM+mmz+uV/Ru+5G+tRMjcQvBGyb2xyeZ6/M78aX3ug/Lbgy4yTj7tpzrrtWeA+se0329nWXvt88tTzz7+OOXB8U8+fqhM3/KIrYfZ/O/lKt337T3xlsHI/b99Pvdnifu1Jq+H921iOFbmn0l2SJmzw5JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDQvwMAAP//wexOyQ==") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @opaque="24dc6170e1e03185"}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000b40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0xb, 0x100, @void}}}}}}}, 0x0) 1.293856425s ago: executing program 2 (id=210): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x51}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 773.332747ms ago: executing program 0 (id=211): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240002801400018008000100e000000108000200ac1414270c00028005000100000000000800074000000007240001801400018008000100e000000108000200ac1414000c00028005000100000000002c000e800c0002800500010021000000140001"], 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) 234.26259ms ago: executing program 2 (id=212): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, 0x0, 0x0, 0x4000000000) 232.64304ms ago: executing program 3 (id=213): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) close(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0x0, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xc}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x1, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 135.609094ms ago: executing program 1 (id=214): socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000"], &(0x7f0000000500)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kfree\x00'}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200080001400100000031007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) timer_create(0x1, &(0x7f0000000040)={0x0, 0x1, 0x800000000004}, &(0x7f0000bbdffc)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = epoll_create1(0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r8, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7a, r8}) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r6, &(0x7f0000000000)={0xe000202b}) epoll_pwait(r6, &(0x7f0000000580)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000300)={0x7}) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r4, 0x30b, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x20000004) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.879379ms ago: executing program 3 (id=215): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") 12.644569ms ago: executing program 0 (id=216): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x17) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000007c0)=""/7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) sync() fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 0s ago: executing program 2 (id=217): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) request_key(0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4045}, 0x4000054) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.250' (ED25519) to the list of known hosts. [ 76.569146][ T5774] cgroup: Unknown subsys name 'net' [ 76.732192][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.468872][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.804042][ T5795] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.826328][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.831161][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.842356][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.844846][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.850316][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.858742][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.864932][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.871672][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.878837][ T5797] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.887199][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.899949][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.903473][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.913820][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.914937][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.922437][ T5799] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.941803][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.950415][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.958020][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.965776][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.974077][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.984092][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.994595][ T5799] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.012207][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.543476][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 81.555598][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 81.623929][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 81.799645][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.811445][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.819253][ T5787] bridge_slave_0: entered allmulticast mode [ 81.831068][ T5787] bridge_slave_0: entered promiscuous mode [ 81.840392][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 81.870729][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.882733][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.890046][ T5784] bridge_slave_0: entered allmulticast mode [ 81.902007][ T5784] bridge_slave_0: entered promiscuous mode [ 81.911097][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.919549][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.926850][ T5787] bridge_slave_1: entered allmulticast mode [ 81.934422][ T5787] bridge_slave_1: entered promiscuous mode [ 81.997040][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.006396][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.014886][ T5784] bridge_slave_1: entered allmulticast mode [ 82.022371][ T5784] bridge_slave_1: entered promiscuous mode [ 82.047959][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.133272][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.151945][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.162561][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.172394][ T5785] bridge_slave_0: entered allmulticast mode [ 82.182225][ T5785] bridge_slave_0: entered promiscuous mode [ 82.200034][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.248147][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.257927][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.267776][ T5785] bridge_slave_1: entered allmulticast mode [ 82.278064][ T5785] bridge_slave_1: entered promiscuous mode [ 82.289899][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.377536][ T5787] team0: Port device team_slave_0 added [ 82.386414][ T5787] team0: Port device team_slave_1 added [ 82.420121][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.432776][ T5784] team0: Port device team_slave_0 added [ 82.442994][ T5784] team0: Port device team_slave_1 added [ 82.460478][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.467796][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.475106][ T5786] bridge_slave_0: entered allmulticast mode [ 82.482108][ T5786] bridge_slave_0: entered promiscuous mode [ 82.492249][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.542853][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.550451][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.558604][ T5786] bridge_slave_1: entered allmulticast mode [ 82.566185][ T5786] bridge_slave_1: entered promiscuous mode [ 