last executing test programs: 1m33.131692476s ago: executing program 2 (id=905): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, 0x0) io_getevents(0x0, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x67204000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0xffff, r0, 0x0}]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0xc0ed000e, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@data_err_abort}, {@jqfmt_vfsv1}, {@noload}, {@mblk_io_submit}, {@nobh}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@grpquota}]}, 0xfe, 0x473, &(0x7f0000000dc0)="$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") write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x6a) openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 1m29.607746603s ago: executing program 2 (id=919): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)}], 0x1) close(0x3) recvmmsg(r1, &(0x7f0000005ac0)=[{{0x0, 0x0, 0x0}, 0x12b5}], 0x1, 0x100, 0x0) 1m25.743908272s ago: executing program 2 (id=934): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x3}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076"], 0x50}}, 0x4008840) 1m24.453593708s ago: executing program 2 (id=936): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount_setattr(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000002c0)={0x0, 0x2, 0x100000}, 0x20) unshare(0x2a020400) unshare(0x40000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0xd5ba2180, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x200000000000011, 0x2, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(0x0, 0x3) 1m23.164535824s ago: executing program 2 (id=944): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) read$alg(r0, &(0x7f0000000580)=""/164, 0xa4) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10) 1m22.649430867s ago: executing program 2 (id=946): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f00070000", @ANYRES32=r1, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0) 1m22.07351674s ago: executing program 32 (id=946): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f00070000", @ANYRES32=r1, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0) 1m22.066857579s ago: executing program 3 (id=948): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x3}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c61"], 0x50}}, 0x4008840) 1m20.631643357s ago: executing program 3 (id=949): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000633c77fbac141412e000002062079f4b4d2f87e5feca6aab845013f2325f1a3903050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x3f, 0x29, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee", 0x0, 0x3}, 0x50) 1m20.459875667s ago: executing program 3 (id=950): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) close(0x3) recvmmsg(r1, 0x0, 0x0, 0x100, 0x0) 1m18.843786045s ago: executing program 3 (id=954): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount_setattr(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000002c0)={0x0, 0x2, 0x100000}, 0x20) unshare(0x2a020400) unshare(0x40000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0xd5ba2180, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x200000000000011, 0x2, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(0x0, 0x3) 1m10.564572456s ago: executing program 3 (id=976): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x4005}) connect$unix(r1, &(0x7f0000002340)=@abs={0x0, 0x0, 0x4e22}, 0x6e) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1m10.183934857s ago: executing program 3 (id=977): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000008800)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0xa8}}, 0x0) recvmmsg(r1, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f00000005c0)=""/89, 0x59}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/82, 0x52}], 0x1}, 0xffffffff}], 0x2, 0x0, 0x0) 1m9.209525812s ago: executing program 33 (id=977): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000008800)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0xa8}}, 0x0) recvmmsg(r1, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f00000005c0)=""/89, 0x59}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/82, 0x52}], 0x1}, 0xffffffff}], 0x2, 0x0, 0x0) 7.883188401s ago: executing program 6 (id=1266): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_getevents(r1, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x67204000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0xffff, r0, 0x0}]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0xc0ed000e, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@data_err_abort}, {@jqfmt_vfsv1}, {@noload}, {@mblk_io_submit}, {@nobh}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@grpquota}]}, 0xfe, 0x473, &(0x7f0000000dc0)="$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") write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x6a) openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 5.347543423s ago: executing program 6 (id=1277): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x20000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001439) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x2000000b) ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0) close(r1) 3.572702712s ago: executing program 0 (id=1278): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 1.331635964s ago: executing program 0 (id=1288): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r2) 1.287591224s ago: executing program 4 (id=1289): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000840)=0x4, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0xc6}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 1.257502084s ago: executing program 5 (id=1290): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6b", 0x2}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x40fd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='console\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"}) 1.191798774s ago: executing program 1 (id=1291): r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0x0, 0x0, 0x4881}, 0x48054) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000009c40)={0x0, 0x0, &(0x7f0000009c00)={&(0x7f0000009c80)=ANY=[@ANYBLOB="680000000806050a0000000000000000020000030500010007"], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x24000) 1.191616884s ago: executing program 6 (id=1292): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close(r1) 1.119556655s ago: executing program 0 (id=1293): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0x25, &(0x7f0000000040), 0x25) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00f6ff00df00042d5ecc040000000000000000000011", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/24], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x20, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0xd24206218ee5e012, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000003, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_init_net_socket$ax25(0x3, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d744784ca67c0398246d848e6df22054de2bd8ca3da64dfdea7d8eb74ffe057d7469066c6ca034a2677ce0c1c25e2b2a825d677e0fbac312a7da165cd5db94fa38cdf3a3f3f93b912a7515e0b1e441a3be644a296bcc765e7adc9ddb4d14376a69cbfcd2ddd156ba432349e96debeda26ee8914c28f4", 0x7ffff000}, {&(0x7f00000009c0)="d86e5c29ab2c0dce2b79f95d543a0d6b45dec9dab7afbc0d6d678feb7a652e67638c3ee007937917fad76308e99818f8f112b73a3c3e3c5ed80c49fab6e0593e95008b4a47aebdde3e28cea1cec26385f3d03b872970dfb69a63a6384a9be5b9419ff8ea6d9c2a730307894adb589d11a1ec59255d10acb1fbef", 0x7a}], 0x2}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) 1.033421625s ago: executing program 4 (id=1294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e"], 0x10) 983.774855ms ago: executing program 5 (id=1295): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)='%pI4 \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x3f) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r2, 0x40047440, 0x2000000c) 983.170995ms ago: executing program 1 (id=1296): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="a183000000000000000005"], 0x1c}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000004fc500850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$inet(0x2, 0x2, 0x1) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e1f, @local}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000800000007b119800000000008510000002000000850000000543000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@empty, @in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}]}]}, 0xa0}}, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10) sendto(r1, &(0x7f00000002c0)='q', 0x1, 0xc000, 0x0, 0x0) 935.871505ms ago: executing program 6 (id=1297): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f00000001c0), 0x10) 792.294366ms ago: executing program 4 (id=1298): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) 784.799586ms ago: executing program 6 (id=1299): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r3) 764.913296ms ago: executing program 1 (id=1300): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x94}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x40) 714.906137ms ago: executing program 5 (id=1301): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) 631.443707ms ago: executing program 4 (id=1302): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1282, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) write$cgroup_pid(r1, &(0x7f0000000300), 0x20000312) 494.610377ms ago: executing program 6 (id=1303): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x20000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001439) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x2000000b) ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0) close(r1) 486.719547ms ago: executing program 5 (id=1304): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000840)=0x4, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0xc6}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 459.953698ms ago: executing program 1 (id=1305): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) mkdir(&(0x7f00000000c0)='./file0\x00', 0x20) 385.703718ms ago: executing program 0 (id=1306): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 323.456868ms ago: executing program 4 (id=1307): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r0) 278.676279ms ago: executing program 1 (id=1308): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="b4050000fdff7f006110000000000000c60000000000000095000000000000009f33ef60916e6e911689a9396e7f889b817fd98cd824598949714ffaac8a6f770600dccae0f21f3ca90022d182054d54d53cd2b6db714e4beb5447000001eecd163199e28f7a674d5926000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2fe88afc50027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000fe0000b347abe6352a080f8140e5fd10747b6ecdb34533e1f10f35540546bf636ef897ed9bbe5026450200000000eb9e140000c8f7a187eaf60f3a17f0f046a307a403c17e9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb133e8833fed288a8eb3f591402503c2bbea4e16328dda19ecbc2b2f1065639d52090edcd03fcfe9b8603ef9a4f0855b0df0d9a39f0585d1c6c1c47a01d8eb71132744a2cf9f4db08ff74bcaa80d9f541b364ec4ebcdd11f553dc8a32458907ab99d738b2583203177a778b83f08f0f8c723e86ba548bd408e38db59f3a6e2d26416bb70a05969bd902e98690226ac9ad2dbe5692b58fd1d3f4b9358f988b8de97ed67dc242fba01d1d35ccb45df4a56aa410b3d52a86f653826c2871fe80031f8b63edbbc4553e0bb4de0dc090f5a529c8417ed8df02aa5366ca50a4a7c0fede698e353167bdd9e30a07dc0bdae73d156969722617f419d552f059aa4bf0ad4eefa3e5c7730499dafcf8da73093989565bc5d34f14d577be013c37dc81f67a5e3e53a402b325406011f3cca0b72dc7c2e38"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x40000, 0x0}, 0x0) 266.985469ms ago: executing program 5 (id=1309): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f00000001c0), 0x10) 151.788439ms ago: executing program 4 (id=1310): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="a183000000000000000005"], 0x1c}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000004fc500850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$inet(0x2, 0x2, 0x1) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e1f, @local}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000800000007b119800000000008510000002000000850000000543000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@empty, @in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}]}]}, 0xa0}}, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10) sendto(r1, &(0x7f00000002c0)='q', 0x1, 0xc000, 0x0, 0x0) 151.617449ms ago: executing program 0 (id=1311): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000000000000000000d"], &(0x7f0000000440)=""/130, 0x3f, 0x82, 0x1, 0x0, 0x0, @void, @value}, 0x28) 115.791209ms ago: executing program 5 (id=1312): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000008c0)={r0}, 0xc) 90.58585ms ago: executing program 1 (id=1313): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 0s ago: executing program 0 (id=1314): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="fb6bba8839", 0x5}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) kernel console output (not intermixed with test programs): : veth1_macvtap: link becomes ready [ 76.762847][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.776583][ T4249] device veth1_macvtap entered promiscuous mode [ 76.807187][ T4257] device veth1_vlan entered promiscuous mode [ 76.826770][ T4307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.835418][ T4307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.842809][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.853487][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.862635][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.870883][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.879869][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.950691][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.960648][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.973231][ T4256] device veth0_macvtap entered promiscuous mode [ 76.990153][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.004573][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.015285][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.026096][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.037577][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.048628][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.060524][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.071070][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.082205][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.093735][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.111403][ T4257] device veth0_macvtap entered promiscuous mode [ 77.122231][ T4256] device veth1_macvtap entered promiscuous mode [ 77.135744][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.143998][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.153642][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.163414][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.172723][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.182078][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.217377][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.227239][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.239371][ T4249] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.248794][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.257306][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.267441][ T4249] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.277033][ T4249] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.286176][ T4249] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.308634][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.323084][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.339770][ T4257] device veth1_macvtap entered promiscuous mode [ 77.362098][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.380559][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.392509][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.403826][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.414407][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.426066][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.446165][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.495979][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.510743][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.519686][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.552554][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.582628][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.593342][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.604462][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.615407][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.625926][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.637431][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.651153][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.668448][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.677962][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.691460][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.692405][ T4296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.711828][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.727284][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.728925][ T4296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.744639][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.756394][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.767939][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.785174][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.803095][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.817417][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.826613][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.835557][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.856030][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.870327][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.880806][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.894374][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.904643][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.915178][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.925592][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.936967][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.953493][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.973014][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.990219][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.026394][ T4256] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.041941][ T4256] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.051715][ T4256] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.060697][ T4256] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.082412][ T4257] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.107991][ T4257] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.124203][ T4257] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.133293][ T4257] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.148886][ T4342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 78.203232][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.220557][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.262418][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.342676][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.356955][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.385920][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.408665][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.409360][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.467245][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.499094][ T4264] Bluetooth: hci1: command tx timeout [ 78.504581][ T4264] Bluetooth: hci0: command tx timeout [ 78.510005][ T4264] Bluetooth: hci2: command tx timeout [ 78.563713][ T4307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.578062][ T4307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.587976][ T4262] Bluetooth: hci3: command tx timeout [ 78.593453][ T4262] Bluetooth: hci4: command tx timeout [ 78.618144][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.650935][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.661967][ T4307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.690493][ T4307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.714235][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.752069][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.783227][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.147358][ T4368] Zero length message leads to an empty skb [ 79.265697][ T4372] netlink: 40 bytes leftover after parsing attributes in process `syz.3.19'. [ 79.619918][ T4386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.24'. [ 79.647830][ T4386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.24'. [ 79.763262][ T4391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28'. [ 79.831168][ T4393] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 80.022592][ T4403] netlink: 40 bytes leftover after parsing attributes in process `syz.3.34'. [ 80.455172][ T4419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 80.474756][ T4421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'. [ 80.490142][ T4419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.42'. [ 80.501528][ T4419] netlink: 'syz.2.42': attribute type 7 has an invalid length. [ 80.805152][ T4434] netlink: 40 bytes leftover after parsing attributes in process `syz.4.51'. [ 81.031170][ T4444] netlink: 'syz.1.54': attribute type 29 has an invalid length. [ 81.073189][ T4446] netlink: 'syz.4.55': attribute type 2 has an invalid length. [ 81.092716][ T4446] netlink: 'syz.4.55': attribute type 1 has an invalid length. [ 81.101960][ T4444] netlink: 'syz.1.54': attribute type 29 has an invalid length. [ 81.117756][ T4448] netlink: 'syz.1.54': attribute type 29 has an invalid length. [ 81.465327][ T1168] cfg80211: failed to load regulatory.db [ 82.068650][ T4482] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 82.836492][ T4474] syz.2.67 uses obsolete (PF_INET,SOCK_PACKET) [ 82.927914][ T4502] nftables ruleset with unbound chain [ 83.209748][ T4507] __nla_validate_parse: 10 callbacks suppressed [ 83.209766][ T4507] netlink: 40 bytes leftover after parsing attributes in process `syz.3.79'. [ 83.738924][ T4521] netlink: 'syz.0.86': attribute type 10 has an invalid length. [ 83.773922][ T4521] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 83.930251][ T4534] netlink: 40 bytes leftover after parsing attributes in process `syz.4.91'. [ 84.551004][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 84.981574][ T4564] netlink: 20 bytes leftover after parsing attributes in process `syz.4.106'. [ 84.998801][ T4566] netlink: 40 bytes leftover after parsing attributes in process `syz.0.104'. [ 85.528919][ T4590] netlink: 32 bytes leftover after parsing attributes in process `syz.2.115'. [ 85.865697][ T4600] netlink: 40 bytes leftover after parsing attributes in process `syz.0.120'. [ 86.642024][ T4617] loop4: detected capacity change from 0 to 1024 [ 86.643440][ T4621] netlink: 32 bytes leftover after parsing attributes in process `syz.0.129'. [ 86.730961][ T4617] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.770515][ T4626] netlink: 'syz.2.131': attribute type 4 has an invalid length. [ 86.950242][ T4628] netlink: 'syz.2.131': attribute type 4 has an invalid length. [ 86.999763][ T4629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.132'. [ 87.022937][ T4626] syz.2.131 (4626) used greatest stack depth: 19384 bytes left [ 87.105764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 87.114119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 87.134364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.364840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.373116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.422097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.434356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 87.455787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 87.464154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 87.472447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 89.815942][ T4684] loop2: detected capacity change from 0 to 1024 [ 89.851930][ T4684] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.281185][ T4699] device syzkaller0 entered promiscuous mode [ 91.931943][ T4730] netlink: 'syz.0.170': attribute type 58 has an invalid length. [ 91.944332][ T4730] netlink: 20 bytes leftover after parsing attributes in process `syz.0.170'. [ 92.516109][ T4763] netlink: 104 bytes leftover after parsing attributes in process `syz.2.183'. [ 92.763580][ T4771] netlink: 40 bytes leftover after parsing attributes in process `syz.2.187'. [ 92.788533][ T4773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'. [ 93.440678][ T4799] device syzkaller0 entered promiscuous mode [ 96.006667][ T4899] netlink: 20 bytes leftover after parsing attributes in process `syz.2.238'. [ 96.083819][ T4901] netlink: 32 bytes leftover after parsing attributes in process `syz.0.240'. [ 96.675784][ T4921] loop4: detected capacity change from 0 to 1024 [ 96.694545][ T4925] netlink: 32 bytes leftover after parsing attributes in process `syz.1.252'. [ 96.696823][ T4921] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.170913][ T4942] device gretap0 entered promiscuous mode [ 97.214449][ T4942] device macsec1 entered promiscuous mode [ 97.231577][ T4942] device gretap0 left promiscuous mode [ 97.304471][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 97.964051][ T4964] netlink: 'syz.3.268': attribute type 2 has an invalid length. [ 98.014478][ T4964] netlink: 'syz.3.268': attribute type 1 has an invalid length. [ 98.747393][ T4992] loop0: detected capacity change from 0 to 1024 [ 98.782102][ T4992] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.957343][ T5025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.293'. [ 100.476070][ T5032] loop1: detected capacity change from 0 to 1024 [ 101.071770][ T5032] EXT4-fs: Ignoring removed orlov option [ 101.119511][ T5032] EXT4-fs (loop1): Test dummy encryption mode enabled [ 101.283154][ T5032] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 101.475078][ T5063] netlink: 40 bytes leftover after parsing attributes in process `syz.2.305'. [ 101.507421][ T5063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.305'. [ 101.830321][ T5074] netlink: 'syz.2.310': attribute type 1 has an invalid length. [ 101.912560][ T5074] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.985075][ T5080] bond1: (slave bridge1): making interface the new active one [ 102.045637][ T5080] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 102.084326][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 102.350742][ T5093] netlink: 40 bytes leftover after parsing attributes in process `syz.3.317'. [ 102.635897][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 102.903159][ T5113] netlink: 124 bytes leftover after parsing attributes in process `syz.4.326'. [ 103.010090][ T5119] netlink: 40 bytes leftover after parsing attributes in process `syz.4.329'. [ 103.456877][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 103.599325][ T5137] loop4: detected capacity change from 0 to 1024 [ 103.612298][ T5137] EXT4-fs: Ignoring removed orlov option [ 103.666256][ T5137] EXT4-fs (loop4): Test dummy encryption mode enabled [ 103.827398][ T5137] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 104.321281][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 104.425891][ T5150] netlink: 124 bytes leftover after parsing attributes in process `syz.1.339'. [ 104.459732][ T5146] netlink: 20 bytes leftover after parsing attributes in process `syz.3.340'. [ 104.593418][ T5154] netlink: 40 bytes leftover after parsing attributes in process `syz.4.342'. [ 105.258602][ T5173] loop3: detected capacity change from 0 to 1024 [ 105.270472][ T5173] EXT4-fs: Ignoring removed orlov option [ 105.300647][ T5173] EXT4-fs (loop3): Test dummy encryption mode enabled [ 105.532563][ T5173] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 105.954856][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 106.151229][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 106.343061][ T5197] netlink: 40 bytes leftover after parsing attributes in process `syz.2.355'. [ 106.366565][ T5196] netlink: 20 bytes leftover after parsing attributes in process `syz.4.354'. [ 106.817509][ T5211] loop1: detected capacity change from 0 to 1024 [ 106.829248][ T5211] EXT4-fs: Ignoring removed orlov option [ 106.930669][ T5211] EXT4-fs (loop1): Test dummy encryption mode enabled [ 107.067519][ T5211] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 107.518328][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 107.719756][ T5229] netlink: 124 bytes leftover after parsing attributes in process `syz.1.365'. [ 108.010493][ T5238] netlink: 40 bytes leftover after parsing attributes in process `syz.4.371'. [ 108.016815][ T5239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.372'. [ 108.357191][ T5247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.374'. [ 108.577580][ T5251] loop4: detected capacity change from 0 to 1024 [ 108.588336][ T5251] EXT4-fs: Ignoring removed orlov option [ 108.653044][ T5251] EXT4-fs (loop4): Test dummy encryption mode enabled [ 108.905485][ T5251] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 109.357835][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 109.545785][ T5265] netlink: 112 bytes leftover after parsing attributes in process `syz.1.380'. [ 109.560999][ T5265] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 109.733424][ T5272] netlink: 28 bytes leftover after parsing attributes in process `syz.0.382'. [ 109.769913][ T5272] netlink: 28 bytes leftover after parsing attributes in process `syz.0.382'. [ 109.831907][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 109.841204][ T5272] device bridge0 entered promiscuous mode [ 109.886127][ T5272] device gretap0 entered promiscuous mode [ 109.965262][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 110.112756][ T5290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.388'. [ 110.366551][ T5296] loop1: detected capacity change from 0 to 1024 [ 110.377202][ T5296] EXT4-fs: Ignoring removed orlov option [ 