last executing test programs: 1.994869312s ago: executing program 0 (id=140): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 1.994721297s ago: executing program 0 (id=141): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) 1.994534137s ago: executing program 0 (id=142): r0 = getpid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000001c0)) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) r2 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x4, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0xe091}}) io_uring_enter(r2, 0x2def, 0x9566, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 1.99413893s ago: executing program 0 (id=143): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000"], 0x50) socket$kcm(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) 1.956765559s ago: executing program 0 (id=145): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x3, 0x4) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c, 0x0}}], 0x1, 0x40000) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0x104}], 0x1, 0x2002, 0x0) 1.881260833s ago: executing program 0 (id=147): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e3dc, [{{0x9, 0x2, 0xffffffffffffff0e}}]}}, 0x0) 1.285226936s ago: executing program 3 (id=177): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x16a) fallocate(r2, 0x20, 0x0, 0x8000) 1.257325472s ago: executing program 3 (id=181): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x5, &(0x7f0000000140)=0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}]) 1.208730434s ago: executing program 2 (id=185): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x5c, r2, 0x1, 0x0, 0x25dfdbfe, {}, [{{0x8, 0x1, r1}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc004}, 0x0) 1.179503809s ago: executing program 2 (id=187): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8f) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) sysinfo(&(0x7f0000000440)=""/231) 1.097328913s ago: executing program 2 (id=188): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f00000011c0)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) 1.096148355s ago: executing program 3 (id=191): setresuid(0xee00, 0xee00, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}}, 0x20000010) 1.093048867s ago: executing program 2 (id=192): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gretap0\x00', 0x0}) sendto$packet(r2, &(0x7f00000000c0)="05", 0x1, 0x240458d1, &(0x7f0000000200)={0x11, 0x8100, r3, 0x1, 0x85, 0x6, @broadcast}, 0x14) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}, 0x7f}], 0x2, 0x10022, 0x0) 1.028968767s ago: executing program 3 (id=195): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000006800010000000000fddbdf250a0000000000000006000700050000002400088020000100000000000000000000000000000000000000000000000100000000000800", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x2004000}, 0x0) 1.027712435s ago: executing program 3 (id=198): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000b00000000cff0f274b9aa762afad9c7a66d281571e98c9e94df8df08973a3f6e40e04f22cf1f3c64207e8d8de7f83983cc8fbb557b75cada4223b611b7f4efb61728edf120a0782cd1dfda141770a447626668479d1773771d5b12e59f3a306e1817ad2d5d2dba2a083562a1eb4664e6625aa41bdf72c4556165778b56ea00053583113d8747e2dfddbff747a070000000000000088a107f3b46d1cb6e3b2677bf7a71a0c"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000580), &(0x7f00000005c0)=r7}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[], 0x0) ppoll(&(0x7f0000000d40)=[{r8, 0x8000}], 0x20000000000000e0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r10 = syz_io_uring_setup(0x14f5, &(0x7f0000000400)={0x0, 0xd144, 0x0, 0xffffffff, 0x289}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_enter(r10, 0x3516, 0xddd6, 0x4, 0x0, 0x3ec0) 768.104265ms ago: executing program 3 (id=207): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) pwritev(r0, 0x0, 0x0, 0x40d2ee47, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=ANY=[@ANYBLOB="50c395f88f17e8ff25bd7000fd00000000", @ANYRES32=0x0, @ANYBLOB="320a050023080000280012800b00010069703667726500001800028014000700ff0000000000000000000000000000010800040005000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) io_uring_setup(0x1b7b, &(0x7f0000000280)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80, 0x138) read(r3, &(0x7f00000013c0)=""/4100, 0x1004) 684.689267ms ago: executing program 1 (id=210): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000ac0)=ANY=[@ANYBLOB="2c0000002e00010000000000fcdbdf2508000000", @ANYRES32, @ANYRESDEC=r1], 0x2c}], 0x1}, 0x0) 601.357547ms ago: executing program 1 (id=211): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x2000400) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) 601.123968ms ago: executing program 1 (id=212): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000010000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 249.060473ms ago: executing program 4 (id=219): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x8, 0xffffffff}]}, 0x10) 238.532506ms ago: executing program 4 (id=220): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000070000000060a010400000000000000000100000008000b400000000048000480440001800b000100657874686472000034000280080001400000000c080003400000000008000440000000220500020007000000080006400000000308000540000000000900010073797a300000000020000000030a010300000000000000000a0000020900030073797a300000000044010000080a01080000000000000000010000073a00074032e97608c07b8f34d704cc507d07a8d4c429672a9b6841e516ce194f03354b3c46a930469ce36ee8391a02352a70d543c633dc17a9d300007900074012119f33dbd27dbba871f33b8206fc0a59dac6df96baf86f3deffa20b8a2b13fa2fbc917a33ad4b9dc903553ff1e7533cd9d1e3f6a3248b10a63552977fab38d9ad7409cbd223b094a0bb6f0884c8839890d122f9b9963668c97749b2304852a8d461ccc39dc307f41ac41688a4f2d64a916dc532d00000008000a40000000000900010073797a30000000000900020073797a31"], 0x248}}, 0x0) 202.966525ms ago: executing program 4 (id=221): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) listen(r0, 0x3) 141.357064ms ago: executing program 1 (id=222): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0xfff5, 0xe, 0x0, 0x0) 141.089106ms ago: executing program 2 (id=223): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) 140.838377ms ago: executing program 4 (id=224): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000100)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x23d, &(0x7f0000000a40)="$eJzs3cFq1EAcBvB/220be7Fn8RDw4qmobxBkBTEgrOSgJwPVSytCeome9jF8Bh/Jx+ipt4hN6NZUPUjadJvfD5Z87MfAzGVnDzO77x9+Ojr8fPKx+fEtkiSNWcQyziL2YzO2orXRPTfP805ctgwAYN0sFmU29hwY0MbVt6oqK7cjYvdKU3y/mUkBAAAAAAAAAAAwNOf/AWB6nP+/+6oqK/e672+/c/4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGM9Z09xv/vEae34AwPDs/wAwPfZ/AJge+z8ATM+bt+9eZXk+X6RpEnG6rIu6aJ9t/+JlPn+SnttfjTqt62K7y/n8adun/X6vG//sj/1OPH7U9r+656/zXr8bh9e9eAAAAAAAAAAAAAAAAAAAALglDtILvfv9W21/8Le+TZd+H6B3f38WD2Y3tgwAAAAAAAAAAAAAAAAAAABYaydfvh6Vx8cfKkG4CPfiP0YlcTsmLwwSxv5kAgAAAAAAAAAAAAAAAACA6Vld+h17JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwntX//19fGHuNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDT8DAAA//8GmZGk") fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 131.09575ms ago: executing program 2 (id=225): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0x4, 0xe}, {0xfff1}}}, 0x24}}, 0x74000800) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000140)=0x10) 128.409694ms ago: executing program 1 (id=226): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000200)={[{@barrier}, {@norecovery}, {@mblk_io_submit}, {@dioread_nolock}, {@i_version}, {@data_ordered}]}, 0x6, 0x615, &(0x7f0000000c00)="$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") mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x2390024, 0x0) 801.122µs ago: executing program 4 (id=227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) 485.613µs ago: executing program 4 (id=228): syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x28, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="02070900040000002dbd7000ffdbdf2502000b"], 0x20}}, 0x4040014) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[], 0x254}}, 0x0) 0s ago: executing program 1 (id=229): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000046, &(0x7f0000000240), 0x11, 0x565, &(0x7f0000000440)="$eJzs3U9rHGUYAPBnNtn+16ZQiopIoAcrtZsm8U8FD/VYtFjQe12SbSjZdEt2U5pYsD3YixcpgogF8a53j8UvoF+ioIUiJejBS2R2Z9K02W226bZJnd8PprxvZnafeXbmefvOzi4bQGGNpv+UIl6OiK+TiP0RkWTrhiNbOdrZbvnelal0SWJl5ZO/kvZ2aT9/rvxxe7POSxHx65cRR0vr4zYXl2ar9XptPuuPteYujjUXl46dn6vO1GZqFyYmJ0+8PTnx3rvvDCzXN878893Ht06d+Orw8rc/3zlwI4mTsS9btzaPJ3B1bWc0RrPXpBwnH9pwfADBtpNkq3eATRnK6rwc6RiwP4ayqgf+/76IiBWgoBL1DwWVzwPya/sBXQc/N+5+0LkAWp//cOe9kdjVvjbas5w8cGWUXu+ODCB+GuOXP2/eSJcY3PsQABu6ei0ijg8Prx//kmz827zjfWzzcAzjHzw7t9L5z5vd5j+l1flPdJn/7O1Su5uxcf2X7gwgTE/p/O/9rvPf1ZtWI0NZ74X2nK+cnDtfr6Vj24sRcSTKO9N+537Ojq4xTizfXukVf+38L13S+PlcMNuPO8M7H3zMdLVVfdK8c3evRbzSdf6brB7/pMvxT1+PM33GOFS7+VqvdRvn/3St/Bjxetfjf/+OVvLo+5Nj7fNhLD8r1vv7+qHfesXf6vzT47/n0fmPJGvv1zYfP8YPu/6t9Vr3QP7R//m/I/m03c4r7nK11Zofj9iRfLT+7xP3H5v38+3T/I8cfvT41+383x0Rn/WZ//WDP73aV/5bdPynH+v4P37j9oeff98rfn/j31vt1pHsL/2Mf53g5azXewc3+7oBAAAAAADAdlSKiH2RlCqr7VKpUul8vuNg7CnVG83W0XONhQvT0f6u7EiUS/md7v1rPg8xnn0eNu9PPNSfjIgDEfHN0O52vzLVqE9vdfIAAAAAAAAAAAAAAAAAAACwTezt8f3/1B9DW713wFPnJ7+huDas/0H80hOwLfn/H4pL/UNxqX8oLvUPxaX+objUPxSX+ofiUv8AAAAAAAAAAAAAAAAAAAAAAAAAAAAwUGdOn06XleV7V6bS/vSlxYXZxqVj07XmbGVuYaoy1Zi/WJlpNGbqtcpUY26j56s3GhfHJ2Lh8lir1myNNReXzs41Fi60zp6fq87UztbKzyQrAAAAAAAAAAAAAAAAAAAAeL40F5dmq/V6bf75bJz6vZPGdtmfAjaGn2nQUmyDlAvR2OqRCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADu+y8AAP//j7QxOw==") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) acct(&(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00') r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) unshare(0x20060400) r9 = syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x30, 0x10, 0x49920d862a92143b, 0x100000, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) tgkill(r9, 0x0, 0x2f) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f00000003c0)=0x16, 0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x4080, 0x0) fcntl$addseals(r2, 0x409, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.120' (ED25519) to the list of known hosts. [ 31.389508][ T6541] cgroup: Unknown subsys name 'net' [ 31.470780][ T6541] cgroup: Unknown subsys name 'cpuset' [ 31.472538][ T6541] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.618977][ T6541] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 33.983118][ T6553] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 33.986614][ T6553] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 33.988946][ T6553] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 34.012363][ T6562] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 34.012715][ T6562] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 34.013202][ T6562] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 34.013655][ T6562] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 34.014156][ T6562] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 34.014402][ T6562] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 34.015004][ T6562] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 34.015255][ T6562] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 34.015727][ T6562] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 34.015925][ T6562] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 34.016434][ T6562] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 34.016685][ T6562] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 34.017000][ T6562] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 34.017155][ T6562] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 34.017722][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 34.017972][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 34.021614][ T6565] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 34.024316][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 34.038805][ T6558] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 34.040614][ T6558] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 34.049707][ T6558] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 34.056477][ T6558] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 34.196718][ T6561] chnl_net:caif_netlink_parms(): no params data found [ 34.209590][ T6552] chnl_net:caif_netlink_parms(): no params data found [ 34.219565][ T6559] chnl_net:caif_netlink_parms(): no params data found [ 34.226679][ T6555] chnl_net:caif_netlink_parms(): no params data found [ 34.287508][ T6561] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.287753][ T6561] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.287826][ T6561] bridge_slave_0: entered allmulticast mode [ 34.288336][ T6561] bridge_slave_0: entered promiscuous mode [ 34.298021][ T6552] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.298072][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.298213][ T6552] bridge_slave_0: entered allmulticast mode [ 34.302003][ T6552] bridge_slave_0: entered promiscuous mode [ 34.303906][ T6552] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.305114][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.306341][ T6552] bridge_slave_1: entered allmulticast mode [ 34.307698][ T6552] bridge_slave_1: entered promiscuous mode [ 34.309058][ T6561] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.309080][ T6561] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.309137][ T6561] bridge_slave_1: entered allmulticast mode [ 34.309597][ T6561] bridge_slave_1: entered promiscuous mode [ 34.313975][ T6551] chnl_net:caif_netlink_parms(): no params data found [ 34.320063][ T6559] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.320098][ T6559] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.320153][ T6559] bridge_slave_0: entered allmulticast mode [ 34.320617][ T6559] bridge_slave_0: entered promiscuous mode [ 34.332835][ T6559] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.332881][ T6559] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.332957][ T6559] bridge_slave_1: entered allmulticast mode [ 34.333399][ T6559] bridge_slave_1: entered promiscuous mode [ 34.345661][ T6561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.346464][ T6552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.347347][ T6552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.361969][ T6559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.362811][ T6559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.365738][ T6555] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.365842][ T6555] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.365938][ T6555] bridge_slave_0: entered allmulticast mode [ 34.366344][ T6555] bridge_slave_0: entered promiscuous mode [ 34.366939][ T6555] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.366957][ T6555] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.366998][ T6555] bridge_slave_1: entered allmulticast mode [ 34.367384][ T6555] bridge_slave_1: entered promiscuous mode [ 34.375959][ T6561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.396811][ T6561] team0: Port device team_slave_0 added [ 34.399714][ T6552] team0: Port device team_slave_0 added [ 34.400439][ T6559] team0: Port device team_slave_0 added [ 34.401024][ T6552] team0: Port device team_slave_1 added [ 34.404938][ T6555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.406200][ T6555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.407156][ T6561] team0: Port device team_slave_1 added [ 34.414879][ T6559] team0: Port device team_slave_1 added [ 34.443910][ T6555] team0: Port device team_slave_0 added [ 34.444367][ T6561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.444375][ T6561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.444389][ T6561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.445592][ T6561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.445605][ T6561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.445619][ T6561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.445885][ T6551] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.445952][ T6551] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.446007][ T6551] bridge_slave_0: entered allmulticast mode [ 34.446453][ T6551] bridge_slave_0: entered promiscuous mode [ 34.447328][ T6551] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.447352][ T6551] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.447409][ T6551] bridge_slave_1: entered allmulticast mode [ 34.447841][ T6551] bridge_slave_1: entered promiscuous mode [ 34.449709][ T6559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.449718][ T6559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.449727][ T6559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.450236][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.450243][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.450262][ T6552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.451336][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.451348][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.451362][ T6552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.452171][ T6555] team0: Port device team_slave_1 added [ 34.470830][ T6559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.470839][ T6559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.470851][ T6559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.497853][ T6561] hsr_slave_0: entered promiscuous mode [ 34.498177][ T6561] hsr_slave_1: entered promiscuous mode [ 34.504665][ T6559] hsr_slave_0: entered promiscuous mode [ 34.504974][ T6559] hsr_slave_1: entered promiscuous mode [ 34.505180][ T6559] debugfs: 'hsr0' already exists in 'hsr' [ 34.505210][ T6559] Cannot create hsr debugfs directory [ 34.522156][ T6551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.528179][ T6552] hsr_slave_0: entered promiscuous mode [ 34.529244][ T6552] hsr_slave_1: entered promiscuous mode [ 34.529713][ T6552] debugfs: 'hsr0' already exists in 'hsr' [ 34.529722][ T6552] Cannot create hsr debugfs directory [ 34.530047][ T6555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.530055][ T6555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.530069][ T6555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.530626][ T6555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.530634][ T6555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.530645][ T6555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.535481][ T6551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.557532][ T6551] team0: Port device team_slave_0 added [ 34.569958][ T6551] team0: Port device team_slave_1 added [ 34.592295][ T6555] hsr_slave_0: entered promiscuous mode [ 34.593720][ T6555] hsr_slave_1: entered promiscuous mode [ 34.594873][ T6555] debugfs: 'hsr0' already exists in 'hsr' [ 34.595822][ T6555] Cannot create hsr debugfs directory [ 34.602108][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.603317][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.607463][ T6551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.609972][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.609991][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.610017][ T6551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.659372][ T6551] hsr_slave_0: entered promiscuous mode [ 34.659653][ T6551] hsr_slave_1: entered promiscuous mode [ 34.659826][ T6551] debugfs: 'hsr0' already exists in 'hsr' [ 34.659835][ T6551] Cannot create hsr debugfs directory [ 34.721119][ T6559] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.732252][ T6559] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.734373][ T6559] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.744505][ T6559] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.762695][ T6559] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.762734][ T6559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.762896][ T6559] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.762925][ T6559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.769118][ T6552] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.771337][ T6552] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.773734][ T6552] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.779511][ T6552] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.796907][ T6552] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.796949][ T6552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.797014][ T6552] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.797038][ T6552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.804698][ T6561] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.809324][ T6561] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.811506][ T6561] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.822055][ T6561] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.839180][ T6555] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.841423][ T6555] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.847547][ T6555] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.855861][ T6555] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.870742][ T6561] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.870784][ T6561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.870853][ T6561] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.870891][ T6561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.872897][ T6559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.874669][ T6551] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.876243][ T6551] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.880893][ T6552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.884378][ T6551] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.886600][ T6551] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.891468][ T2018] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.892767][ T2018] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.894079][ T2018] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.895351][ T2018] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.896619][ T2018] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.897885][ T2018] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.909175][ T6552] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.916055][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.916096][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.916544][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.916559][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.929416][ T6559] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.937834][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.937873][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.938160][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.938174][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.962278][ T6552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.972814][ T6551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.978049][ T6551] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.993705][ T6561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.997663][ T2018] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.997699][ T2018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.009750][ T6551] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.011504][ T6551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.014643][ T2018] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.014688][ T2018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.023044][ T6555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.033629][ T6561] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.043123][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.043161][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.046593][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.046641][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.054109][ T6555] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.071274][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.071316][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.074032][ T6559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.083524][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.083563][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.093857][ T6552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.118223][ T6552] veth0_vlan: entered promiscuous mode [ 35.137642][ T6555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.144951][ T6561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.157338][ T6561] veth0_vlan: entered promiscuous mode [ 35.161209][ T6551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.165881][ T6559] veth0_vlan: entered promiscuous mode [ 35.168120][ T6559] veth1_vlan: entered promiscuous mode [ 35.170848][ T6552] veth1_vlan: entered promiscuous mode [ 35.185223][ T6561] veth1_vlan: entered promiscuous mode [ 35.217287][ T6552] veth0_macvtap: entered promiscuous mode [ 35.219321][ T6552] veth1_macvtap: entered promiscuous mode [ 35.223162][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.224680][ T6561] veth0_macvtap: entered promiscuous mode [ 35.226667][ T6561] veth1_macvtap: entered promiscuous mode [ 35.230812][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.235276][ T6559] veth0_macvtap: entered promiscuous mode [ 35.237758][ T2158] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.237944][ T2158] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.237959][ T2158] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.237972][ T2158] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.246968][ T6561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.249546][ T6555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.253621][ T6559] veth1_macvtap: entered promiscuous mode [ 35.257000][ T6561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.260540][ T2127] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.260679][ T2127] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.260731][ T2127] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.260750][ T2127] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.270829][ T6559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.291046][ T6559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.293854][ T2058] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.293907][ T2058] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.293930][ T2058] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.293945][ T2058] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.314062][ T2127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.316059][ T2127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.328027][ T6555] veth0_vlan: entered promiscuous mode [ 35.331438][ T6551] veth0_vlan: entered promiscuous mode [ 35.332965][ T6551] veth1_vlan: entered promiscuous mode [ 35.335238][ T6555] veth1_vlan: entered promiscuous mode [ 35.356060][ T2127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.356088][ T2127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.359989][ T2058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.360016][ T2058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.377233][ T6551] veth0_macvtap: entered promiscuous mode [ 35.379663][ T6551] veth1_macvtap: entered promiscuous mode [ 35.384212][ T6555] veth0_macvtap: entered promiscuous mode [ 35.396730][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.397168][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.405330][ T6552] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.407019][ T6555] veth1_macvtap: entered promiscuous mode [ 35.411817][ T6555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.414351][ T6555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.420189][ T42] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.420698][ T42] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.420720][ T42] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.420739][ T42] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.426011][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.426977][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.442092][ T2058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.442118][ T2058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.459789][ T42] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.460366][ T42] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.460435][ T42] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.460449][ T42] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.491254][ T6669] IPv6: NLM_F_CREATE should be specified when creating new route [ 35.492688][ T2058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.492698][ T2058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.499775][ T6671] Zero length message leads to an empty skb [ 35.510864][ T6671] geneve2: entered promiscuous mode [ 35.531081][ T2058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.531109][ T2058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.560933][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.560963][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.576369][ T2158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.576397][ T2158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.590743][ T2058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.590772][ T2058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.675161][ T6686] netlink: 'syz.2.12': attribute type 13 has an invalid length. [ 35.740780][ T6686] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.741103][ T6686] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.807280][ T6706] loop3: detected capacity change from 0 to 8192 [ 35.860336][ T6543] loop3: p1 p2 < > p3 p4 < p5 > [ 35.860360][ T6543] loop3: partition table partially beyond EOD, truncated [ 35.861036][ T6543] loop3: p1 size 100663296 extends beyond EOD, truncated [ 35.862652][ T6543] loop3: p2 start 591104 is beyond EOD, truncated [ 35.862670][ T6543] loop3: p3 start 33572980 is beyond EOD, truncated [ 35.863185][ T6543] loop3: p5 size 100663296 extends beyond EOD, truncated [ 35.871619][ T6706] loop3: p1 p2 < > p3 p4 < p5 > [ 35.871644][ T6706] loop3: partition table partially beyond EOD, truncated [ 35.871731][ T6706] loop3: p1 size 100663296 extends beyond EOD, truncated [ 35.875038][ T6706] loop3: p2 start 591104 is beyond EOD, truncated [ 35.875068][ T6706] loop3: p3 start 33572980 is beyond EOD, truncated [ 35.877433][ T6706] loop3: p5 size 100663296 extends beyond EOD, truncated [ 35.924316][ T6545] udevd[6545]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 35.926304][ T6709] udevd[6709]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 35.930662][ T6543] udevd[6543]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 35.944123][ T6543] udevd[6543]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 35.944997][ T6709] udevd[6709]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 35.947211][ T6545] udevd[6545]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 35.965831][ T6686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.970069][ T6686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.088765][ T6558] Bluetooth: hci3: command tx timeout [ 36.088920][ T6558] Bluetooth: hci2: command tx timeout [ 36.088990][ T6558] Bluetooth: hci1: command tx timeout [ 36.089054][ T6558] Bluetooth: hci4: command tx timeout [ 36.089107][ T6558] Bluetooth: hci0: command tx timeout [ 36.290777][ T6699] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17'. [ 36.298763][ T2158] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.298816][ T2158] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.298836][ T2158] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.298851][ T2158] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.362830][ T6715] netlink: 412 bytes leftover after parsing attributes in process `syz.2.24'. [ 36.630752][ T31] audit: type=1326 audit(36.600:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6743 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f5b9e8 code=0x7ffc0000 [ 36.640716][ T31] audit: type=1326 audit(36.620:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6743 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f5b9e8 code=0x7ffc0000 [ 36.640768][ T31] audit: type=1326 audit(36.620:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6743 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa9f5b9e8 code=0x7ffc0000 [ 36.640814][ T31] audit: type=1326 audit(36.620:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6743 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f5b9e8 code=0x7ffc0000 [ 36.640840][ T31] audit: type=1326 audit(36.620:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6743 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f5b9e8 code=0x7ffc0000 [ 36.640860][ T31] audit: type=1326 audit(36.620:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6743 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=287 compat=0 ip=0xffffa9f5b9e8 code=0x7ffc0000 [ 36.640879][ T31] audit: type=1326 audit(36.620:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6743 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f5b9e8 code=0x7ffc0000 [ 36.734771][ T2018] failed while handling packet from 1:16384 [ 36.741412][ T6761] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 36.754973][ T6763] loop2: detected capacity change from 0 to 512 [ 36.764395][ T6763] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.778721][ T6763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.790629][ T6770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.49'. [ 36.817193][ T6770] loop1: detected capacity change from 0 to 1024 [ 36.817554][ T6770] ======================================================= [ 36.817554][ T6770] WARNING: The mand mount option has been deprecated and [ 36.817554][ T6770] and is ignored by this kernel. Remove the mand [ 36.817554][ T6770] option from the mount to silence this warning. [ 36.817554][ T6770] ======================================================= [ 36.817577][ T6770] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.818700][ T6772] dummy0: entered promiscuous mode [ 36.818743][ T6772] macsec1: entered promiscuous mode [ 36.818809][ T6772] macsec1: entered allmulticast mode [ 36.818815][ T6772] dummy0: entered allmulticast mode [ 36.830767][ T6772] dummy0: left allmulticast mode [ 36.830884][ T6772] dummy0: left promiscuous mode [ 36.835404][ T6770] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.852255][ T6561] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.897398][ T6785] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.002661][ T31] audit: type=1326 audit(36.980:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6796 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83f5b9e8 code=0x7ffc0000 [ 37.002709][ T31] audit: type=1326 audit(36.980:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6796 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83f5b9e8 code=0x7ffc0000 [ 37.018716][ T31] audit: type=1326 audit(36.980:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6796 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff83f5b9e8 code=0x7ffc0000 [ 37.104014][ T6799] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 37.253348][ T6800] mmap: syz.3.57 (6800) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.272592][ T6800] loop3: detected capacity change from 0 to 512 [ 37.276697][ T6802] loop2: detected capacity change from 0 to 1024 [ 37.279075][ T6802] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.279112][ T6802] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 37.279402][ T6802] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 37.279418][ T6802] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 37.281514][ T6802] JBD2: no valid journal superblock found [ 37.281530][ T6802] EXT4-fs (loop2): Could not load journal inode [ 37.283878][ T6800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.434434][ T6555] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.678739][ T6817] hub 9-0:1.0: USB hub found [ 37.688049][ T6817] hub 9-0:1.0: 8 ports detected [ 37.915457][ T6843] openvswitch: netlink: Message has 8 unknown bytes. [ 37.917122][ T6842] netlink: 68 bytes leftover after parsing attributes in process `syz.3.73'. [ 37.983280][ T6848] netlink: 48 bytes leftover after parsing attributes in process `syz.3.75'. [ 38.108617][ T6852] syz.4.71 uses obsolete (PF_INET,SOCK_PACKET) [ 38.121142][ T9] IPVS: starting estimator thread 0... [ 38.165932][ T6857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.79'. [ 38.169196][ T6558] Bluetooth: hci1: command tx timeout [ 38.169228][ T6558] Bluetooth: hci2: command tx timeout [ 38.169254][ T6558] Bluetooth: hci3: command tx timeout [ 38.171142][ T6553] Bluetooth: hci4: command tx timeout [ 38.208358][ T6855] IPVS: using max 69 ests per chain, 165600 per kthread [ 38.229185][ T6857] team0: Port device team_slave_1 removed [ 38.293303][ T6863] loop1: detected capacity change from 0 to 512 [ 38.515278][ T6868] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 38.517122][ T6868] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 38.535517][ T6870] team0: Device gtp0 is of different type [ 38.594683][ T6878] loop2: detected capacity change from 0 to 164 [ 39.058222][ T2158] Bluetooth: hci5: Frame reassembly failed (-84) [ 39.766549][ T6922] 9pnet_fd: p9_fd_create_tcp (6922): problem connecting socket to 127.0.0.1 [ 39.915889][ T6950] loop3: detected capacity change from 0 to 1024 [ 39.916208][ T6950] EXT4-fs: inline encryption not supported [ 39.936566][ T6950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.003682][ T6555] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.258403][ T6553] Bluetooth: hci4: command tx timeout [ 40.258697][ T6553] Bluetooth: hci3: command tx timeout [ 40.258730][ T6553] Bluetooth: hci2: command tx timeout [ 40.258748][ T6553] Bluetooth: hci1: command tx timeout [ 40.347014][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.127'. [ 40.349275][ T6989] lo speed is unknown, defaulting to 1000 [ 40.349299][ T6989] lo speed is unknown, defaulting to 1000 [ 40.349834][ T6989] lo speed is unknown, defaulting to 1000 [ 40.350846][ T6989] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 40.352111][ T6989] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 40.358520][ T6989] lo speed is unknown, defaulting to 1000 [ 40.358921][ T6989] lo speed is unknown, defaulting to 1000 [ 40.362028][ T6989] lo speed is unknown, defaulting to 1000 [ 40.362371][ T6989] lo speed is unknown, defaulting to 1000 [ 40.362950][ T6989] lo speed is unknown, defaulting to 1000 [ 40.363243][ T6989] lo speed is unknown, defaulting to 1000 [ 40.430820][ T6991] Cannot find del_set index 0 as target [ 40.506647][ T6997] loop0: detected capacity change from 0 to 512 [ 40.507521][ T6997] EXT4-fs: Ignoring removed i_version option [ 40.507531][ T6997] EXT4-fs: Ignoring removed bh option [ 40.534289][ T6997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.574394][ T7003] tipc: Enabling of bearer <|th:s> rejected, media not registered [ 40.634699][ T6559] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.677568][ T7013] netlink: 36 bytes leftover after parsing attributes in process `syz.0.139'. [ 40.751040][ T7022] bond1: entered promiscuous mode [ 40.751071][ T7022] bond1: entered allmulticast mode [ 40.751226][ T7022] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.774866][ T7022] bond1 (unregistering): Released all slaves [ 41.071258][ T7049] rdma_op 000000009c907562 conn xmit_rdma 0000000000000000 [ 41.095072][ T7054] loop3: detected capacity change from 0 to 1024 [ 41.101186][ T7054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.131736][ T6555] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.138360][ T6558] Bluetooth: hci5: command 0x1003 tx timeout [ 41.138577][ T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 41.140395][ T53] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 41.181432][ T7063] loop4: detected capacity change from 0 to 512 [ 41.189827][ T7063] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 41.192383][ T7063] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.160: invalid block [ 41.196775][ T7063] EXT4-fs (loop4): Remounting filesystem read-only [ 41.199043][ T7063] EXT4-fs (loop4): 1 truncate cleaned up [ 41.200482][ T7063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.255848][ T7070] loop2: detected capacity change from 0 to 1024 [ 41.257150][ T7073] netlink: 32 bytes leftover after parsing attributes in process `syz.3.165'. [ 41.259213][ T7070] EXT4-fs: inline encryption not supported [ 41.294365][ T6551] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.300800][ T26] usb 1-1: too many configurations: 220, using maximum allowed: 8 [ 41.303386][ T26] usb 1-1: config index 0 descriptor too short (expected 65294, got 72) [ 41.304403][ T7070] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.305491][ T26] usb 1-1: config index 1 descriptor too short (expected 65294, got 72) [ 41.310173][ T26] usb 1-1: config index 2 descriptor too short (expected 65294, got 72) [ 41.311428][ T26] usb 1-1: config index 3 descriptor too short (expected 65294, got 72) [ 41.313268][ T26] usb 1-1: config index 4 descriptor too short (expected 65294, got 72) [ 41.314228][ T26] usb 1-1: config index 5 descriptor too short (expected 65294, got 72) [ 41.315141][ T26] usb 1-1: config index 6 descriptor too short (expected 65294, got 72) [ 41.316120][ T26] usb 1-1: config index 7 descriptor too short (expected 65294, got 72) [ 41.322195][ T7070] pimreg: entered allmulticast mode [ 41.328066][ T26] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 41.328098][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.328110][ T26] usb 1-1: Product: syz [ 41.328117][ T26] usb 1-1: Manufacturer: syz [ 41.328123][ T26] usb 1-1: SerialNumber: syz [ 41.336057][ T7070] pimreg: left allmulticast mode [ 41.337547][ T26] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 41.344508][ T7079] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 41.353193][ T24] usb 1-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -2 [ 41.353223][ T24] usb 1-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw [ 41.469084][ T6561] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.502734][ T7100] loop3: detected capacity change from 0 to 1024 [ 41.503076][ T7100] EXT4-fs: Ignoring removed nobh option [ 41.504307][ T7099] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 41.508396][ T7100] EXT4-fs: Ignoring removed bh option [ 41.523229][ T7100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.572565][ T6555] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.641208][ T31] kauditd_printk_skb: 148 callbacks suppressed [ 41.642304][ T31] audit: type=1326 audit(41.620:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7122 comm="syz.2.187" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87b5b9e8 code=0x7ffc0000 [ 41.645911][ T31] audit: type=1326 audit(41.620:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7122 comm="syz.2.187" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87b5b9e8 code=0x7ffc0000 [ 41.650339][ T31] audit: type=1326 audit(41.630:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7122 comm="syz.2.187" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff87b5b9e8 code=0x7ffc0000 [ 41.655829][ T31] audit: type=1326 audit(41.630:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7122 comm="syz.2.187" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87b5b9e8 code=0x7ffc0000 [ 41.655873][ T31] audit: type=1326 audit(41.630:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7122 comm="syz.2.187" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87b5b9e8 code=0x7ffc0000 [ 41.655893][ T31] audit: type=1326 audit(41.630:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7122 comm="syz.2.187" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff87b5b9e8 code=0x7ffc0000 [ 41.655911][ T31] audit: type=1326 audit(41.630:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7122 comm="syz.2.187" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87b5b9e8 code=0x7ffc0000 [ 41.655927][ T31] audit: type=1326 audit(41.630:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7122 comm="syz.2.187" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87b5b9e8 code=0x7ffc0000 [ 41.655942][ T31] audit: type=1326 audit(41.630:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7122 comm="syz.2.187" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff87b5b9e8 code=0x7ffc0000 [ 41.655957][ T31] audit: type=1326 audit(41.630:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7122 comm="syz.2.187" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87b5b9e8 code=0x7ffc0000 [ 41.809540][ T7145] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.816198][ T7147] loop1: detected capacity change from 0 to 512 [ 41.822317][ T7147] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 41.851187][ T7147] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 41.851912][ T7147] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.200: bg 0: block 248: padding at end of block bitmap is not set [ 41.852280][ T7147] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.200: Failed to acquire dquot type 1 [ 41.853576][ T7147] EXT4-fs (loop1): 1 truncate cleaned up [ 41.856208][ T7147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 41.866526][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.200'. [ 41.897416][ T6552] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 41.913243][ T7158] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.965733][ T7158] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.015500][ T7158] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.038206][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.208'. [ 42.038235][ T7168] tc_dump_action: action bad kind [ 42.071128][ T7170] loop1: detected capacity change from 0 to 512 [ 42.081689][ T7158] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.113494][ T7170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.127768][ T6552] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.155221][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.210'. [ 42.219427][ T2018] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.219508][ T2018] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.223723][ T42] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.223772][ T42] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.292256][ T7185] loop4: detected capacity change from 0 to 1024 [ 