82.598310][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.605432][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.631780][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.646733][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.655115][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.681173][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.694047][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.701024][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.728203][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.754293][ T5785] team0: Port device team_slave_0 added [ 82.761007][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.768176][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.794353][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.831456][ T5785] team0: Port device team_slave_1 added [ 82.864197][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.871210][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.897343][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.913775][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.938192][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.945530][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.972646][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.972669][ T51] Bluetooth: hci3: command tx timeout [ 82.991792][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.047008][ T51] Bluetooth: hci1: command tx timeout [ 83.053169][ T5794] Bluetooth: hci0: command tx timeout [ 83.060493][ T5791] Bluetooth: hci2: command tx timeout [ 83.085964][ T5787] hsr_slave_0: entered promiscuous mode [ 83.094915][ T5787] hsr_slave_1: entered promiscuous mode [ 83.119964][ T5786] team0: Port device team_slave_0 added [ 83.130998][ T5784] hsr_slave_0: entered promiscuous mode [ 83.137604][ T5784] hsr_slave_1: entered promiscuous mode [ 83.144176][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.152086][ T5784] Cannot create hsr debugfs directory [ 83.189415][ T5786] team0: Port device team_slave_1 added [ 83.220036][ T5785] hsr_slave_0: entered promiscuous mode [ 83.226947][ T5785] hsr_slave_1: entered promiscuous mode [ 83.233265][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.241805][ T5785] Cannot create hsr debugfs directory [ 83.322914][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.330199][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.356634][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.370421][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.377523][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.403670][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.592361][ T5786] hsr_slave_0: entered promiscuous mode [ 83.599884][ T5786] hsr_slave_1: entered promiscuous mode [ 83.607299][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.614988][ T5786] Cannot create hsr debugfs directory [ 83.839379][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.862329][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.873687][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.905282][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.025874][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.039306][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.051797][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.066267][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.168768][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.180866][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.192694][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.211788][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.320364][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.330776][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.341537][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.366259][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.390024][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.472788][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.489797][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.514651][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.522129][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.540156][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.547375][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.590886][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.641839][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.649221][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.660824][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.668084][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.717223][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.830636][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.859461][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.880192][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.887411][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.942672][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.949949][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.977890][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.026772][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.034711][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.050508][ T5791] Bluetooth: hci3: command tx timeout [ 85.100328][ T3458] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.107614][ T3458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.125798][ T5791] Bluetooth: hci1: command tx timeout [ 85.131284][ T5791] Bluetooth: hci2: command tx timeout [ 85.138739][ T5791] Bluetooth: hci0: command tx timeout [ 85.231496][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.287737][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.329133][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.387555][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.494410][ T5785] veth0_vlan: entered promiscuous mode [ 85.550431][ T5785] veth1_vlan: entered promiscuous mode [ 85.571173][ T5784] veth0_vlan: entered promiscuous mode [ 85.613388][ T5784] veth1_vlan: entered promiscuous mode [ 85.662849][ T5785] veth0_macvtap: entered promiscuous mode [ 85.690440][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.717383][ T5785] veth1_macvtap: entered promiscuous mode [ 85.740478][ T5784] veth0_macvtap: entered promiscuous mode [ 85.769336][ T5784] veth1_macvtap: entered promiscuous mode [ 85.810527][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.832782][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.851290][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.864273][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.875557][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.889801][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.903541][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.914137][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.927188][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.941723][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.951928][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.961151][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.970100][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.001523][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.011690][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.021152][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.030161][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.122653][ T5786] veth0_vlan: entered promiscuous mode [ 86.181926][ T5786] veth1_vlan: entered promiscuous mode [ 86.214180][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.222255][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.263135][ T5787] veth0_vlan: entered promiscuous mode [ 86.300216][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.317628][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.340744][ T5787] veth1_vlan: entered promiscuous mode [ 86.399436][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.408434][ T5786] veth0_macvtap: entered promiscuous mode [ 86.414589][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.430036][ T5786] veth1_macvtap: entered promiscuous mode [ 86.445943][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.462119][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.516615][ T5787] veth0_macvtap: entered promiscuous mode [ 86.538031][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.548775][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.560924][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.572900][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.585498][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.601512][ T5787] veth1_macvtap: entered promiscuous mode [ 86.614818][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.626515][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.637994][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.649210][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.666209][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.732937][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.761698][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.778916][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.812275][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.837543][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.850585][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.866562][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.878819][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.897552][ T23] cfg80211: failed to load regulatory.db [ 86.915861][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.940528][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.966897][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.095826][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.108540][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.184813][ T5791] Bluetooth: hci3: command tx timeout [ 87.210672][ T5791] Bluetooth: hci2: command tx timeout [ 87.219397][ T5791] Bluetooth: hci1: command tx timeout [ 87.226674][ T5791] Bluetooth: hci0: command tx timeout [ 87.362017][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.479761][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.592155][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.724740][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.775773][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.892075][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.931786][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.964947][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.988686][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.120793][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.156460][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.250389][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.285671][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.450099][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.495935][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.606270][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.626969][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.654415][ T5908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 89.203993][ T5794] Bluetooth: hci3: command tx timeout [ 89.284580][ T5794] Bluetooth: hci0: command tx timeout [ 89.290135][ T5794] Bluetooth: hci1: command tx timeout [ 89.295660][ T5791] Bluetooth: hci2: command tx timeout [ 89.590494][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.603713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.618334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.692978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.795525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.001673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.209883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.326931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 90.914123][ T5992] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15'. [ 91.003756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.012207][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.537330][ T6010] process 'syz.3.18' launched './file0' with NULL argv: empty string added [ 93.608477][ T6020] lo speed is unknown, defaulting to 1000 [ 93.621419][ T6020] lo speed is unknown, defaulting to 1000 [ 93.632011][ T6020] lo speed is unknown, defaulting to 1000 [ 93.647029][ T6020] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 93.675928][ T6020] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 93.756061][ T6020] lo speed is unknown, defaulting to 1000 [ 93.770718][ T6020] lo speed is unknown, defaulting to 1000 [ 93.799502][ T6020] lo speed is unknown, defaulting to 1000 [ 93.869919][ T6020] lo speed is unknown, defaulting to 1000 [ 94.962896][ T6034] syz.1.21: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 95.023926][ T6034] CPU: 0 PID: 6034 Comm: syz.1.21 Not tainted syzkaller #0 [ 95.031224][ T6034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 95.041345][ T6034] Call Trace: [ 95.044676][ T6034] [ 95.047657][ T6034] dump_stack_lvl+0x16c/0x230 [ 95.052417][ T6034] ? show_regs_print_info+0x20/0x20 [ 95.057677][ T6034] ? load_image+0x3b0/0x3b0 [ 95.062239][ T6034] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 95.068714][ T6034] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 95.075289][ T6034] warn_alloc+0x210/0x300 [ 95.079677][ T6034] ? stack_trace_save+0x9c/0xe0 [ 95.084686][ T6034] ? zone_watermark_ok_safe+0x230/0x230 [ 95.090308][ T6034] ? kasan_set_track+0x5f/0x70 [ 95.095122][ T6034] ? kasan_set_track+0x4e/0x70 [ 95.099942][ T6034] ? __kasan_kmalloc+0x8f/0xa0 [ 95.104757][ T6034] ? xsk_init_queue+0xb0/0x110 [ 95.109568][ T6034] ? xsk_setsockopt+0x43c/0x6f0 [ 95.114460][ T6034] ? do_sock_setsockopt+0x175/0x1a0 [ 95.119698][ T6034] ? __x64_sys_setsockopt+0x184/0x200 [ 95.125137][ T6034] __vmalloc_node_range+0x126/0x1320 [ 95.130564][ T6034] ? free_vm_area+0x50/0x50 [ 95.135101][ T6034] vmalloc_user+0x74/0x80 [ 95.139897][ T6034] ? xskq_create+0xbf/0x170 [ 95.144430][ T6034] xskq_create+0xbf/0x170 [ 95.148793][ T6034] xsk_init_queue+0xb0/0x110 [ 95.153700][ T6034] xsk_setsockopt+0x43c/0x6f0 [ 95.158453][ T6034] ? xsk_poll+0x670/0x670 [ 95.162845][ T6034] ? __fget_files+0x28/0x4d0 [ 95.167473][ T6034] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 95.173048][ T6034] ? security_socket_setsockopt+0x7e/0xa0 [ 95.178784][ T6034] ? xsk_poll+0x670/0x670 [ 95.183138][ T6034] do_sock_setsockopt+0x175/0x1a0 [ 95.188195][ T6034] ? __fdget+0x180/0x210 [ 95.192470][ T6034] __x64_sys_setsockopt+0x184/0x200 [ 95.197878][ T6034] do_syscall_64+0x55/0xb0 [ 95.202319][ T6034] ? clear_bhb_loop+0x40/0x90 [ 95.207027][ T6034] ? clear_bhb_loop+0x40/0x90 [ 95.211737][ T6034] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.217655][ T6034] RIP: 0033:0x7f480838f749 [ 95.222192][ T6034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.241827][ T6034] RSP: 002b:00007f48091b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 95.250469][ T6034] RAX: ffffffffffffffda RBX: 00007f48085e5fa0 RCX: 00007f480838f749 [ 95.258471][ T6034] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 95.266469][ T6034] RBP: 00007f4808413f91 R08: 0000000000000004 R09: 0000000000000000 [ 95.274463][ T6034] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.282450][ T6034] R13: 00007f48085e6038 R14: 00007f48085e5fa0 R15: 00007ffe1b2f5838 [ 95.290465][ T6034] [ 95.358074][ T6034] Mem-Info: [ 95.361281][ T6034] active_anon:5223 inactive_anon:0 isolated_anon:0 [ 95.361281][ T6034] active_file:11153 inactive_file:39876 isolated_file:0 [ 95.361281][ T6034] unevictable:768 dirty:1349 writeback:350 [ 95.361281][ T6034] slab_reclaimable:9997 slab_unreclaimable:89908 [ 95.361281][ T6034] mapped:25180 shmem:1361 pagetables:560 [ 95.361281][ T6034] sec_pagetables:0 bounce:0 [ 95.361281][ T6034] kernel_misc_reclaimable:0 [ 