last executing test programs: 10.990230546s ago: executing program 4 (id=227): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000d80340001800a000100696e6e6572000000240002"], 0x8c}}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x3c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f7000280050001000000000030"], 0x58}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000aa63d9ae5000380080001"], 0x28}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[], 0x24d8}], 0x1}, 0x0) 10.241028515s ago: executing program 4 (id=231): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 9.726297831s ago: executing program 4 (id=235): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000001900)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private1}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0xa0}}, 0x0) 9.257544382s ago: executing program 4 (id=237): r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000080)=0x8000001, 0x4) 3.863782673s ago: executing program 2 (id=248): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) sendfile(r2, r2, 0x0, 0x80000000) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x42, 0x0, 0xfffffffffffffffd, 0x3f}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) waitid$P_PIDFD(0x3, r4, 0x0, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) creat(&(0x7f0000000080)='./bus\x00', 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000280)=0x8, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x0, 0x8000}]}, 0x10) shutdown(r6, 0x0) dup2(r5, 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 3.793135807s ago: executing program 1 (id=250): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)={0x20, r5, 0x1, 0x0, 0x0, {0x1b, 0x0, 0x6}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 3.628167492s ago: executing program 3 (id=251): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) 3.36046965s ago: executing program 1 (id=253): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) timer_create(0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 3.084103823s ago: executing program 4 (id=254): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000340)=[{0xf76, 0x1, 0xa, 0x100}]}) 3.083878356s ago: executing program 3 (id=255): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x50}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000882b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34c8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.777454874s ago: executing program 4 (id=256): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000181100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f00000009c0)={0x40, 0x6e}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000a40)={0x0, 0x8, 0x1}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x5, 0x2}}, 0x0, &(0x7f0000000bc0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000c00)={0x40, 0x9, 0x1, 0x3}, 0x0, &(0x7f0000000c80)={0x40, 0xf, 0x2, 0xfff2}, &(0x7f0000000cc0)={0x40, 0x13, 0x6, @remote}, 0x0, &(0x7f0000000d40)={0x40, 0x19, 0x2, "b610"}, 0x0, &(0x7f0000000dc0)={0x40, 0x1c, 0x1, 0x9}, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1, 0xc}}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, 0x0}, 0x20) ptrace(0x10, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ptrace$getenv(0x4204, 0x0, 0x201, &(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002"], 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2.740995271s ago: executing program 3 (id=257): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000001900)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private1}}, @sadb_x_sec_ctx={0x1}]}, 0x80}}, 0x0) 2.593275408s ago: executing program 3 (id=258): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) write$binfmt_script(r2, 0x0, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x10002, &(0x7f0000000600)={[{@nogrpid}, {@discard}, {@dioread_nolock}, {@dioread_nolock}, {@bsdgroups}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@noblock_validity}]}, 0x0, 