110.554507][ T5296] EXT4-fs (loop1): Test dummy encryption mode enabled [ 111.096410][ T5296] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 111.366621][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 111.449214][ T5308] __nla_validate_parse: 2 callbacks suppressed [ 111.449232][ T5308] netlink: 112 bytes leftover after parsing attributes in process `syz.4.396'. [ 111.529508][ T5308] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 111.749341][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 113.094356][ T5330] loop0: detected capacity change from 0 to 512 [ 113.134679][ T5330] EXT4-fs: Ignoring removed i_version option [ 113.182412][ T5330] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 113.254845][ T5330] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 113.359549][ T5330] EXT4-fs (loop0): 1 truncate cleaned up [ 113.372353][ T5330] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 113.612262][ T5340] loop2: detected capacity change from 0 to 1024 [ 113.619627][ T5340] EXT4-fs: Ignoring removed orlov option [ 113.771537][ T5340] EXT4-fs (loop2): Test dummy encryption mode enabled [ 115.194062][ C0] sched: RT throttling activated [ 115.803154][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 115.927247][ T5340] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 116.078207][ T5337] loop4: detected capacity change from 0 to 512 [ 116.158118][ T5337] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.165051][ T5356] netlink: 112 bytes leftover after parsing attributes in process `syz.1.409'. [ 116.184294][ T5337] EXT4-fs: Ignoring removed nobh option [ 116.187945][ T4248] EXT4-fs (loop2): unmounting filesystem. [ 116.225469][ T5356] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 116.275040][ T5337] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.407: corrupted in-inode xattr [ 116.363901][ T5359] netlink: 20 bytes leftover after parsing attributes in process `syz.3.413'. [ 116.397198][ T5337] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.407: couldn't read orphan inode 15 (err -117) [ 116.497190][ T5337] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 118.452749][ T5384] loop1: detected capacity change from 0 to 1764 [ 118.905245][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 119.283867][ T5399] loop1: detected capacity change from 0 to 1024 [ 119.294806][ T5399] EXT4-fs: Ignoring removed orlov option [ 119.327264][ T5399] EXT4-fs (loop1): Test dummy encryption mode enabled [ 119.471931][ T5399] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 119.935766][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 120.156006][ T5406] netlink: 20 bytes leftover after parsing attributes in process `syz.1.428'. [ 121.403098][ T5424] loop1: detected capacity change from 0 to 1764 [ 121.821084][ T4240] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 123.009438][ T5429] loop2: detected capacity change from 0 to 512 [ 123.113939][ T38] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 124.025783][ T5462] loop1: detected capacity change from 0 to 1764 [ 127.246944][ T5468] netlink: 468 bytes leftover after parsing attributes in process `syz.3.449'. [ 127.286678][ T5468] netlink: 104 bytes leftover after parsing attributes in process `syz.3.449'. [ 127.998302][ T5417] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 129.002068][ T27] audit: type=1326 audit(1731637313.222:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5497 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527d77e719 code=0x7ffc0000 [ 130.250890][ T5500] loop3: detected capacity change from 0 to 512 [ 130.352787][ T5500] EXT4-fs: Ignoring removed i_version option [ 130.401506][ T5500] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 130.415188][ T27] audit: type=1326 audit(1731637313.222:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5497 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f527d77e719 code=0x7ffc0000 [ 130.557913][ T5513] netlink: 32 bytes leftover after parsing attributes in process `syz.0.466'. [ 130.571639][ T27] audit: type=1326 audit(1731637313.222:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5497 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527d77e719 code=0x7ffc0000 [ 130.595898][ T5500] EXT4-fs (loop3): 1 truncate cleaned up [ 130.608336][ T5500] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 130.665467][ T5513] device batadv0 entered promiscuous mode [ 130.671859][ T27] audit: type=1326 audit(1731637313.222:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5497 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f527d77e719 code=0x7ffc0000 [ 130.704972][ T27] audit: type=1326 audit(1731637313.222:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5497 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527d77e719 code=0x7ffc0000 [ 130.760051][ T27] audit: type=1326 audit(1731637313.222:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5497 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f527d77e719 code=0x7ffc0000 [ 130.805648][ T27] audit: type=1326 audit(1731637313.222:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5497 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527d77e719 code=0x7ffc0000 [ 130.829934][ T27] audit: type=1326 audit(1731637313.222:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5497 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527d77e719 code=0x7ffc0000 [ 130.865637][ T27] audit: type=1326 audit(1731637313.222:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5497 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f527d77e719 code=0x7ffc0000 [ 130.924981][ T27] audit: type=1326 audit(1731637313.262:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5497 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527d77e719 code=0x7ffc0000 [ 131.119032][ T5177] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 131.222312][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 131.328903][ T5536] netlink: 76 bytes leftover after parsing attributes in process `syz.2.475'. [ 131.490377][ T5539] netlink: 876 bytes leftover after parsing attributes in process `syz.2.475'. [ 131.651426][ T5539] netlink: 876 bytes leftover after parsing attributes in process `syz.2.475'. [ 132.585708][ T5548] netlink: 32 bytes leftover after parsing attributes in process `syz.2.479'. [ 132.655238][ T5548] device batadv0 entered promiscuous mode [ 133.926217][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.932709][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.716191][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 136.168701][ T5598] loop1: detected capacity change from 0 to 1024 [ 136.198156][ T5598] EXT4-fs: Ignoring removed orlov option [ 136.238527][ T5598] EXT4-fs (loop1): Test dummy encryption mode enabled [ 136.288184][ T5602] loop0: detected capacity change from 0 to 512 [ 136.854586][ T5602] EXT4-fs: Ignoring removed i_version option [ 136.863223][ T5602] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 136.907383][ T5598] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 136.910795][ T5602] EXT4-fs (loop0): 1 truncate cleaned up [ 136.926438][ T5602] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 137.571657][ T5627] netlink: 32 bytes leftover after parsing attributes in process `syz.2.507'. [ 139.364516][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 139.385069][ T5653] netlink: 44 bytes leftover after parsing attributes in process `syz.3.519'. [ 139.561825][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 140.801786][ T5678] loop3: detected capacity change from 0 to 512 [ 140.854918][ T5678] EXT4-fs: Ignoring removed i_version option [ 140.911960][ T5678] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 141.025825][ T5678] EXT4-fs (loop3): 1 truncate cleaned up [ 141.031556][ T5678] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 141.124831][ T5691] netlink: 44 bytes leftover after parsing attributes in process `syz.4.533'. [ 142.662607][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 143.020350][ T5747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.558'. [ 143.073271][ T27] kauditd_printk_skb: 53 callbacks suppressed [ 143.073287][ T27] audit: type=1326 audit(1731637327.292:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5752 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7420d7e719 code=0x7ffc0000 [ 143.167802][ T27] audit: type=1326 audit(1731637327.292:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5752 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7420d7e719 code=0x7ffc0000 [ 143.288832][ T27] audit: type=1326 audit(1731637327.292:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5752 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f7420d7e719 code=0x7ffc0000 [ 143.344461][ T27] audit: type=1326 audit(1731637327.292:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5752 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7420d7e719 code=0x7ffc0000 [ 143.407383][ T5765] loop2: detected capacity change from 0 to 512 [ 143.434230][ T27] audit: type=1326 audit(1731637327.292:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5752 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7420d7e719 code=0x7ffc0000 [ 143.465562][ T5765] EXT4-fs: Ignoring removed i_version option [ 143.513843][ T5765] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 143.534021][ T27] audit: type=1326 audit(1731637327.292:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5752 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f7420d7e719 code=0x7ffc0000 [ 143.584701][ T5765] EXT4-fs (loop2): 1 truncate cleaned up [ 143.590422][ T5765] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 143.606792][ T27] audit: type=1326 audit(1731637327.292:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5752 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7420d7e719 code=0x7ffc0000 [ 143.790273][ T27] audit: type=1326 audit(1731637327.292:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5752 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7420d7e719 code=0x7ffc0000 [ 143.961882][ T27] audit: type=1326 audit(1731637327.302:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5752 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f7420d7e719 code=0x7ffc0000 [ 144.070112][ T27] audit: type=1326 audit(1731637327.302:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5752 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7420d7e719 code=0x7ffc0000 [ 145.229470][ T4248] EXT4-fs (loop2): unmounting filesystem. [ 145.492617][ T5808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.582'. [ 146.313803][ T5833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.592'. [ 146.589875][ T5840] netlink: 20 bytes leftover after parsing attributes in process `syz.0.593'. [ 147.172705][ T5864] netlink: 60 bytes leftover after parsing attributes in process `syz.2.597'. [ 147.222688][ T5864] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 147.259554][ T5866] fuse: Unknown parameter '0x0000000000000003' [ 147.417354][ T5868] loop1: detected capacity change from 0 to 512 [ 147.448962][ T5868] EXT4-fs: Ignoring removed i_version option [ 147.498666][ T5868] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 147.580210][ T5868] EXT4-fs (loop1): 1 truncate cleaned up [ 147.636111][ T5868] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 148.212462][ T27] kauditd_printk_skb: 73 callbacks suppressed [ 148.212478][ T27] audit: type=1326 audit(1731637332.432:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5871 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132717e719 code=0x7ffc0000 [ 148.257209][ T27] audit: type=1326 audit(1731637332.432:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5871 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132717e719 code=0x7ffc0000 [ 148.308901][ T27] audit: type=1326 audit(1731637332.472:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5871 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f132717e719 code=0x7ffc0000 [ 148.423215][ T27] audit: type=1326 audit(1731637332.472:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5871 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132717e719 code=0x7ffc0000 [ 148.436808][ T5892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.605'. [ 148.454868][ T27] audit: type=1326 audit(1731637332.472:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5871 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f132717e719 code=0x7ffc0000 [ 149.092554][ T5903] netlink: 20 bytes leftover after parsing attributes in process `syz.4.609'. [ 149.273355][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 149.380734][ T5911] fuse: Unknown parameter '0x0000000000000003' [ 149.628348][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 149.820007][ T5924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.617'. [ 150.129616][ T5935] loop2: detected capacity change from 0 to 512 [ 150.150014][ T5935] EXT4-fs: Ignoring removed i_version option [ 150.170493][ T5935] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 150.180142][ T5937] netlink: 20 bytes leftover after parsing attributes in process `syz.0.623'. [ 150.207736][ T5935] EXT4-fs (loop2): 1 truncate cleaned up [ 150.213858][ T5935] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 150.471037][ T5947] fuse: Unknown parameter '0x0000000000000003' [ 150.876837][ T27] audit: type=1326 audit(1731637335.102:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.4.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7420d7e719 code=0x7ffc0000 [ 150.959433][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'. [ 150.967494][ T27] audit: type=1326 audit(1731637335.102:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.4.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7420d7e719 code=0x7ffc0000 [ 151.047230][ T27] audit: type=1326 audit(1731637335.102:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.4.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f7420d7e719 code=0x7ffc0000 [ 151.120858][ T27] audit: type=1326 audit(1731637335.102:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.4.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7420d7e719 code=0x7ffc0000 [ 151.198924][ T27] audit: type=1326 audit(1731637335.102:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.4.