95.361281][ T6034] free:1353148 free_pcp:13724 free_cma:0 [ 95.513440][ T6034] Node 0 active_anon:19692kB inactive_anon:0kB active_file:43512kB inactive_file:158200kB unevictable:5136kB isolated(anon):0kB isolated(file):0kB mapped:100720kB dirty:2480kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11828kB pagetables:2240kB sec_pagetables:0kB all_unreclaimable? no [ 95.586957][ T6038] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.621160][ T6034] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 95.659715][ T6038] netlink: 'syz.3.27': attribute type 39 has an invalid length. [ 95.707263][ T6034] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 95.757070][ T6034] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 95.769447][ T6034] Node 0 DMA32 free:1506068kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:19740kB inactive_anon:0kB active_file:43212kB inactive_file:156992kB unevictable:5336kB writepending:2472kB present:3129332kB managed:2589596kB mlocked:3800kB bounce:0kB free_pcp:32832kB local_pcp:14436kB free_cma:0kB [ 95.806978][ T6034] lowmem_reserve[]: 0 0 1 1 1 [ 95.812001][ T6034] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1308kB unevictable:0kB writepending:8kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 95.848604][ T6034] lowmem_reserve[]: 0 0 0 0 0 [ 95.854841][ T6034] Node 1 Normal free:3890924kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:16kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21540kB local_pcp:11424kB free_cma:0kB [ 95.893164][ T6034] lowmem_reserve[]: 0 0 0 0 0 [ 95.900729][ T6034] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 95.942985][ T6034] Node 0 DMA32: 287*4kB (UM) 603*8kB (UM) 328*16kB (UM) 163*32kB (M) 501*64kB (UME) 15*128kB (UM) 12*256kB (M) 8*512kB (ME) 10*1024kB (ME) 10*2048kB (UME) 346*4096kB (M) = 1505524kB [ 95.971946][ T6034] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 95.992346][ T6034] Node 1 Normal: 237*4kB (UE) 39*8kB (UME) 10*16kB (UME) 45*32kB (UME) 15*64kB (UE) 6*128kB (UME) 1*256kB (U) 2*512kB (ME) 2*1024kB (UE) 2*2048kB (UE) 947*4096kB (M) = 3890924kB [ 96.039326][ T6034] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 96.052136][ T6034] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 96.067455][ T6034] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 96.079101][ T6034] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 96.093049][ T6034] 52427 total pagecache pages [ 96.109218][ T6034] 0 pages in swap cache [ 96.117790][ T6034] Free swap = 124996kB [ 96.122033][ T6034] Total swap = 124996kB [ 96.137812][ T6034] 2097051 pages RAM [ 96.141710][ T6034] 0 pages HighMem/MovableOnly [ 96.151538][ T6034] 416138 pages reserved [ 96.158921][ T6034] 0 pages cma reserved [ 96.638795][ T6057] Zero length message leads to an empty skb [ 96.670234][ T6057] syz.2.33[6057]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 96.704938][ T6059] netlink: 52 bytes leftover after parsing attributes in process `syz.3.34'. [ 96.720931][ T6057] loop2: detected capacity change from 0 to 512 [ 96.825126][ T6057] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 96.847403][ T6063] ======================================================= [ 96.847403][ T6063] WARNING: The mand mount option has been deprecated and [ 96.847403][ T6063] and is ignored by this kernel. Remove the mand [ 96.847403][ T6063] option from the mount to silence this warning. [ 96.847403][ T6063] ======================================================= [ 96.875563][ T6057] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 96.892044][ T6057] EXT4-fs (loop2): orphan cleanup on readonly fs [ 96.926078][ T6057] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4031: comm syz.2.33: Allocating blocks 41-42 which overlap fs metadata [ 96.963551][ T6057] EXT4-fs (loop2): Remounting filesystem read-only [ 96.970551][ T6057] Quota error (device loop2): write_blk: dquota write failed [ 97.010828][ T6057] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 97.032386][ T6057] EXT4-fs (loop2): 1 truncate cleaned up [ 97.066995][ T6057] EXT4-fs (loop2): pa ffff88807719a1d0: logic 1, phys. 41, len 23 [ 97.109245][ T6057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 97.175709][ T6057] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.292979][ T6073] syz.3.38 uses obsolete (PF_INET,SOCK_PACKET) [ 97.671098][ T6082] netlink: 3 bytes leftover after parsing attributes in process `syz.3.42'. [ 97.693032][ T6082] 0ªX¹¦À: renamed from caif0 [ 97.706357][ T6082] 0ªX¹¦À: entered allmulticast mode [ 97.717956][ T6082] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 97.743547][ T6083] tipc: Started in network mode [ 97.773607][ T6083] tipc: Node identity ac1414aa, cluster identity 4711 [ 97.804818][ T6083] tipc: Enabled bearer , priority 10 [ 97.854203][ T6083] netlink: 44 bytes leftover after parsing attributes in process `syz.0.41'. [ 98.077658][ T6085] tipc: Enabled bearer , priority 0 [ 99.475171][ T9] tipc: Node number set to 2886997162 [ 99.487906][ T6105] netlink: 'syz.3.47': attribute type 13 has an invalid length. [ 99.499329][ T6105] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.47'. [ 99.672402][ T6109] loop1: detected capacity change from 0 to 164 [ 99.744699][ T6115] capability: warning: `syz.0.51' uses deprecated v2 capabilities in a way that may be insecure [ 99.795535][ T6109] Unable to read rock-ridge attributes [ 99.836356][ T6109] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 100.086368][ T6122] loop0: detected capacity change from 0 to 512 [ 100.112485][ T6122] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 100.164254][ T6122] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 100.179849][ T6126] loop3: detected capacity change from 0 to 512 [ 100.193876][ T6126] EXT4-fs: Ignoring removed nobh option [ 100.245579][ T6122] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.56: inode has both inline data and extents flags [ 100.311733][ T6122] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.56: couldn't read orphan inode 15 (err -117) [ 100.355478][ T6122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.394854][ T6122] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.407636][ T6126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.458547][ T6126] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.772345][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.892484][ T6134] loop2: detected capacity change from 0 to 512 [ 101.006658][ T6134] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.187980][ T6134] syz.2.61: attempt to access beyond end of device [ 101.187980][ T6134] loop2: rw=2049, sector=624, nr_sectors = 128 limit=512 [ 101.296499][ T6144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'. [ 101.307190][ T6144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'. [ 101.552715][ T6152] x_tables: duplicate underflow at hook 1 [ 101.701959][ T6144] hsr_slave_0 (unregistering): left promiscuous mode [ 101.835613][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'. [ 102.784026][ T6159] netlink: 188 bytes leftover after parsing attributes in process `syz.0.70'. [ 102.801767][ T6162] loop1: detected capacity change from 0 to 128 [ 102.896022][ T6162] syz.1.71: attempt to access beyond end of device [ 102.896022][ T6162] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 102.969975][ T6167] program syz.0.75 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.081843][ T6170] loop2: detected capacity change from 0 to 512 [ 103.226994][ T6170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.241909][ T6170] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.332102][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.609512][ T6186] netlink: 24 bytes leftover after parsing attributes in process `syz.2.80'. [ 103.622730][ T6187] loop1: detected capacity change