42.293420][ T7185] EXT4-fs: inline encryption not supported [ 42.293870][ T7185] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 42.310585][ T7185] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.215: lblock 2 mapped to illegal pblock 2 (length 1) [ 42.311552][ T7185] EXT4-fs (loop4): Remounting filesystem read-only [ 42.311786][ T7185] EXT4-fs (loop4): 1 orphan inode deleted [ 42.312243][ T7185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.328433][ T53] Bluetooth: hci1: command tx timeout [ 42.328816][ T53] Bluetooth: hci2: command tx timeout [ 42.328845][ T53] Bluetooth: hci3: command tx timeout [ 42.328867][ T53] Bluetooth: hci4: command tx timeout [ 42.334368][ T7185] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 42.342882][ T6551] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.406230][ T7188] loop4: detected capacity change from 0 to 2048 [ 42.439652][ T6543] GPT:first_usable_lbas don't match. [ 42.439672][ T6543] GPT:34 != 290 [ 42.439691][ T6543] GPT: Use GNU Parted to correct GPT errors. [ 42.439730][ T6543] loop4: p1 p2 p3 [ 42.447105][ T7188] GPT:first_usable_lbas don't match. [ 42.447124][ T7188] GPT:34 != 290 [ 42.447141][ T7188] GPT: Use GNU Parted to correct GPT errors. [ 42.447186][ T7188] loop4: p1 p2 p3 [ 42.464332][ T6193] GPT:first_usable_lbas don't match. [ 42.464353][ T6193] GPT:34 != 290 [ 42.464370][ T6193] GPT: Use GNU Parted to correct GPT errors. [ 42.464405][ T6193] loop4: p1 p2 p3 [ 42.483253][ T6543] udevd[6543]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 42.486186][ T6781] udevd[6781]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 42.491476][ T6709] udevd[6709]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 42.502582][ T6543] udevd[6543]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 42.504422][ T6709] udevd[6709]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 42.507906][ T6781] udevd[6781]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 42.527135][ T6709] udevd[6709]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 42.529409][ T6543] udevd[6543]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 42.532942][ T6781] udevd[6781]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 42.586046][ T7196] netlink: 88 bytes leftover after parsing attributes in process `syz.4.220'. [ 42.695550][ T7206] loop1: detected capacity change from 0 to 1024 [ 42.695581][ T7204] loop4: detected capacity change from 0 to 512 [ 42.705003][ T7206] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.705036][ T7206] EXT4-fs: Ignoring removed i_version option [ 42.713700][ T7206] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 42.731622][ T7206] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.226: bad orphan inode 11 [ 42.732390][ T7206] ext4_test_bit(bit=10, block=4) = 1 [ 42.732408][ T7206] is_bad_inode(inode)=0 [ 42.732418][ T7206] NEXT_ORPHAN(inode)=3254779904 [ 42.732423][ T7206] max_ino=32 [ 42.732427][ T7206] i_nlink=0 [ 42.734464][ T7206] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.226: lblock 1 mapped to illegal pblock 1 (length 1) [ 42.734661][ T7206] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.226: Failed to acquire dquot type 0 [ 42.734953][ T7206] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.226: Invalid inode bitmap blk 0 in block_group 0 [ 42.735486][ T7206] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 42.736199][ T7206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.749535][ T2158] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 42.753396][ T2158] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0 [ 42.798965][ T7206] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 42.805715][ T6552] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.842486][ T7217] loop1: detected capacity change from 0 to 1024 [ 42.877825][ T7217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.964809][ T7208] ------------[ cut here ]------------ [ 42.964821][ T7208] WARNING: CPU: 1 PID: 7208 at mm/page_alloc.c:5154 __alloc_frozen_pages_noprof+0xd0/0x318 [ 42.966993][ T7208] Modules linked in: [ 42.967568][ T7208] CPU: 1 UID: 0 PID: 7208 Comm: syz.2.225 Not tainted syzkaller #0 PREEMPT [ 42.968853][ T7208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 42.970332][ T7208] pstate: 23400005 (nzCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 42.971485][ T7208] pc : __alloc_frozen_pages_noprof+0xd0/0x318 [ 42.972368][ T7208] lr : __alloc_frozen_pages_noprof+0xac/0x318 [ 42.973261][ T7208] sp : ffff8000a0967760 [ 42.973871][ T7208] x29: ffff8000a0967820 x28: dfff800000000000 x27: 0000000000000003 [ 42.975271][ T7208] x26: 1ffff00012e7a250 x25: dfff800000000000 x24: ffff8000a0967780 [ 42.976655][ T7208] x23: ffff70001412cef0 x22: 0000000000000000 x21: 0000000000040cc0 [ 42.978035][ T7208] x20: 0000000000000000 x19: 000000000000000e x18: 0000000000000000 [ 42.979373][ T7208] x17: 0000000000000000 x16: ffff80008ad6b188 x15: 0000000000000005 [ 42.980599][ T7208] x14: 1ffff0001412cef4 x13: 0000000000000000 x12: 0000000000000000 [ 42.981814][ T7208] x11: ffff70001412cef9 x10: dfff800000000000 x9 : 0000000000000001 [ 42.983012][ T7208] x8 : ffff800092c29000 x7 : 0000000000000000 x6 : ffff8000a0967ae8 [ 42.984153][ T7208] x5 : ffff8000a0967ae8 x4 : 0000000000000000 x3 : 0000000000000020 [ 42.985327][ T7208] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 [ 42.986485][ T7208] Call trace: [ 42.986970][ T7208] __alloc_frozen_pages_noprof+0xd0/0x318 (P) [ 42.987852][ T7208] alloc_pages_mpol+0x1e4/0x460 [ 42.988531][ T7208] alloc_frozen_pages_noprof+0xe0/0x210 [ 42.989358][ T7208] ___kmalloc_large_node+0xac/0x154 [ 42.990056][ T7208] __kmalloc_large_node_noprof+0x2c/0x8c [ 42.990863][ T7208] __kmalloc_noprof+0x4bc/0x728 [ 42.991632][ T7208] raw_ioctl+0x1320/0x3368 [ 42.992293][ T7208] __arm64_sys_ioctl+0x14c/0x1c4 [ 42.992998][ T7208] invoke_syscall+0x98/0x254 [ 42.993651][ T7208] el0_svc_common+0xe8/0x23c [ 42.994245][ T7208] do_el0_svc+0x48/0x58 [ 42.994856][ T7208] el0_svc+0x5c/0x254 [ 42.995430][ T7208] el0t_64_sync_handler+0x84/0x12c [ 42.996160][ T7208] el0t_64_sync+0x198/0x19c [ 42.996819][ T7208] irq event stamp: 1482 [ 42.997445][ T7208] hardirqs last enabled at (1481): [] kasan_quarantine_put+0x1a0/0x1c8 [ 42.998963][ T7208] hardirqs last disabled at (1482): [] el1_brk64+0x20/0x54 [ 43.000213][ T7208] softirqs last enabled at (1460): [] local_bh_enable+0x10/0x34 [ 43.001575][ T7208] softirqs last disabled at (1458): [] local_bh_disable+0x10/0x34 [ 43.002912][ T7208] ---[ end trace 0000000000000000 ]--- [ 43.156531][ T6552] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.905579][ T6608] usb 1-1: USB disconnect, device number 2