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7420d7e719 code=0x7ffc0000 [ 151.572541][ T5941] loop3: detected capacity change from 0 to 512 [ 151.646661][ T5941] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.654484][ T5941] EXT4-fs: Ignoring removed nobh option [ 151.792442][ T4248] EXT4-fs (loop2): unmounting filesystem. [ 151.957627][ T5941] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.624: corrupted in-inode xattr [ 151.971345][ T5941] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.624: couldn't read orphan inode 15 (err -117) [ 151.984931][ T5941] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 152.416945][ T5977] netlink: 20 bytes leftover after parsing attributes in process `syz.2.635'. [ 152.486024][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 152.720960][ T5989] fuse: Unknown parameter '0x0000000000000003' [ 152.733800][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 153.578827][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'. [ 153.935397][ T6017] fuse: Unknown parameter 'fd0x0000000000000003' [ 154.153159][ T6025] loop2: detected capacity change from 0 to 1024 [ 154.160460][ T6025] EXT4-fs: Ignoring removed orlov option [ 154.177572][ T6025] EXT4-fs (loop2): Test dummy encryption mode enabled [ 154.457583][ T6025] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 154.613494][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 154.613510][ T27] audit: type=1326 audit(1731637338.832:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483f77e719 code=0x7ffc0000 [ 154.739434][ T27] audit: type=1326 audit(1731637338.872:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483f77e719 code=0x7ffc0000 [ 154.765036][ T4248] EXT4-fs (loop2): unmounting filesystem. [ 154.780975][ T27] audit: type=1326 audit(1731637338.872:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f483f77e719 code=0x7ffc0000 [ 154.811822][ T27] audit: type=1326 audit(1731637338.872:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483f77e719 code=0x7ffc0000 [ 154.924209][ T27] audit: type=1326 audit(1731637338.872:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483f77e719 code=0x7ffc0000 [ 155.010970][ T6042] loop4: detected capacity change from 0 to 512 [ 155.032776][ T27] audit: type=1326 audit(1731637338.882:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f483f77e719 code=0x7ffc0000 [ 155.058957][ T6042] EXT4-fs: Ignoring removed i_version option [ 155.122623][ T6042] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 155.172032][ T6042] EXT4-fs (loop4): 1 truncate cleaned up [ 155.183488][ T27] audit: type=1326 audit(1731637338.882:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483f77e719 code=0x7ffc0000 [ 155.186838][ T6042] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 155.231400][ T27] audit: type=1326 audit(1731637338.882:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483f77e719 code=0x7ffc0000 [ 155.258118][ T27] audit: type=1326 audit(1731637338.882:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f483f77e719 code=0x7ffc0000 [ 155.281781][ T27] audit: type=1326 audit(1731637338.882:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483f77e719 code=0x7ffc0000 [ 155.435861][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 155.832915][ T6059] fuse: Unknown parameter 'fd0x0000000000000003' [ 156.348803][ T6072] loop2: detected capacity change from 0 to 1024 [ 156.356367][ T6072] EXT4-fs: Ignoring removed orlov option [ 156.363839][ T6072] EXT4-fs (loop2): Test dummy encryption mode enabled [ 156.591938][ T6072] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 156.709390][ T6076] loop1: detected capacity change from 0 to 512 [ 156.717316][ T6076] EXT4-fs: Ignoring removed i_version option [ 156.723912][ T6076] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 156.812311][ T6076] EXT4-fs (loop1): 1 truncate cleaned up [ 156.827502][ T6076] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 156.858890][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.674'. [ 156.937140][ T4248] EXT4-fs (loop2): unmounting filesystem. [ 157.121051][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 157.543471][ T6090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.677'. [ 158.192948][ T6103] fuse: Unknown parameter 'fd0x0000000000000003' [ 158.541228][ T6116] loop2: detected capacity change from 0 to 1024 [ 158.548636][ T6116] EXT4-fs: Ignoring removed orlov option [ 158.555933][ T6116] EXT4-fs (loop2): Test dummy encryption mode enabled [ 158.625632][ T6116] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 158.850568][ T6124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.689'. [ 159.188943][ T4248] EXT4-fs (loop2): unmounting filesystem. [ 159.783586][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.701'. [ 160.012536][ T27] kauditd_printk_skb: 39 callbacks suppressed [ 160.012552][ T27] audit: type=1326 audit(1731637344.232:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.2.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527d77e719 code=0x7ffc0000 [ 160.042258][ T27] audit: type=1326 audit(1731637344.272:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.2.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527d77e719 code=0x7ffc0000 [ 160.090062][ T6162] netlink: 20 bytes leftover after parsing attributes in process `syz.4.704'. [ 160.132431][ T27] audit: type=1326 audit(1731637344.292:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.2.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f527d77e719 code=0x7ffc0000 [ 160.883306][ T6176] xt_hashlimit: overflow, try lower: 17592186044416/2047 [ 161.333967][ T6191] netlink: 20 bytes leftover after parsing attributes in process `syz.3.715'. [ 162.514810][ T6220] netlink: 20 bytes leftover after parsing attributes in process `syz.2.729'. [ 163.449413][ T6253] loop1: detected capacity change from 0 to 1024 [ 163.456877][ T6253] EXT4-fs: Ignoring removed orlov option [ 163.469004][ T6253] EXT4-fs (loop1): Test dummy encryption mode enabled [ 163.508802][ T6253] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 163.567217][ T6258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.742'. [ 164.182341][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 164.890405][ T6289] netlink: 20 bytes leftover after parsing attributes in process `syz.1.755'. [ 165.079986][ T6296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.758'. [ 165.314631][ T6304] loop1: detected capacity change from 0 to 1024 [ 165.321914][ T6304] EXT4-fs: Ignoring removed orlov option [ 165.328454][ T6304] EXT4-fs (loop1): Test dummy encryption mode enabled [ 165.369599][ T6304] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 165.945567][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 166.117141][ T6334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.774'. [ 167.737516][ T6367] loop3: detected capacity change from 0 to 1024 [ 167.744867][ T6367] EXT4-fs: Ignoring removed orlov option [ 167.751529][ T6367] EXT4-fs (loop3): Test dummy encryption mode enabled [ 167.774236][ T6367] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 168.416016][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 168.487031][ T6381] loop1: detected capacity change from 0 to 512 [ 168.493781][ T6381] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.500311][ T6381] EXT4-fs: Ignoring removed nobh option [ 168.573628][ T6381] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.790: corrupted in-inode xattr [ 168.586241][ T6381] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.790: couldn't read orphan inode 15 (err -117) [ 168.600158][ T6381] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 168.675845][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 169.588027][ T27] audit: type=1326 audit(1731637353.812:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6423 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 169.762282][ T27] audit: type=1326 audit(1731637353.842:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6423 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 169.786431][ T27] audit: type=1326 audit(1731637353.842:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6423 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 169.809947][ T27] audit: type=1326 audit(1731637353.842:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6423 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 169.832512][ T27] audit: type=1326 audit(1731637353.852:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6423 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 170.779889][ T27] audit: type=1326 audit(1731637353.852:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6423 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 170.803539][ T27] audit: type=1326 audit(1731637353.852:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6423 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 171.004791][ T27] audit: type=1326 audit(1731637353.852:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6423 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 171.109979][ T27] audit: type=1326 audit(1731637353.862:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6423 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 171.138738][ T6431] netlink: 48 bytes leftover after parsing attributes in process `syz.4.806'. [ 171.183448][ T27] audit: type=1326 audit(1731637353.862:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6423 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 171.427256][ T6440] netlink: 60 bytes leftover after parsing attributes in process `syz.4.809'. [ 171.453993][ T6441] loop2: detected capacity change from 0 to 1024 [ 171.461471][ T6441] EXT4-fs: Ignoring removed orlov option [ 171.495940][ T6441] EXT4-fs (loop2): Test dummy encryption mode enabled [ 171.535823][ T6440] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 171.817065][ T6441] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 172.275663][ T4248] EXT4-fs (loop2): unmounting filesystem. [ 172.733017][ T6454] loop4: detected capacity change from 0 to 1024 [ 172.740190][ T6454] EXT4-fs: Ignoring removed orlov option [ 172.746874][ T6454] EXT4-fs (loop4): Test dummy encryption mode enabled [ 172.770030][ T6454] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 173.845103][ T6462] loop3: detected capacity change from 0 to 1024 [ 173.853382][ T6462] EXT4-fs: Ignoring removed orlov option [ 174.534665][ T6462] EXT4-fs (loop3): Test dummy encryption mode enabled [ 174.556858][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 174.570564][ T6462] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 174.807519][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 174.807534][ T27] audit: type=1326 audit(1731637359.032:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6469 comm="syz.1.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 174.843253][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 174.907779][ T6470] device syzkaller0 entered promiscuous mode [ 175.082889][ T27] audit: type=1326 audit(1731637359.092:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6469 comm="syz.1.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 176.172120][ T27] audit: type=1326 audit(1731637359.092:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6469 comm="syz.1.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 176.252149][ T27] audit: type=1326 audit(1731637359.092:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6469 comm="syz.1.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 176.329788][ T27] audit: type=1326 audit(1731637359.152:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6469 comm="syz.1.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 176.491297][ T27] audit: type=1326 audit(1731637359.152:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6469 comm="syz.1.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 176.600256][ T27] audit: type=1326 audit(1731637359.152:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6469 comm="syz.1.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 176.654464][ T27] audit: type=1326 audit(1731637359.152:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6469 comm="syz.1.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 176.733224][ T27] audit: type=1326 audit(1731637359.152:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6469 comm="syz.1.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 176.827090][ T27] audit: type=1326 audit(1731637359.152:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6469 comm="syz.1.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 177.015298][ T6494] loop4: detected capacity change from 0 to 1024 [ 177.027387][ T6494] EXT4-fs: Ignoring removed orlov option [ 177.137290][ T6494] EXT4-fs (loop4): Test dummy encryption mode enabled [ 177.345990][ T6494] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 177.726774][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 177.982039][ T6510] fuse: Bad value for 'fd' [ 178.204470][ T6513] loop0: detected capacity change from 0 to 1024 [ 178.214641][ T6513] EXT4-fs: Ignoring removed orlov option [ 178.345039][ T6513] EXT4-fs (loop0): Test dummy encryption mode enabled [ 178.460839][ T6513] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 178.878191][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 179.200242][ T6521] device syzkaller0 entered promiscuous mode [ 180.451133][ T6542] netlink: 96 bytes leftover after parsing attributes in process `syz.4.835'. [ 180.594497][ T6509] loop2: detected capacity change from 0 to 1024 [ 180.625511][ T6509] EXT4-fs: Ignoring removed orlov option [ 180.673177][ T6509] EXT4-fs (loop2): Test dummy encryption mode enabled [ 180.822873][ T6556] loop0: detected capacity change from 0 to 1024 [ 180.833265][ T6556] EXT4-fs: Ignoring removed orlov option [ 180.858776][ T6556] EXT4-fs (loop0): Test dummy encryption mode enabled [ 181.014775][ T6556] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 181.093495][ T6509] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 181.473629][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 181.562626][ T27] kauditd_printk_skb: 55 callbacks suppressed [ 181.562641][ T27] audit: type=1326 audit(1731637365.782:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.1.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 181.924289][ T27] audit: type=1326 audit(1731637365.822:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.1.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 182.199546][ T27] audit: type=1326 audit(1731637365.822:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.1.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 182.460355][ T27] audit: type=1326 audit(1731637365.832:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.1.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 182.649719][ T27] audit: type=1326 audit(1731637365.832:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.1.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 182.736749][ T27] audit: type=1326 audit(1731637365.832:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.1.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 182.759875][ T27] audit: type=1326 audit(1731637365.832:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.1.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 182.795030][ T27] audit: type=1326 audit(1731637365.832:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.1.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 182.853521][ T27] audit: type=1326 audit(1731637365.832:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.1.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 182.896040][ T4248] EXT4-fs (loop2): unmounting filesystem. [ 182.914108][ T27] audit: type=1326 audit(1731637365.832:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.1.