from 0 to 512 [ 103.633226][ T6187] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 103.683869][ T6187] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.83: inode has both inline data and extents flags [ 103.713407][ T6187] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.83: couldn't read orphan inode 15 (err -117) [ 103.733897][ T5845] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 103.783470][ T6187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.810736][ T6189] loop2: detected capacity change from 0 to 2048 [ 103.820889][ T6187] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.868518][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 103.879278][ T6189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.900377][ T6189] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.979050][ T5845] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.997164][ T5845] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 104.008054][ T5845] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 104.019949][ T5845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.035171][ T5845] usb 1-1: config 0 descriptor?? [ 104.122190][ T6196] capability: warning: `syz.3.85' uses 32-bit capabilities (legacy support in use) [ 104.231381][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 104.243659][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.404645][ T9] usb 3-1: device descriptor read/64, error -71 [ 104.451093][ T28] audit: type=1326 audit(1764266752.101:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480838f749 code=0x7ffc0000 [ 104.510683][ T28] audit: type=1326 audit(1764266752.141:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480838f749 code=0x7ffc0000 [ 104.563421][ T28] audit: type=1326 audit(1764266752.141:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f480838f749 code=0x7ffc0000 [ 104.612492][ T28] audit: type=1326 audit(1764266752.141:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480838f749 code=0x7ffc0000 [ 104.676081][ T28] audit: type=1326 audit(1764266752.141:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480838f749 code=0x7ffc0000 [ 104.713479][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 104.745751][ T28] audit: type=1326 audit(1764266752.141:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f480838f749 code=0x7ffc0000 [ 104.768369][ T28] audit: type=1326 audit(1764266752.141:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480838f749 code=0x7ffc0000 [ 104.790695][ T28] audit: type=1326 audit(1764266752.141:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f480838f749 code=0x7ffc0000 [ 104.853485][ T28] audit: type=1326 audit(1764266752.141:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480838f749 code=0x7ffc0000 [ 104.876462][ T28] audit: type=1326 audit(1764266752.141:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480838f749 code=0x7ffc0000 [ 104.899388][ T9] usb 3-1: device descriptor read/64, error -71 [ 105.424835][ T9] usb usb3-port1: attempt power cycle [ 105.479070][ T6219] loop1: detected capacity change from 0 to 1024 [ 105.497805][ T6219] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.592519][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.686731][ T6177] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 105.704184][ T6177] EXT4-fs (loop2): Remounting filesystem read-only [ 105.785804][ T6225] loop1: detected capacity change from 0 to 512 [ 105.837129][ T6225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.853535][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.884309][ T6225] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.915068][ T9] usb 3-1: device descriptor read/8, error -71 [ 105.926806][ T6225] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 105.990963][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.014224][ T6232] lo speed is unknown, defaulting to 1000 [ 106.193425][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 106.234341][ T9] usb 3-1: device descriptor read/8, error -71 [ 106.376770][ T9] usb usb3-port1: unable to enumerate USB device [ 106.394743][ T6243] serio: Serial port ttyS3 [ 106.417028][ T6245] loop1: detected capacity change from 0 to 512 [ 106.457924][ T6245] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.103: couldn't read orphan inode 26 (err -116) [ 106.498338][ T6245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.514483][ T6245] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.543792][ T5877] usb 1-1: USB disconnect, device number 2 [ 106.615644][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.686795][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.849803][ T6254] loop1: detected capacity change from 0 to 512 [ 106.857238][ T6254] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.870465][ T6254] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 106.878440][ T6254] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042e018, mo2=0002] [ 106.886758][ T6254] System zones: 0-1, 15-15, 18-18, 34-34 [ 106.892778][ T6254] EXT4-fs (loop1): orphan cleanup on readonly fs [ 106.904599][ T6254] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.105: bg 0: block 15: invalid block bitmap [ 106.952795][ T6254] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 106.963836][ T6254] EXT4-fs (loop1): 1 truncate cleaned up [ 106.970799][ T6254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 107.077756][ T6261] loop0: detected capacity change from 0 to 128 [ 107.094223][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.180459][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.111'. [ 107.199583][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.111'. [ 107.288097][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'. [ 107.306955][ T6264] syz.2.110[6264] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.307089][ T6264] syz.2.110[6264] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.342634][ T6268] 9pnet_fd: Insufficient options for proto=fd [ 107.439440][ T6264] loop2: detected capacity change from 0 to 512 [ 107.466770][ T6264] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.505729][ T6264] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 107.568824][ T6264] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=842c028, mo2=0002] [ 107.641605][ T6264] EXT4-fs (loop2): orphan cleanup on readonly fs [ 107.712392][ T6264] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4031: comm syz.2.110: Allocating blocks 41-42 which overlap fs metadata [ 107.744797][ T6264] EXT4-fs (loop2): Remounting filesystem read-only [ 107.751778][ T6264] EXT4-fs (loop2): 1 truncate cleaned up [ 107.762320][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.119'. [ 107.780565][ T6264] EXT4-fs (loop2): pa ffff8880789b7488: logic 1, phys. 41, len 23 [ 107.815116][ T6264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.846096][ T6264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.929614][ T6291] loop0: detected capacity change from 0 to 512 [ 107.976949][ T6291] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 107.992400][ T6291] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 108.004332][ T6291] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.121: Corrupt directory, running e2fsck is recommended [ 108.030588][ T6291] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 108.040070][ T6291] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2249: inode #15: comm syz.0.121: corrupted in-inode xattr: invalid ea_ino [ 108.062889][ T6290] lo speed is unknown, defaulting to 1000 [ 108.070873][ T6291] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.121: couldn't read orphan inode 15 (err -117) [ 108.086613][ T6291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.139652][ T6295] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.157400][ T6291] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 