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 182.955208][ T6580] device syzkaller0 entered promiscuous mode [ 183.467955][ T6576] loop0: detected capacity change from 0 to 1024 [ 183.475092][ T6576] EXT4-fs: Ignoring removed orlov option [ 183.485738][ T6576] EXT4-fs (loop0): Test dummy encryption mode enabled [ 183.527299][ T6576] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 183.719376][ T6600] netlink: 96 bytes leftover after parsing attributes in process `syz.3.850'. [ 183.847700][ T6605] loop4: detected capacity change from 0 to 512 [ 183.889846][ T6605] EXT4-fs: Ignoring removed i_version option [ 183.932480][ T6605] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 183.999750][ T6605] EXT4-fs (loop4): 1 truncate cleaned up [ 184.016016][ T6605] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 184.556126][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 184.800695][ T6617] loop1: detected capacity change from 0 to 1024 [ 184.811866][ T6617] EXT4-fs: Ignoring removed orlov option [ 184.969556][ T6617] EXT4-fs (loop1): Test dummy encryption mode enabled [ 185.051102][ T6617] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 185.460296][ T6623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.857'. [ 185.504255][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 185.783287][ T6630] device syzkaller0 entered promiscuous mode [ 186.060155][ T6636] netlink: 20 bytes leftover after parsing attributes in process `syz.2.861'. [ 186.446193][ T6641] netlink: 96 bytes leftover after parsing attributes in process `syz.1.863'. [ 186.537860][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 186.794706][ T6648] loop1: detected capacity change from 0 to 512 [ 186.834228][ T6648] EXT4-fs: Ignoring removed i_version option [ 186.890990][ T6648] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 187.002223][ T6648] EXT4-fs (loop1): 1 truncate cleaned up [ 187.032415][ T6648] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 187.642430][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 188.124263][ T6669] loop0: detected capacity change from 0 to 1024 [ 188.134171][ T6669] EXT4-fs: Ignoring removed orlov option [ 188.164244][ T6669] EXT4-fs (loop0): Test dummy encryption mode enabled [ 188.857346][ T6669] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 188.985123][ T6674] netlink: 44 bytes leftover after parsing attributes in process `syz.4.872'. [ 189.095221][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 189.919335][ T6686] loop0: detected capacity change from 0 to 1024 [ 189.926735][ T6686] EXT4-fs: Ignoring removed orlov option [ 189.954998][ T6686] EXT4-fs (loop0): Test dummy encryption mode enabled [ 189.981226][ T6686] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 190.026197][ T6691] loop4: detected capacity change from 0 to 1024 [ 190.034612][ T6691] EXT4-fs: Ignoring removed orlov option [ 190.042235][ T6691] EXT4-fs (loop4): Test dummy encryption mode enabled [ 190.081940][ T6691] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 190.528115][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 190.540669][ T6703] loop3: detected capacity change from 0 to 512 [ 190.557931][ T6703] EXT4-fs: Ignoring removed i_version option [ 190.616932][ T6703] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 190.688828][ T6703] EXT4-fs (loop3): 1 truncate cleaned up [ 190.694797][ T6703] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 191.187324][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 191.540598][ T6718] loop1: detected capacity change from 0 to 1024 [ 191.551168][ T6718] EXT4-fs: Ignoring removed orlov option [ 191.657835][ T6718] EXT4-fs (loop1): Test dummy encryption mode enabled [ 191.760586][ T6718] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 192.236036][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 193.467940][ T6735] loop1: detected capacity change from 0 to 512 [ 193.474827][ T6735] EXT4-fs: Ignoring removed mblk_io_submit option [ 193.481257][ T6735] EXT4-fs: Ignoring removed nobh option [ 193.531285][ T6735] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.888: corrupted in-inode xattr [ 193.543695][ T6735] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.888: couldn't read orphan inode 15 (err -117) [ 193.556209][ T6735] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 193.719217][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 193.914799][ T6745] xt_hashlimit: overflow, try lower: 17592186044416/2047 [ 194.116732][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.123257][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.314734][ T6755] loop3: detected capacity change from 0 to 1024 [ 194.321936][ T6755] EXT4-fs: Ignoring removed orlov option [ 195.784481][ T6755] EXT4-fs (loop3): Test dummy encryption mode enabled [ 195.828581][ T6755] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 195.921372][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 196.070829][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 196.150007][ T6760] loop4: detected capacity change from 0 to 512 [ 196.176907][ T6760] EXT4-fs: Ignoring removed i_version option [ 196.181663][ T4255] Bluetooth: hci3: command 0x0406 tx timeout [ 196.189036][ T4263] Bluetooth: hci4: command 0x0406 tx timeout [ 196.250364][ T6760] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 196.260640][ T4255] Bluetooth: hci1: command 0x0406 tx timeout [ 196.267707][ T4264] Bluetooth: hci2: command 0x0406 tx timeout [ 196.267719][ T4263] Bluetooth: hci0: command 0x0406 tx timeout [ 196.314553][ T6760] EXT4-fs (loop4): 1 truncate cleaned up [ 196.320661][ T6760] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 196.321268][ T6762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.898'. [ 196.495442][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.898'. [ 196.830395][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 197.586684][ T6780] loop4: detected capacity change from 0 to 1024 [ 197.597099][ T6780] EXT4-fs: Ignoring removed orlov option [ 197.628988][ T6780] EXT4-fs (loop4): Test dummy encryption mode enabled [ 198.289175][ T6780] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 198.538186][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 198.727874][ T6790] netlink: 20 bytes leftover after parsing attributes in process `syz.4.904'. [ 200.310087][ T6791] loop2: detected capacity change from 0 to 512 [ 200.316868][ T6791] EXT4-fs: Ignoring removed mblk_io_submit option [ 200.323294][ T6791] EXT4-fs: Ignoring removed nobh option [ 200.406410][ T6791] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.905: corrupted in-inode xattr [ 200.418745][ T6791] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.905: couldn't read orphan inode 15 (err -117) [ 200.431262][ T6791] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 200.510185][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.911'. [ 200.519308][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.911'. [ 200.585189][ T6810] loop4: detected capacity change from 0 to 512 [ 200.616570][ T6810] EXT4-fs: Ignoring removed i_version option [ 200.623629][ T6810] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 200.665985][ T6810] EXT4-fs (loop4): 1 truncate cleaned up [ 200.680983][ T6810] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 201.344331][ T6822] loop3: detected capacity change from 0 to 1024 [ 201.354816][ T6822] EXT4-fs: Ignoring removed orlov option [ 201.380397][ T6822] EXT4-fs (loop3): Test dummy encryption mode enabled [ 201.574108][ T6822] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 202.008681][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 202.067487][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 202.181397][ T4248] EXT4-fs (loop2): unmounting filesystem. [ 202.201410][ T6826] netlink: 20 bytes leftover after parsing attributes in process `syz.1.917'. [ 202.828085][ T6846] loop1: detected capacity change from 0 to 1024 [ 202.839574][ T6846] EXT4-fs: Ignoring removed orlov option [ 202.854609][ T6846] EXT4-fs (loop1): Test dummy encryption mode enabled [ 202.916236][ T6846] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 203.464473][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 203.493692][ T6855] loop4: detected capacity change from 0 to 512 [ 203.500741][ T6855] EXT4-fs: Ignoring removed i_version option [ 203.554584][ T6855] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 203.682289][ T6855] EXT4-fs (loop4): 1 truncate cleaned up [ 203.698808][ T6855] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 204.230255][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 204.579544][ T6868] loop3: detected capacity change from 0 to 1024 [ 204.590009][ T6868] EXT4-fs: Ignoring removed orlov option [ 204.814081][ T6868] EXT4-fs (loop3): Test dummy encryption mode enabled [ 205.418344][ T6868] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 206.158429][ T6886] loop0: detected capacity change from 0 to 512 [ 206.205604][ T6886] EXT4-fs: Ignoring removed mblk_io_submit option [ 206.247683][ T6886] EXT4-fs: Ignoring removed nobh option [ 206.311000][ T6886] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.929: corrupted in-inode xattr [ 206.413138][ T6886] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.929: couldn't read orphan inode 15 (err -117) [ 206.453096][ T6886] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 207.084513][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 207.099771][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.934'. [ 207.132188][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.934'. [ 207.545807][ T6904] loop3: detected capacity change from 0 to 512 [ 207.583826][ T6904] EXT4-fs: Ignoring removed i_version option [ 207.624969][ T6904] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 207.682188][ T6904] EXT4-fs (loop3): 1 truncate cleaned up [ 207.690113][ T6904] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 207.731685][ T6910] netlink: 20 bytes leftover after parsing attributes in process `syz.4.939'. [ 208.209334][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 208.218872][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 209.557680][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.582769][ T6924] loop1: detected capacity change from 0 to 1024 [ 209.590303][ T6924] EXT4-fs: Ignoring removed orlov option [ 209.596974][ T6924] EXT4-fs (loop1): Test dummy encryption mode enabled [ 209.636003][ T6924] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 209.872834][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.024238][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.948'. [ 210.043417][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.948'. [ 210.150293][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.247038][ T6935] loop0: detected capacity change from 0 to 1024 [ 210.256572][ T6935] EXT4-fs: Ignoring removed orlov option [ 210.472704][ T6935] EXT4-fs (loop0): Test dummy encryption mode enabled [ 211.102178][ T6935] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 211.249960][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.343002][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 211.540862][ T6944] netlink: 20 bytes leftover after parsing attributes in process `syz.0.951'. [ 211.648255][ T4263] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.658097][ T4263] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.668746][ T4263] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.677395][ T4263] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.685144][ T4263] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 211.692405][ T4263] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 211.759689][ T6950] loop0: detected capacity change from 0 to 512 [ 211.769194][ T6950] EXT4-fs: Ignoring removed i_version option [ 212.008345][ T6950] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 212.823097][ T6948] loop4: detected capacity change from 0 to 512 [ 212.829948][ T6948] EXT4-fs: Ignoring removed mblk_io_submit option [ 212.836453][ T6948] EXT4-fs: Ignoring removed nobh option [ 212.895645][ T6948] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.952: corrupted in-inode xattr [ 212.912773][ T6948] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.952: couldn't read orphan inode 15 (err -117) [ 212.925381][ T6948] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 212.947276][ T6950] EXT4-fs (loop0): 1 truncate cleaned up [ 212.952944][ T6950] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 213.515451][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 213.616738][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 213.774648][ T4263] Bluetooth: hci0: command tx timeout [ 213.881699][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 213.891070][ T6945] chnl_net:caif_netlink_parms(): no params data found [ 214.012744][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.958'. [ 214.038458][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.958'. [ 214.428791][ T6945] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.444878][ T6945] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.455741][ T6945] device bridge_slave_0 entered promiscuous mode [ 214.479161][ T6945] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.492433][ T6945] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.511418][ T6945] device bridge_slave_1 entered promiscuous mode [ 214.605475][ T6945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.783475][ T6994] loop0: detected capacity change from 0 to 1024 [ 214.794135][ T6994] EXT4-fs: Ignoring removed orlov option [ 214.872461][ T6945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.901499][ T6994] EXT4-fs (loop0): Test dummy encryption mode enabled [ 215.034682][ T6994] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 215.489117][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 215.618526][ T7002] netlink: 20 bytes leftover after parsing attributes in process `syz.0.962'. [ 215.692689][ T6945] team0: Port device team_slave_0 added [ 215.802903][ T7008] loop0: detected capacity change from 0 to 512 [ 215.832689][ T7008] EXT4-fs: Ignoring removed i_version option [ 215.854630][ T4263] Bluetooth: hci0: command tx timeout [ 215.862089][ T6945] team0: Port device team_slave_1 added [ 215.875356][ T7008] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 216.004773][ T7008] EXT4-fs (loop0): 1 truncate cleaned up [ 216.043230][ T7008] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 216.357588][ T6945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.369226][ T6945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.665493][ T6945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.678321][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 216.775411][ T6945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.790768][ T7013] loop1: detected capacity change from 0 to 512 [ 216.797800][ T7013] EXT4-fs: Ignoring removed mblk_io_submit option [ 216.804299][ T7013] EXT4-fs: Ignoring removed nobh option [ 216.844414][ T6945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.922963][ T7013] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.965: corrupted in-inode xattr [ 216.935451][ T7013] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.965: couldn't read orphan inode 15 (err -117) [ 216.947452][ T6945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.958743][ T7013] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 217.083073][ T56] device hsr_slave_0 left promiscuous mode [ 217.102119][ T56] device hsr_slave_1 left promiscuous mode [ 217.127464][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.154878][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.195660][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.203129][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.262128][ T56] device bridge_slave_1 left promiscuous mode [ 217.292500][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.338722][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 217.345400][ T56] device bridge_slave_0 left promiscuous mode [ 217.351741][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.493017][ T56] device veth1_macvtap left promiscuous mode [ 217.516282][ T56] device veth0_macvtap left promiscuous mode [ 217.522523][ T56] device veth1_vlan left promiscuous mode [ 217.554458][ T56] device veth0_vlan left promiscuous mode [ 217.841035][ T7039] loop4: detected capacity change from 0 to 1024 [ 217.848405][ T7039] EXT4-fs: Ignoring removed orlov option [ 217.855126][ T7039] EXT4-fs (loop4): Test dummy encryption mode enabled [ 217.879752][ T7039] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 217.935113][ T4263] Bluetooth: hci0: command tx timeout [ 218.112734][ T56] bond1 (unregistering): (slave bridge1): Releasing active interface [ 218.380546][ T56] bond1 (unregistering): Released all slaves [ 218.820904][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 219.200666][ T56] team0 (unregistering): Port device team_slave_1 removed [ 219.410756][ T7049] loop4: detected capacity change from 0 to 1024 [ 219.425265][ T7049] EXT4-fs: Ignoring removed orlov option [ 219.444300][ T7049] EXT4-fs (loop4): Test dummy encryption mode enabled [ 219.505718][ T7049] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 219.827483][ T56] team0 (unregistering): Port device team_slave_0 removed [ 220.024980][ T4263] Bluetooth: hci0: command tx timeout [ 220.071314][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.091785][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 220.158550][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.741114][ T56] bond0 (unregistering): Released all slaves [ 220.854552][ T7036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.969'. [ 220.863472][ T7036] netlink: 44 bytes leftover after parsing attributes in process `syz.1.969'. [ 220.976004][ T6945] device hsr_slave_0 entered promiscuous mode [ 221.000243][ T6945] device hsr_slave_1 entered promiscuous mode [ 221.016702][ T6945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.037673][ T6945] Cannot create hsr debugfs directory [ 221.388333][ T7067] loop4: detected capacity change from 0 to 512 [ 221.416684][ T7067] EXT4-fs: Ignoring removed i_version option [ 221.451997][ T7067] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 221.523191][ T7067] EXT4-fs (loop4): 1 truncate cleaned up [ 221.610830][ T7067] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 222.167609][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 222.348190][ T6945] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 222.543284][ T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.776769][ T7080] netlink: 20 bytes leftover after parsing attributes in process `syz.1.979'. [ 222.788146][ T6945] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 222.811954][ T6945] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 222.832698][ T6945] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 222.949034][ T7085] loop4: detected capacity change from 0 to 1024 [ 222.976700][ T7085] EXT4-fs: Ignoring removed orlov option [ 222.986548][ T7085] EXT4-fs (loop4): Test dummy encryption mode enabled [ 223.002752][ T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.063913][ T7085] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 223.290714][ T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.397936][ T7093] loop1: detected capacity change from 0 to 1024 [ 223.408362][ T7093] EXT4-fs: Ignoring removed orlov option [ 223.428346][ T7093] EXT4-fs (loop1): Test dummy encryption mode enabled [ 224.168481][ T7093] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 224.359013][ T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.442454][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 224.594358][ T6945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.664837][ T4263] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 224.675226][ T4263] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 224.683171][ T4263] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 224.692749][ T4264] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 224.699908][ T6945] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.707861][ T4263] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 224.715283][ T4264] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 224.809964][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.830189][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.853703][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.869982][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.879701][ T5417] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.886881][ T5417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.906132][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.920748][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.932198][ T5417] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.939436][ T5417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.955675][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.965100][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.980462][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.991355][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.000706][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.012332][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.022154][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.031034][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.041236][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.050701][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.060986][ T7103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.983'. [ 225.070324][ T7103] netlink: 44 bytes leftover after parsing attributes in process `syz.1.983'. [ 225.092097][ T6945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 225.210670][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.240213][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.326793][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 225.671539][ T7121] loop4: detected capacity change from 0 to 512 [ 225.704859][ T7121] EXT4-fs: Ignoring removed i_version option [ 225.741885][ T7121] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 225.787362][ T7121] EXT4-fs (loop4): 1 truncate cleaned up [ 225.803883][ T7121] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 226.098727][ T7100] chnl_net:caif_netlink_parms(): no params data found [ 226.342776][ T7130] netlink: 20 bytes leftover after parsing attributes in process `syz.0.989'. [ 226.375643][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 226.458949][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.484390][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 226.734576][ T4255] Bluetooth: hci3: command tx timeout [ 226.767125][ T6945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.908773][ T7147] loop1: detected capacity change from 0 to 1024 [ 226.919531][ T7147] EXT4-fs: Ignoring removed orlov option [ 226.932194][ T7147] EXT4-fs (loop1): Test dummy encryption mode enabled [ 227.267743][ T7100] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.279416][ T7100] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.298320][ T7100] device bridge_slave_0 entered promiscuous mode [ 227.323343][ T7100] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.366372][ T7100] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.487174][ T7100] device bridge_slave_1 entered promiscuous mode [ 227.517348][ T7147] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 227.553526][ T7145] netlink: 28 bytes leftover after parsing attributes in process `syz.4.993'. [ 227.593116][ T7145] netlink: 44 bytes leftover after parsing attributes in process `syz.4.993'. [ 227.789166][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 227.978367][ T7100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.074704][ T56] device hsr_slave_0 left promiscuous mode [ 228.081639][ T56] device hsr_slave_1 left promiscuous mode [ 228.119245][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.145174][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.157718][ T7177] loop4: detected capacity change from 0 to 512 [ 228.172671][ T7177] EXT4-fs: Ignoring removed i_version option [ 228.195794][ T7177] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 228.203435][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.224721][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.245361][ T7177] EXT4-fs (loop4): 1 truncate cleaned up [ 228.251659][ T56] device bridge_slave_1 left promiscuous mode [ 228.262843][ T7177] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 228.276319][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.458180][ T56] device bridge_slave_0 left promiscuous mode [ 228.481747][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.562216][ T56] device veth1_macvtap left promiscuous mode [ 228.568949][ T56] device veth0_macvtap left promiscuous mode [ 228.576291][ T56] device veth1_vlan left promiscuous mode [ 228.582672][ T56] device veth0_vlan left promiscuous mode [ 228.815565][ T4255] Bluetooth: hci3: command tx timeout [ 228.828242][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 229.073090][ T7187] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1000'. [ 229.362350][ T56] team0 (unregistering): Port device team_slave_1 removed [ 229.400151][ T56] team0 (unregistering): Port device team_slave_0 removed [ 229.435644][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.472505][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.851805][ T56] bond0 (unregistering): Released all slaves [ 229.944953][ T7100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.049081][ T7100] team0: Port device team_slave_0 added [ 230.087840][ T7100] team0: Port device team_slave_1 added [ 230.186603][ T7100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.193596][ T7100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.251311][ T7100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.304503][ T7100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.311501][ T7100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.342341][ T7100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.391471][ T7195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1003'. [ 230.422045][ T7195] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1003'. [ 230.466709][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 230.502267][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 230.626553][ T7100] device hsr_slave_0 entered promiscuous mode [ 230.648051][ T7100] device hsr_slave_1 entered promiscuous mode [ 230.688629][ T7206] loop1: detected capacity change from 0 to 512 [ 230.708435][ T7206] EXT4-fs: Ignoring removed i_version option [ 230.749952][ T6945] device veth0_vlan entered promiscuous mode [ 230.837818][ T7206] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 230.874769][ T6721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 230.904149][ T4255] Bluetooth: hci3: command tx timeout [ 230.946799][ T7211] loop0: detected capacity change from 0 to 1024 [ 230.954125][ T7211] EXT4-fs: Ignoring removed orlov option [ 230.977253][ T7211] EXT4-fs (loop0): Test dummy encryption mode enabled [ 232.454754][ T7206] EXT4-fs (loop1): 1 truncate cleaned up [ 232.460433][ T7206] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 232.499207][ T7211] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 232.517217][ T6721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 232.556505][ T6721] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 232.985180][ T4263] Bluetooth: hci3: command tx timeout [ 233.000037][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 233.006569][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 233.059464][ T6721] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 233.158492][ T6945] device veth1_vlan entered promiscuous mode [ 233.181407][ T7221] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1008'. [ 233.215103][ T7220] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1009'. [ 233.255587][ T7221] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1008'. [ 233.309925][ T6721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 233.326068][ T6721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 233.367724][ T6945] device veth0_macvtap entered promiscuous mode [ 233.416890][ T6945] device veth1_macvtap entered promiscuous mode [ 233.516974][ T6945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.532756][ T6945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.555194][ T6945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.570621][ T6945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.582555][ T6945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.598079][ T6945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.611037][ T6945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.629032][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 233.642985][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 233.652061][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 233.664896][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 233.687670][ T6945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.709712][ T6945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.722768][ T6945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.739466][ T6945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.749668][ T6945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.767901][ T6945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.785623][ T6945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.810350][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 233.822017][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 233.839600][ T6945] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.851691][ T6945] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.861290][ T6945] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.871295][ T6945] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.892847][ T7240] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1013'. [ 233.902082][ T7240] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1013'. [ 234.029804][ T4636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.053832][ T4636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.066116][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 234.101842][ T7100] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 234.109544][ T6721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.123606][ T6721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.149379][ T7100] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 234.175688][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 234.202828][ T7100] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 234.230306][ T7100] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 234.577973][ T7250] loop4: detected capacity change from 0 to 512 [ 234.629073][ T7250] EXT4-fs: Ignoring removed i_version option [ 234.654175][ T7100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.775994][ T7256] loop1: detected capacity change from 0 to 1024 [ 234.786806][ T7256] EXT4-fs: Ignoring removed orlov option [ 234.841938][ T7256] EXT4-fs (loop1): Test dummy encryption mode enabled [ 234.862404][ T7250] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 235.031060][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 235.082367][ T7256] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 235.477332][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 235.494828][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.547261][ T7262] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1019'. [ 235.561479][ T7100] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.568987][ T7250] EXT4-fs (loop4): 1 truncate cleaned up [ 235.584246][ T7250] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 236.117916][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.137142][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 236.143830][ T7268] xt_hashlimit: overflow, try lower: 17592186044416/2047 [ 236.180951][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.229042][ T4678] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.236329][ T4678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.286828][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.320428][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.341253][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.372740][ T4636] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.375185][ T7277] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1021'. [ 236.379912][ T4636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.417795][ T7274] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1022'. [ 236.436450][ T7274] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1022'. [ 236.456530][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.485283][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.486627][ T7277] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1021'. [ 236.552299][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.616246][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.683158][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.711100][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.770860][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 236.811271][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 236.845344][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 236.871955][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 236.905733][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 236.956939][ T7100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 237.031014][ T7298] loop1: detected capacity change from 0 to 512 [ 237.070382][ T7298] EXT4-fs: Ignoring removed i_version option [ 237.101340][ T7298] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 237.192518][ T7298] EXT4-fs (loop1): 1 truncate cleaned up [ 237.209327][ T7298] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 237.774842][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 238.226982][ T6721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.252284][ T6721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.317730][ T7100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.526586][ T7344] __nla_validate_parse: 6 callbacks suppressed [ 238.526609][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1039'. [ 239.620312][ T7359] loop4: detected capacity change from 0 to 1024 [ 239.627420][ T7359] EXT4-fs: Ignoring removed orlov option [ 239.633760][ T7359] EXT4-fs (loop4): Test dummy encryption mode enabled [ 239.665283][ T7359] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 239.805041][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 240.001534][ T7368] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1043'. [ 240.056044][ T7371] loop0: detected capacity change from 0 to 512 [ 240.067968][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 240.084547][ T7371] EXT4-fs: Ignoring removed i_version option [ 240.115452][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 240.146751][ T7371] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 240.217913][ T6721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 240.237677][ T7371] EXT4-fs (loop0): 1 truncate cleaned up [ 240.242220][ T6721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 240.258147][ T7371] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 240.277067][ T6721] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 240.290450][ T6721] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 240.303678][ T7100] device veth0_vlan entered promiscuous mode [ 240.781921][ T7100] device veth1_vlan entered promiscuous mode [ 240.924437][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 241.044809][ T7100] device veth0_macvtap entered promiscuous mode [ 241.081921][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 241.096456][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 241.107925][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 241.119551][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 241.136456][ T7100] device veth1_macvtap entered promiscuous mode [ 241.209774][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 241.250097][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.285381][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.318756][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.338507][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.353347][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.364604][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.375364][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.386294][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.399423][ T7100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.414853][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 241.429182][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 241.447063][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.468352][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.482392][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.498920][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.509194][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.526094][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.542137][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.570064][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.588880][ T7100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.599937][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 241.618823][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 241.641418][ T7100] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.650975][ T7100] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.660083][ T7100] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.673179][ T7100] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.902914][ T6721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.946225][ T6721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.000415][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 242.060788][ T4636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.080372][ T4636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.131549][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 242.341958][ T7412] loop5: detected capacity change from 0 to 1024 [ 242.350468][ T7412] EXT4-fs: Ignoring removed orlov option [ 242.358662][ T7412] EXT4-fs (loop5): Test dummy encryption mode enabled [ 242.414108][ T7412] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 242.586923][ T6945] EXT4-fs (loop5): unmounting filesystem. [ 243.373930][ T7425] loop4: detected capacity change from 0 to 512 [ 243.776913][ T7425] EXT4-fs: Ignoring removed i_version option [ 243.949525][ T7425] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 243.968449][ T7428] loop6: detected capacity change from 0 to 512 [ 243.987163][ T7428] EXT4-fs: Ignoring removed mblk_io_submit option [ 244.018813][ T7428] EXT4-fs: Ignoring removed nobh option [ 244.079801][ T7428] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2186: inode #15: comm syz.6.978: corrupted in-inode xattr [ 244.100777][ T7425] EXT4-fs (loop4): 1 truncate cleaned up [ 244.114397][ T7425] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 244.139580][ T7428] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.978: couldn't read orphan inode 15 (err -117) [ 244.199402][ T7428] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 244.709354][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 245.124562][ T7100] EXT4-fs (loop6): unmounting filesystem. [ 245.447969][ T7454] device syzkaller0 entered promiscuous mode [ 246.242539][ T7466] loop4: detected capacity change from 0 to 1024 [ 246.250874][ T7466] EXT4-fs: Ignoring removed orlov option [ 246.258211][ T7466] EXT4-fs (loop4): Test dummy encryption mode enabled [ 246.285904][ T7466] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 246.454505][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 246.724492][ T7477] loop4: detected capacity change from 0 to 512 [ 246.732085][ T7477] EXT4-fs: Ignoring removed i_version option [ 246.811359][ T7477] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 246.970437][ T7477] EXT4-fs (loop4): 1 truncate cleaned up [ 246.979439][ T7477] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 247.149520][ T7483] loop0: detected capacity change from 0 to 512 [ 247.156408][ T7483] EXT4-fs: Ignoring removed mblk_io_submit option [ 247.162838][ T7483] EXT4-fs: Ignoring removed nobh option [ 247.191795][ T7483] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.1073: corrupted in-inode xattr [ 247.205528][ T7483] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1073: couldn't read orphan inode 15 (err -117) [ 247.221593][ T7483] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 247.880219][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 248.015682][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 248.121266][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1077'. [ 248.754424][ T7531] device syzkaller0 entered promiscuous mode [ 248.762624][ T7532] loop4: detected capacity change from 0 to 512 [ 248.778915][ T7532] EXT4-fs: Ignoring removed i_version option [ 248.814463][ T7532] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 248.859602][ T7532] EXT4-fs (loop4): 1 truncate cleaned up [ 248.866206][ T7532] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 249.377233][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 250.082789][ T7556] loop6: detected capacity change from 0 to 512 [ 250.090368][ T7556] EXT4-fs: Ignoring removed mblk_io_submit option [ 250.097144][ T7556] EXT4-fs: Ignoring removed nobh option [ 250.824162][ T7556] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2186: inode #15: comm syz.6.1090: corrupted in-inode xattr [ 250.918440][ T7556] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1090: couldn't read orphan inode 15 (err -117) [ 250.993421][ T7556] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 251.464186][ T7100] EXT4-fs (loop6): unmounting filesystem. [ 252.432194][ T27] kauditd_printk_skb: 48 callbacks suppressed [ 252.432212][ T27] audit: type=1326 audit(1731637436.652:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.1.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 252.651676][ T27] audit: type=1326 audit(1731637436.652:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.1.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 252.679351][ T27] audit: type=1326 audit(1731637436.652:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.1.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 252.769689][ T27] audit: type=1326 audit(1731637436.652:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.1.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 252.776897][ T7628] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1115'. [ 253.836331][ T27] audit: type=1326 audit(1731637436.652:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.1.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 253.869215][ T7623] loop6: detected capacity change from 0 to 512 [ 253.876006][ T7623] EXT4-fs: Ignoring removed mblk_io_submit option [ 253.882426][ T7623] EXT4-fs: Ignoring removed nobh option [ 253.909676][ T7623] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2186: inode #15: comm syz.6.1113: corrupted in-inode xattr [ 253.922934][ T7623] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1113: couldn't read orphan inode 15 (err -117) [ 253.967015][ T27] audit: type=1326 audit(1731637436.652:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.1.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 254.010079][ T27] audit: type=1326 audit(1731637436.652:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.1.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 254.043878][ T7623] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 254.067960][ T27] audit: type=1326 audit(1731637436.662:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.1.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 254.121058][ T27] audit: type=1326 audit(1731637436.662:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.1.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 254.183030][ T27] audit: type=1326 audit(1731637436.662:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.1.