108.183967][ T6291] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 108.200908][ T6294] lo speed is unknown, defaulting to 1000 [ 108.213387][ T6291] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.121: Corrupt directory, running e2fsck is recommended [ 108.258909][ T6299] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 108.306373][ T6299] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 108.320428][ T6299] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.121: Corrupt directory, running e2fsck is recommended [ 108.338884][ T6291] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 108.365685][ T6291] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 108.386311][ T6291] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.121: Corrupt directory, running e2fsck is recommended [ 108.400447][ T6299] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 108.413149][ T6299] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.121: path /26/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 108.438934][ T6299] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 64: comm syz.0.121: path /26/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 108.498271][ T6303] loop2: detected capacity change from 0 to 512 [ 108.551040][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.552742][ T6303] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.124: couldn't read orphan inode 26 (err -116) [ 108.582563][ T6303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.596143][ T6303] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.777883][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.791507][ T6311] netlink: 24 bytes leftover after parsing attributes in process `syz.3.126'. [ 108.960369][ T6316] bridge0: entered promiscuous mode [ 108.984431][ T6316] bridge0: port 3(macsec1) entered blocking state [ 108.990924][ T6313] loop3: detected capacity change from 0 to 2048 [ 109.030184][ T6316] bridge0: port 3(macsec1) entered disabled state [ 109.057922][ T6316] macsec1: entered allmulticast mode [ 109.075919][ T6313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.094101][ T6316] bridge0: entered allmulticast mode [ 109.116150][ T6316] macsec1: left allmulticast mode [ 109.134900][ T6316] bridge0: left allmulticast mode [ 109.143754][ T6313] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.162905][ T6316] bridge0: left promiscuous mode [ 109.504655][ T5776] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 109.663436][ T5776] usb 4-1: device descriptor read/64, error -71 [ 109.953397][ T5776] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.113609][ T5776] usb 4-1: device descriptor read/64, error -71 [ 110.437938][ T6338] loop0: detected capacity change from 0 to 512 [ 110.519491][ T6338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.532394][ T5776] usb usb4-port1: attempt power cycle [ 110.553993][ T6338] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.611483][ T6338] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #2: comm syz.0.135: corrupted inode contents [ 110.654548][ T28] kauditd_printk_skb: 93 callbacks suppressed [ 110.654563][ T28] audit: type=1326 audit(1764266758.301:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480838f749 code=0x7ffc0000 [ 110.655274][ T6228] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 110.701370][ T6338] EXT4-fs error (device loop0): ext4_dirty_inode:6120: inode #2: comm syz.0.135: mark_inode_dirty error [ 110.701429][ T28] audit: type=1326 audit(1764266758.301:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480838f749 code=0x7ffc0000 [ 110.739822][ T6228] EXT4-fs (loop3): Remounting filesystem read-only [ 110.750930][ T6338] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #2: comm syz.0.135: corrupted inode contents [ 110.776044][ T6338] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.135: mark_inode_dirty error [ 110.776183][ T28] audit: type=1326 audit(1764266758.301:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f480838f749 code=0x7ffc0000 [ 110.882200][ T28] audit: type=1326 audit(1764266758.301:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480838f749 code=0x7ffc0000 [ 110.922747][ T28] audit: type=1326 audit(1764266758.351:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f480838f749 code=0x7ffc0000 [ 110.942351][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.945010][ T6350] netlink: 188 bytes leftover after parsing attributes in process `syz.2.139'. [ 110.982805][ T28] audit: type=1326 audit(1764266758.351:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480838f749 code=0x7ffc0000 [ 111.015058][ T5776] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 111.040165][ T28] audit: type=1326 audit(1764266758.351:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480838f749 code=0x7ffc0000 [ 111.065312][ T5776] usb 4-1: device descriptor read/8, error -71 [ 111.235080][ T6351] loop1: detected capacity change from 0 to 8192 [ 111.333012][ T28] audit: type=1800 audit(1764266758.981:110): pid=6347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.138" name="file2" dev="loop1" ino=1048597 res=0 errno=0 [ 111.354698][ T5776] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 111.416839][ T5776] usb 4-1: device descriptor read/8, error -71 [ 111.514716][ T6361] loop2: detected capacity change from 0 to 128 [ 111.543603][ T5776] usb usb4-port1: unable to enumerate USB device [ 111.554682][ T6361] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 111.666479][ T6361] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 111.794484][ T6361] program syz.2.143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.843102][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.900332][ T6366] loop0: detected capacity change from 0 to 764 [ 111.979340][ T5803] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 112.312344][ T6361] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 112.403395][ T6361] FAT-fs (loop2): Filesystem has been set read-only [ 113.382399][ T6367] syz.2.143 (6367) used greatest stack depth: 20104 bytes left [ 114.093206][ T5845] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.158244][ T5845] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.203510][ T5845] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.248191][ T5845] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.274256][ T6386] netlink: 'syz.0.153': attribute type 1 has an invalid length. [ 114.288520][ T5845] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.309167][ T5845] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.333303][ C0] sched: RT throttling activated [ 114.339161][ T5845] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.400596][ T5845] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.456254][ T5845] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.495797][ T5845] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.518087][ T6388] ALSA: seq fatal error: cannot create timer (-19) [ 114.536639][ T5845] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.561884][ T5845] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.625423][ T5845] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.633007][ T5845] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.646465][ T6393] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 114.703484][ T5845] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.711012][ T5845] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.724027][ T5845] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.731576][ T5845] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.742420][ T5845] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.750591][ T5845] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.758622][ T5845] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.777838][ T5845] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.788561][ T5845] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.796631][ T5845] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.805028][ T5845] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.812586][ T5845] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.820658][ T5845] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.841516][ T5845] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.860849][ T5845] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.876725][ T5845] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.885291][ T5845] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.892786][ T5845] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.912128][ T5845] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 114.972607][ T6403] netlink: 'syz.3.160': attribute type 10 has an invalid length. [ 115.131857][ T6400] fido_id[6400]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 115.575582][ T6413] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 115.790494][ T6418] netlink: 20 bytes leftover after parsing attributes in process `syz.2.165'. [ 115.837328][ T6418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.165'. [ 116.490429][ T6425] loop3: detected capacity change from 0 to 1024 [ 116.539018][ T6425] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 116.661387][ T6425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.759237][ T6425] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 116.810937][ T6425] EXT4-fs error (device loop3): ext4_xattr_inode_iget:444: inode #11: comm syz.3.167: missing EA_INODE flag [ 116.835428][ T6425] EXT4-fs (loop3): Remounting filesystem read-only [ 116.848050][ T6425] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1243: inode #18: comm syz.3.167: ea_inode dec ref err=-5 [ 116.861328][ T6425] EXT4-fs warning (device loop3): ext4_evict_inode:272: xattr delete (err -5) [ 117.148184][ T6425] syz.3.167 (6425) used greatest stack depth: 17032 bytes left [ 121.157567][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.400260][ T6469] 9pnet_fd: Insufficient options for proto=fd [ 122.589592][ T6480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.187'. [ 122.651244][ T6480] : entered promiscuous mode [ 122.736401][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'. [ 123.526180][ T6498] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (4) [ 124.229230][ T6515] loop3: detected capacity change from 0 to 512 [ 124.249531][ T6512] loop0: detected capacity change from 0 to 128 [ 124.264738][ T6515] EXT4-fs (loop3): 1 truncate cleaned up [ 124.282267][ T6512] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 124.306067][ T6515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.343410][ T28] audit: type=1800 audit(1764266771.991:111): pid=6515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.202" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 124.399529][ T6512] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 124.422830][ T1139] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 124.617764][ T6512] program syz.0.197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.897319][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.009131][ T6532] loop3: detected capacity change from 0 to 764 [ 126.015736][ T6538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'. [ 126.073791][ T6538] netlink: 16 bytes leftover after parsing attributes in process `syz.0.211'. [ 126.161288][ T6542] xt_CT: You must specify a L4 protocol and not use inversions on it [ 126.304043][ T28] audit: type=1326 audit(1764266773.961:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6543 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480838f749 code=0x7ffc0000 [ 126.356902][ T6546] loop3: detected capacity change from 0 to 512 [ 126.427608][ T28] audit: type=1326 audit(1764266773.961:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6543 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f480838df90 code=0x7ffc0000 [ 126.492350][ T28] audit: type=1326 audit(1764266773.961:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6543 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4808390f77 code=0x7ffc0000 [ 126.547471][ T6546] EXT4-fs warning (device loop3): ext4_xattr_inode_get:549: inode #11: comm syz.3.215: ea_inode file size=0 entry size=6 [ 126.588456][ T28] audit: type=1326 audit(1764266773.961:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6543 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f480838f749 code=0x7ffc0000 [ 126.611376][ T28] audit: type=1326 audit(1764266773.961:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6543 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4808390f77 code=0x7ffc0000 [ 126.634319][ T28] audit: type=1326 audit(1764266773.961:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6543 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f480838e3aa code=0x7ffc0000 [ 126.657126][ T28] audit: type=1326 audit(1764266773.961:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6543 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480838f749 code=0x7ffc0000 [ 126.666682][ T6546] ------------[ cut here ]------------ [ 126.686141][ T6546] EA inode 11 i_nlink=2 [ 126.689126][ T28] audit: type=1326 audit(1764266773.961:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6543 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480838f749 code=0x7ffc0000 [ 127.017248][ T6546] WARNING: CPU: 1 PID: 6546 at fs/ext4/xattr.c:1075 ext4_xattr_inode_update_ref+0x4fb/0x550 [ 127.027573][ T6546] Modules linked in: [ 127.031522][ T6546] CPU: 1 PID: 6546 Comm: syz.3.215 Not tainted syzkaller #0 [ 127.038899][ T6546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 127.049125][ T6546] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 127.055816][ T6546] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 06 2c 9a ff 49 8b 37 48 c7 c7 e0 c6 be 8a 89 da e8 a5 39 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 4f 59 2c 08 [ 127.076163][ T6546] RSP: 0000:ffffc9000359f2e0 EFLAGS: 00010246 [ 127.082273][ T6546] RAX: ffbf48eb7ad82700 RBX: 0000000000000002 RCX: 0000000000080000 [ 127.090617][ T6546] RDX: ffffc9000d54c000 RSI: 000000000004c830 RDI: 000000000004c831 [ 127.098743][ T6546] RBP: ffffc9000359f3d0 R08: ffffc9000359eee7 R09: 1ffff920006b3ddc [ 127.106840][ T6546] R10: dffffc0000000000 R11: fffff520006b3ddd R12: dffffc0000000000 [ 127.115089][ T6546] R13: ffff8880773dc0a8 R14: ffff8880773dbeb0 R15: ffff8880773dbf00 [ 127.123103][ T6546] FS: 00007f37543f86c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 127.132162][ T6546] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.139346][ T6546] CR2: 00007f391fb5cdc7 CR3: 000000005f461000 CR4: 00000000003506e0 [ 127.147397][ T6546] Call Trace: [ 127.150706][ T6546] [ 127.153718][ T6546] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 127.159401][ T6546] ? __ext4_journal_ensure_credits+0x30/0x450 [ 127.165563][ T6546] ext4_xattr_inode_dec_ref_all+0xa2b/0xf90 [ 127.172145][ T6546] ? ext4_xattr_delete_inode+0xc00/0xc00 [ 127.177984][ T6546] ? __ext4_journal_ensure_credits+0x450/0x450 [ 127.184367][ T6546] ext4_xattr_delete_inode+0xa45/0xc00 [ 127.189907][ T6546] ? ext4_truncate+0xc12/0x1060 [ 127.194855][ T6546] ? ext4_expand_extra_isize_ea+0x19e0/0x19e0 [ 127.200981][ T6546] ext4_evict_inode+0xaa3/0xea0 [ 127.205971][ T6546] ? _raw_spin_unlock+0x28/0x40 [ 127.210894][ T6546] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 127.216892][ T6546] ? do_raw_spin_unlock+0x121/0x230 [ 127.222134][ T6546] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 127.228188][ T6546] evict+0x486/0x870 [ 127.232121][ T6546] ? __lock_acquire+0x7c80/0x7c80 [ 127.236317][ T28] audit: type=1326 audit(1764266773.961:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6543 