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2d37e719 code=0x7ffc0000 [ 254.842181][ T7100] EXT4-fs (loop6): unmounting filesystem. [ 255.665111][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.671670][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.309887][ T7700] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1134'. [ 256.864371][ T7703] loop5: detected capacity change from 0 to 512 [ 256.871060][ T7703] EXT4-fs: Ignoring removed mblk_io_submit option [ 256.877628][ T7703] EXT4-fs: Ignoring removed nobh option [ 256.925319][ T7703] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.1135: corrupted in-inode xattr [ 256.937933][ T7703] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1135: couldn't read orphan inode 15 (err -117) [ 256.950417][ T7703] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 257.422279][ T6945] EXT4-fs (loop5): unmounting filesystem. [ 257.948001][ T7737] loop5: detected capacity change from 0 to 1024 [ 257.955400][ T7737] EXT4-fs: Ignoring removed orlov option [ 258.369451][ T7737] EXT4-fs (loop5): Test dummy encryption mode enabled [ 258.429405][ T7737] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 258.752102][ T6945] EXT4-fs (loop5): unmounting filesystem. [ 259.074150][ T27] kauditd_printk_skb: 62 callbacks suppressed [ 259.074165][ T27] audit: type=1326 audit(1731637443.292:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7420d7e719 code=0x7ffc0000 [ 259.337967][ T27] audit: type=1326 audit(1731637443.332:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7420d7e719 code=0x7ffc0000 [ 259.493528][ T27] audit: type=1326 audit(1731637443.332:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f7420d7e719 code=0x7ffc0000 [ 259.686267][ T27] audit: type=1326 audit(1731637443.332:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7420d7e719 code=0x7ffc0000 [ 259.861582][ T7765] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1148'. [ 259.945273][ T27] audit: type=1326 audit(1731637443.332:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7420d7e719 code=0x7ffc0000 [ 259.969357][ T27] audit: type=1326 audit(1731637443.342:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f7420d7e719 code=0x7ffc0000 [ 260.069493][ T27] audit: type=1326 audit(1731637443.342:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7420d7e719 code=0x7ffc0000 [ 260.191358][ T27] audit: type=1326 audit(1731637443.342:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7420d7e719 code=0x7ffc0000 [ 260.305091][ T27] audit: type=1326 audit(1731637443.342:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f7420d7e719 code=0x7ffc0000 [ 260.394312][ T27] audit: type=1326 audit(1731637443.342:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7420d7e719 code=0x7ffc0000 [ 261.509969][ T7795] loop0: detected capacity change from 0 to 1024 [ 261.517401][ T7795] EXT4-fs: Ignoring removed orlov option [ 261.523906][ T7795] EXT4-fs (loop0): Test dummy encryption mode enabled [ 261.643906][ T7795] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 261.965674][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 262.156491][ T7774] loop4: detected capacity change from 0 to 512 [ 262.200760][ T7774] EXT4-fs: Ignoring removed mblk_io_submit option [ 262.237331][ T7774] EXT4-fs: Ignoring removed nobh option [ 262.244366][ T7816] netlink: 'syz.1.1161': attribute type 1 has an invalid length. [ 262.352800][ T7816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.454659][ T7819] device team0 entered promiscuous mode [ 262.542593][ T7819] device team_slave_0 entered promiscuous mode [ 262.584447][ T7819] device team_slave_1 entered promiscuous mode [ 262.678449][ T7819] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 262.695079][ T7819] team0: Device macvlan2 is already an upper device of the team interface [ 262.731969][ T7774] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.1151: corrupted in-inode xattr [ 262.770171][ T7774] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1151: couldn't read orphan inode 15 (err -117) [ 262.793494][ T7819] device team0 left promiscuous mode [ 262.831286][ T7819] device team_slave_0 left promiscuous mode [ 262.870562][ T7819] device team_slave_1 left promiscuous mode [ 263.057540][ T7774] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 263.076485][ T7822] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1162'. [ 263.390470][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 263.435566][ T7841] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1168'. [ 265.679349][ T7874] loop0: detected capacity change from 0 to 512 [ 265.689544][ T7874] EXT4-fs: Ignoring removed mblk_io_submit option [ 265.709296][ T7874] EXT4-fs: Ignoring removed nobh option [ 265.880906][ T7874] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.1179: corrupted in-inode xattr [ 266.002099][ T7874] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1179: couldn't read orphan inode 15 (err -117) [ 266.063534][ T7874] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 266.628354][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 267.999365][ T7863] netlink: 'syz.4.1173': attribute type 1 has an invalid length. [ 268.035556][ T7868] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1176'. [ 268.059780][ T7877] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1180'. [ 269.440165][ T7932] netlink: 'syz.5.1194': attribute type 1 has an invalid length. [ 269.546978][ T7932] 8021q: adding VLAN 0 to HW filter on device bond2 [ 269.581630][ T7935] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1196'. [ 269.738695][ T7943] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1197'. [ 270.114747][ T7923] loop4: detected capacity change from 0 to 512 [ 270.163105][ T7923] EXT4-fs: Ignoring removed mblk_io_submit option [ 270.184300][ T7923] EXT4-fs: Ignoring removed nobh option [ 270.444308][ T7923] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.1191: corrupted in-inode xattr [ 270.559614][ T7923] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1191: couldn't read orphan inode 15 (err -117) [ 270.656384][ T7923] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 271.591370][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 273.568641][ T7994] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1208'. [ 274.517407][ T8019] loop0: detected capacity change from 0 to 512 [ 274.555188][ T8019] EXT4-fs: Ignoring removed mblk_io_submit option [ 274.620108][ T8019] EXT4-fs: Ignoring removed nobh option [ 274.741165][ T8019] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.1217: corrupted in-inode xattr [ 274.771140][ T8019] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1217: couldn't read orphan inode 15 (err -117) [ 274.840276][ T8019] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 275.221983][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 276.785432][ T8057] device pim6reg1 entered promiscuous mode [ 277.114715][ T8078] netlink: 'syz.6.1231': attribute type 1 has an invalid length. [ 277.251290][ T8078] 8021q: adding VLAN 0 to HW filter on device bond1 [ 277.652013][ T8092] Driver unsupported XDP return value 0 on prog (id 324) dev N/A, expect packet loss! [ 278.560183][ T27] kauditd_printk_skb: 26 callbacks suppressed [ 278.560199][ T27] audit: type=1326 audit(1731637462.782:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.5.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0617e719 code=0x7ffc0000 [ 278.914306][ T27] audit: type=1326 audit(1731637462.782:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.5.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f5f0617e719 code=0x7ffc0000 [ 278.950322][ T27] audit: type=1326 audit(1731637462.782:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.5.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0617e719 code=0x7ffc0000 [ 279.618145][ T8083] loop0: detected capacity change from 0 to 512 [ 279.645664][ T8083] EXT4-fs: Ignoring removed mblk_io_submit option [ 279.664512][ T27] audit: type=1326 audit(1731637462.782:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.5.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f5f0617e719 code=0x7ffc0000 [ 279.703919][ T8083] EXT4-fs: Ignoring removed nobh option [ 279.724104][ T27] audit: type=1326 audit(1731637462.782:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.5.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0617e719 code=0x7ffc0000 [ 279.805477][ T27] audit: type=1326 audit(1731637462.782:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.5.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f5f0617e719 code=0x7ffc0000 [ 279.829987][ T27] audit: type=1326 audit(1731637462.782:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.5.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0617e719 code=0x7ffc0000 [ 279.854690][ T27] audit: type=1326 audit(1731637462.782:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.5.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0617e719 code=0x7ffc0000 [ 279.877676][ T27] audit: type=1326 audit(1731637462.792:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.5.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5f0617e719 code=0x7ffc0000 [ 279.888848][ T8083] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.1232: corrupted in-inode xattr [ 279.913668][ T27] audit: type=1326 audit(1731637462.792:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.5.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0617e719 code=0x7ffc0000 [ 279.967259][ T8083] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1232: couldn't read orphan inode 15 (err -117) [ 279.981475][ T8083] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 279.989087][ T8136] device syzkaller0 entered promiscuous mode [ 280.652707][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 281.937704][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 284.637872][ T8193] loop6: detected capacity change from 0 to 512 [ 284.751042][ T8193] EXT4-fs: Ignoring removed mblk_io_submit option [ 284.782632][ T8193] EXT4-fs: Ignoring removed nobh option [ 284.906711][ T8193] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2186: inode #15: comm syz.6.1266: corrupted in-inode xattr [ 284.919575][ T8193] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1266: couldn't read orphan inode 15 (err -117) [ 284.953620][ T8193] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 284.994443][ T27] kauditd_printk_skb: 53 callbacks suppressed [ 284.994459][ T27] audit: type=1326 audit(1731637469.222:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.0.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483f77e719 code=0x7ffc0000 [ 285.206431][ T27] audit: type=1326 audit(1731637469.252:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.0.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483f77e719 code=0x7ffc0000 [ 285.248538][ T27] audit: type=1326 audit(1731637469.252:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.0.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f483f77e719 code=0x7ffc0000 [ 286.021091][ T27] audit: type=1326 audit(1731637469.252:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.0.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483f77e719 code=0x7ffc0000 [ 286.123422][ T27] audit: type=1326 audit(1731637469.252:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.0.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483f77e719 code=0x7ffc0000 [ 286.160216][ T27] audit: type=1326 audit(1731637469.252:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.0.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f483f77e719 code=0x7ffc0000 [ 286.223938][ T27] audit: type=1326 audit(1731637469.252:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.0.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483f77e719 code=0x7ffc0000 [ 286.277371][ T27] audit: type=1326 audit(1731637469.252:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.0.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483f77e719 code=0x7ffc0000 [ 286.315375][ T27] audit: type=1326 audit(1731637469.252:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.0.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f483f77e719 code=0x7ffc0000 [ 286.350419][ T27] audit: type=1326 audit(1731637469.252:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.0.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483f77e719 code=0x7ffc0000 [ 286.427494][ T7100] EXT4-fs (loop6): unmounting filesystem. [ 288.293216][ T8234] device syzkaller0 entered promiscuous mode [ 290.376415][ T8252] netlink: 'syz.5.1280': attribute type 1 has an invalid length. [ 290.441979][ T8285] device pim6reg1 entered promiscuous mode [ 290.600444][ T8290] device veth1_macvtap left promiscuous mode [ 290.609791][ T8293] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1291'. [ 290.622321][ T8290] device macsec0 entered promiscuous mode [ 290.630253][ T8293] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1291'. [ 291.084589][ T8319] netlink: 'syz.1.1300': attribute type 1 has an invalid length. [ 291.150640][ T8319] 8021q: adding VLAN 0 to HW filter on device bond2 [ 291.767539][ T8358] [ 291.770156][ T8358] ============================= [ 291.775360][ T8358] WARNING: suspicious RCU usage [ 291.780270][ T8358] 6.1.117-syzkaller #0 Not tainted [ 291.785441][ T8358] ----------------------------- [ 291.790310][ T8358] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 291.798879][ T8358] [ 291.798879][ T8358] other info that might help us debug this: [ 291.798879][ T8358] [ 291.809183][ T8358] [ 291.809183][ T8358] rcu_scheduler_active = 2, debug_locks = 1 [ 291.817313][ T8358] 1 lock held by syz.1.1313/8358: [ 291.822393][ T8358] #0: ffffffff8d32b800 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 291.832720][ T8358] [ 291.832720][ T8358] stack backtrace: [ 291.838682][ T8358] CPU: 1 PID: 8358 Comm: syz.1.1313 Not tainted 6.1.117-syzkaller #0 [ 291.846775][ T8358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 291.856862][ T8358] Call Trace: [ 291.860163][ T8358] [ 291.863122][ T8358] dump_stack_lvl+0x1e3/0x2cb [ 291.867837][ T8358] ? nf_tcp_handle_invalid+0x642/0x642 [ 291.873327][ T8358] ? panic+0x764/0x764 [ 291.877449][ T8358] lockdep_rcu_suspicious+0x21c/0x330 [ 291.882870][ T8358] get_callchain_entry+0x2ac/0x3c0 [ 291.888018][ T8358] get_perf_callchain+0xe6/0x810 [ 291.893019][ T8358] ? put_callchain_entry+0xb0/0xb0 [ 291.898179][ T8358] ? __lock_acquire+0x125b/0x1f80 [ 291.903265][ T8358] __bpf_get_stack+0x378/0x570 [ 291.908087][ T8358] ? stack_map_get_build_id_offset+0x9c0/0x9c0 [ 291.914301][ T8358] ? __cant_sleep+0x270/0x270 [ 291.919017][ T8358] bpf_get_stack_raw_tp+0x1b2/0x220 [ 291.924256][ T8358] bpf_prog_2ae546726a474a42+0x3d/0x41 [ 291.929767][ T8358] bpf_prog_run_pin_on_cpu+0xa2/0x130 [ 291.935158][ T8358] bpf_prog_test_run_syscall+0x312/0x4d0 [ 291.940804][ T8358] ? sock_gen_cookie+0x60/0x60 [ 291.945587][ T8358] ? sock_gen_cookie+0x60/0x60 [ 291.950361][ T8358] bpf_prog_test_run+0x32f/0x3a0 [ 291.955320][ T8358] __sys_bpf+0x3eb/0x6c0 [ 291.959578][ T8358] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 291.964976][ T8358] ? print_irqtrace_events+0x210/0x210 [ 291.970450][ T8358] ? print_irqtrace_events+0x210/0x210 [ 291.975927][ T8358] ? syscall_enter_from_user_mode+0x2e/0x230 [ 291.981938][ T8358] ? lockdep_hardirqs_on+0x94/0x130 [ 291.987176][ T8358] __x64_sys_bpf+0x78/0x90 [ 291.991604][ T8358] do_syscall_64+0x3b/0xb0 [ 291.996025][ T8358] ? clear_bhb_loop+0x45/0xa0 [ 292.000708][ T8358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 292.006616][ T8358] RIP: 0033:0x7fac2d37e719 [ 292.011035][ T8358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.030655][ T8358] RSP: 002b:00007fac2e0ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 292.039081][ T8358] RAX: ffffffffffffffda RBX: 00007fac2d535f80 RCX: 00007fac2d37e719 [ 292.047086][ T8358] RDX: 000000000000000c RSI: 00000000200004c0 RDI: 000000000000000a [ 292.055065][ T8358] RBP: 00007fac2d3f175e R08: 0000000000000000 R09: 0000000000000000 [ 292.063041][ T8358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.071449][ T8358] R13: 0000000000000000 R14: 00007fac2d535f80 R15: 00007ffee4f8fb88 [ 292.079440][ T8358] [ 292.093031][ T8361] netlink: 'syz.5.1315': attribute type 1 has an invalid length. [ 292.160589][ T8361] 8021q: adding VLAN 0 to HW filter on device bond3