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f480838f749 code=0x7ffc0000 [ 127.237235][ T6546] ? proc_nr_inodes+0x230/0x230 [ 127.264307][ T6546] ? do_raw_spin_unlock+0x121/0x230 [ 127.269554][ T6546] ? _raw_spin_unlock+0x28/0x40 [ 127.275176][ T6546] ? iput+0x70a/0x920 [ 127.279309][ T6546] ext4_orphan_cleanup+0xbd4/0x1400 [ 127.284775][ T6546] ? ext4_orphan_del+0xba0/0xba0 [ 127.289784][ T6546] ? ext4_register_li_request+0x183/0x940 [ 127.295642][ T6546] ? errseq_check_and_advance+0x66/0x120 [ 127.301336][ T6546] ext4_fill_super+0x5de4/0x66c0 [ 127.306472][ T6546] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 127.312756][ T6546] ? __might_sleep+0xe0/0xe0 [ 127.317473][ T6546] ? read_lock_is_recursive+0x20/0x20 [ 127.322901][ T6546] ? snprintf+0xdb/0x120 [ 127.327241][ T6546] ? vscnprintf+0x80/0x80 [ 127.331643][ T6546] ? down_write+0x162/0x1f0 [ 127.336319][ T6546] ? down_read_killable+0x340/0x340 [ 127.341577][ T6546] ? setup_bdev_super+0x56b/0x660 [ 127.346717][ T6546] get_tree_bdev+0x3e4/0x510 [ 127.351375][ T6546] ? vfs_parse_fs_string+0x160/0x160 [ 127.356755][ T6546] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 127.363032][ T6546] ? setup_bdev_super+0x660/0x660 [ 127.368358][ T6546] ? apparmor_capable+0x137/0x1a0 [ 127.373527][ T6546] ? bpf_lsm_capable+0x9/0x10 [ 127.378902][ T6546] ? security_capable+0x89/0xb0 [ 127.383948][ T6546] vfs_get_tree+0x8c/0x280 [ 127.388398][ T6546] do_new_mount+0x24b/0xa40 [ 127.392944][ T6546] __se_sys_mount+0x2da/0x3c0 [ 127.397879][ T6546] ? __x64_sys_mount+0xc0/0xc0 [ 127.402676][ T6546] ? lockdep_hardirqs_on+0x98/0x150 [ 127.407976][ T6546] ? __x64_sys_mount+0x20/0xc0 [ 127.412782][ T6546] do_syscall_64+0x55/0xb0 [ 127.417310][ T6546] ? clear_bhb_loop+0x40/0x90 [ 127.422018][ T6546] ? clear_bhb_loop+0x40/0x90 [ 127.426830][ T6546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.432773][ T6546] RIP: 0033:0x7f3753590eea [ 127.437281][ T6546] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.457155][ T6546] RSP: 002b:00007f37543f7e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 127.465683][ T6546] RAX: ffffffffffffffda RBX: 00007f37543f7ef0 RCX: 00007f3753590eea [ 127.473938][ T6546] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f37543f7eb0 [ 127.482382][ T6546] RBP: 0000200000000180 R08: 00007f37543f7ef0 R09: 0000000000800700 [ 127.490534][ T6546] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 127.498619][ T6546] R13: 00007f37543f7eb0 R14: 0000000000000473 R15: 0000200000000680 [ 127.506840][ T6546] [ 127.509887][ T6546] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 127.517182][ T6546] CPU: 1 PID: 6546 Comm: syz.3.215 Not tainted syzkaller #0 [ 127.524468][ T6546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 127.534528][ T6546] Call Trace: [ 127.537816][ T6546] [ 127.540761][ T6546] dump_stack_lvl+0x16c/0x230 [ 127.545474][ T6546] ? show_regs_print_info+0x20/0x20 [ 127.550698][ T6546] ? load_image+0x3b0/0x3b0 [ 127.555245][ T6546] panic+0x2c0/0x710 [ 127.559152][ T6546] ? bpf_jit_dump+0xd0/0xd0 [ 127.563693][ T6546] __warn+0x2e0/0x470 [ 127.567714][ T6546] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 127.573759][ T6546] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 127.579864][ T6546] report_bug+0x2be/0x4f0 [ 127.584212][ T6546] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 127.590219][ T6546] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 127.596217][ T6546] ? ext4_xattr_inode_update_ref+0x4fd/0x550 [ 127.602227][ T6546] handle_bug+0xcf/0x120 [ 127.606515][ T6546] exc_invalid_op+0x1a/0x50 [ 127.611030][ T6546] asm_exc_invalid_op+0x1a/0x20 [ 127.615909][ T6546] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 127.622530][ T6546] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 06 2c 9a ff 49 8b 37 48 c7 c7 e0 c6 be 8a 89 da e8 a5 39 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 4f 59 2c 08 [ 127.642260][ T6546] RSP: 0000:ffffc9000359f2e0 EFLAGS: 00010246 [ 127.648344][ T6546] RAX: ffbf48eb7ad82700 RBX: 0000000000000002 RCX: 0000000000080000 [ 127.656322][ T6546] RDX: ffffc9000d54c000 RSI: 000000000004c830 RDI: 000000000004c831 [ 127.664300][ T6546] RBP: ffffc9000359f3d0 R08: ffffc9000359eee7 R09: 1ffff920006b3ddc [ 127.672280][ T6546] R10: dffffc0000000000 R11: fffff520006b3ddd R12: dffffc0000000000 [ 127.680257][ T6546] R13: ffff8880773dc0a8 R14: ffff8880773dbeb0 R15: ffff8880773dbf00 [ 127.688264][ T6546] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 127.693927][ T6546] ? __ext4_journal_ensure_credits+0x30/0x450 [ 127.700014][ T6546] ext4_xattr_inode_dec_ref_all+0xa2b/0xf90 [ 127.705938][ T6546] ? ext4_xattr_delete_inode+0xc00/0xc00 [ 127.711590][ T6546] ? __ext4_journal_ensure_credits+0x450/0x450 [ 127.717771][ T6546] ext4_xattr_delete_inode+0xa45/0xc00 [ 127.723253][ T6546] ? ext4_truncate+0xc12/0x1060 [ 127.728138][ T6546] ? ext4_expand_extra_isize_ea+0x19e0/0x19e0 [ 127.734230][ T6546] ext4_evict_inode+0xaa3/0xea0 [ 127.739092][ T6546] ? _raw_spin_unlock+0x28/0x40 [ 127.743961][ T6546] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 127.749864][ T6546] ? do_raw_spin_unlock+0x121/0x230 [ 127.755081][ T6546] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 127.760992][ T6546] evict+0x486/0x870 [ 127.764906][ T6546] ? __lock_acquire+0x7c80/0x7c80 [ 127.769953][ T6546] ? proc_nr_inodes+0x230/0x230 [ 127.774830][ T6546] ? do_raw_spin_unlock+0x121/0x230 [ 127.780037][ T6546] ? _raw_spin_unlock+0x28/0x40 [ 127.784895][ T6546] ? iput+0x70a/0x920 [ 127.788900][ T6546] ext4_orphan_cleanup+0xbd4/0x1400 [ 127.794129][ T6546] ? ext4_orphan_del+0xba0/0xba0 [ 127.799086][ T6546] ? ext4_register_li_request+0x183/0x940 [ 127.804818][ T6546] ? errseq_check_and_advance+0x66/0x120 [ 127.810466][ T6546] ext4_fill_super+0x5de4/0x66c0 [ 127.815439][ T6546] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 127.821783][ T6546] ? __might_sleep+0xe0/0xe0 [ 127.826386][ T6546] ? read_lock_is_recursive+0x20/0x20 [ 127.831769][ T6546] ? snprintf+0xdb/0x120 [ 127.836027][ T6546] ? vscnprintf+0x80/0x80 [ 127.840368][ T6546] ? down_write+0x162/0x1f0 [ 127.844900][ T6546] ? down_read_killable+0x340/0x340 [ 127.850109][ T6546] ? setup_bdev_super+0x56b/0x660 [ 127.855139][ T6546] get_tree_bdev+0x3e4/0x510 [ 127.859731][ T6546] ? vfs_parse_fs_string+0x160/0x160 [ 127.865019][ T6546] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 127.871273][ T6546] ? setup_bdev_super+0x660/0x660 [ 127.876305][ T6546] ? apparmor_capable+0x137/0x1a0 [ 127.881347][ T6546] ? bpf_lsm_capable+0x9/0x10 [ 127.886482][ T6546] ? security_capable+0x89/0xb0 [ 127.891348][ T6546] vfs_get_tree+0x8c/0x280 [ 127.895782][ T6546] do_new_mount+0x24b/0xa40 [ 127.900308][ T6546] __se_sys_mount+0x2da/0x3c0 [ 127.905084][ T6546] ? __x64_sys_mount+0xc0/0xc0 [ 127.909854][ T6546] ? lockdep_hardirqs_on+0x98/0x150 [ 127.915083][ T6546] ? __x64_sys_mount+0x20/0xc0 [ 127.920111][ T6546] do_syscall_64+0x55/0xb0 [ 127.924535][ T6546] ? clear_bhb_loop+0x40/0x90 [ 127.929216][ T6546] ? clear_bhb_loop+0x40/0x90 [ 127.933900][ T6546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.939818][ T6546] RIP: 0033:0x7f3753590eea [ 127.944240][ T6546] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.963979][ T6546] RSP: 002b:00007f37543f7e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 127.972399][ T6546] RAX: ffffffffffffffda RBX: 00007f37543f7ef0 RCX: 00007f3753590eea [ 127.980373][ T6546] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f37543f7eb0 [ 127.988347][ T6546] RBP: 0000200000000180 R08: 00007f37543f7ef0 R09: 0000000000800700 [ 127.996333][ T6546] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 128.004308][ T6546] R13: 00007f37543f7eb0 R14: 0000000000000473 R15: 0000200000000680 [ 128.012290][ T6546] [ 128.015608][ T6546] Kernel Offset: disabled [ 128.020007][ T6546] Rebooting in 86400 seconds..