0x60e, &(0x7f0000001080)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = dup2(r3, r4) ioctl$BLKTRACESETUP(r6, 0x1275, 0x0) 2.24019904s ago: executing program 1 (id=260): migrate_pages(0x0, 0x6, 0x0, &(0x7f0000001340)=0x10000000000001) 2.228983472s ago: executing program 3 (id=261): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x1, {0x1, 0x0, 0x1}, 0x1}, 0x18) sendmmsg(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001800)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}}], 0x2, 0x0) 2.16743591s ago: executing program 0 (id=262): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000c0000000a0000000000001102000000ffffffff000000000000000400000800000000000000000000002e"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000080000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000005"], 0x48) 2.108113246s ago: executing program 2 (id=263): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) fchmodat(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x9) 2.053719216s ago: executing program 3 (id=264): r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000080)=0x8000001, 0x4) 1.98772278s ago: executing program 0 (id=265): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r3, 0x30b}, 0x14}}, 0x0) 1.836143223s ago: executing program 1 (id=266): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 1.829382944s ago: executing program 0 (id=267): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 1.766826681s ago: executing program 2 (id=268): r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x800, &(0x7f0000000800)={[{@dax_always}, {@acl}], [{@smackfsdef={'smackfsdef', 0x3d, '\xd4\xab\xe2\xc1WiZ\x1c\xcb\x92|\xd8H\xda\xa7\xc5c\x9b\xe1\xd4\x1d\xa3\a\x00\x81\x18\x9b'}}]}, 0xfd, 0x453, &(0x7f0000001040)="$eJzs3E1PXNUbAPDnXqDNn/YvVfENW0VbW7QKQhU1MU3YuSC60IXbCVBs5EULJrYhBhIXbk3sB9C4tR/BaBNfNroy3arRhZoQU1g0sYsxd94Y6AztKPQa5vdL7vScO2d6zr1Pnzt3Tk9uAG2rP3tJIg5GxA8R0VOubm7QX/5j/erSRLYlUSy++mdSard2dWmi2rT6uQPZSxoxkEak7yfxYIN+F85feLMwMzN1rlIfWpx9a2jh/IWnzs4Wpqemp+aGTw2Pjj737PMjw9sNv+9gC8f60vfrv37S+fLcpxfX5q6dHunOxlv9fP1x7JT+6N98Lusc3+nOcnZPXTnpzHEgtKQjIrJwdZXyvyc6YiN4PfHNT7kODthVxcz+pm8vF4E9LIm8RwDko/pFn/3+rW4N7gP+Ku7WDQi5Wh0r/wBcq8ztrNfi3xlpufD28a++3PT7fif1R8Tr468cybbYpXkYAAAAgHb2xVhEPNlo/i+Ne+vaZeX7IuL+iHggIvoiSut6DkfEkYh4KCIerq4nasHW9lvmf5r/zyQ7YnUs4sW6tV3rdfGvONRRqf0/q0RXcubszNTTEXFHRAxE1/6svt0qrdk3Ct81e29j/u9yd3nP0kR1LrAyjj86t/wrmCwsFv7xAbPJ6kpEX2ej+Ce1lUBJRDwSEY/eyl/4dWlF3XTvpeu1XS98cPeVZs3r53+zLet/c/zZTcWPI040zP+VWptk+/WZQ6XrwVD1qnCjby+Oftasf/HPV5b/3Q3jX1u5eiipX6+70Hofl3t//rHZe9eLxeL28W98/d+XvFYa4L7KvncLi4vnhiP2JeM37h9pfcx7VfV8VM9XFv+Boxvx32iZxl2VUnZCj0bEsYh4rLJ2+UTpuz/i8Yh4IiJObtPn8vQvTe/j5H++svhPtpT/rRd+X/nwWLP+bx7/LP+fKQ1moLLH/d/N3WqA8h4nAAAAAAAAADsjLT0DL0kHa+U0HRwsP8OvN7rTmfmFxZNn5t+Zmyw/K+9QdKXVlV49detBh0vljfrIlvqpiLgzIj7q+F+pPjgxPzOZ98FDmzvQJP8zv3XkPTpg13leK7Qv+Q/tS/5D+5L/0L7kP7Qv+Q/tS/5D+6rk/3Le4wBuv63f/+9dGT997fPDl3IaDnAbuf+HtvRvnuunoKCwVwt5X5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/hv+DgAA///vYdKh") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0x40044103, 0x0) 1.632068534s ago: executing program 1 (id=269): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file1\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x1, 0x2022, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x16}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x810508, &(0x7f0000000f40)={[{@sysvgroups}, {@grpjquota}, {@noinit_itable}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@euid_eq}, {@pcr={'pcr', 0x3d, 0x20000000015}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@context={'context', 0x3d, 'staff_u'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@dont_appraise}, {@euid_gt}]}, 0x0, 0x51c, &(0x7f0000001000)="$eJzs3c9vI1cdAPDvjOPdJJuSFHEolWgrWpStYJ1sQ9uIQykSoqdKQLkvIXGiKE4cxU7bRBVNxR+AhBAgceqpF/4DJNQDfwBCQoI74qcQdOHAARhke7zNOnYcUjsTks9HmvV7b8bz/T5v8jIzb+QJ4Np6KiJejohSRDwbEbN5e5ovr7QqR53t7n/w1mprSSLLXvtrEkne1rvPW523xGREfP2ViG8lJ+M2Dg63Vmq16l5eX2hu7y40Dg7vbG6vbFQ3qjtLS3dfWH5x+fnlxfN0a7K3odWvl778hx98972vvPSzz73x23t/vv3tVloz+fp+/RiFTtfLDyU0ERF74whWgFL+Wh665c/HngsAAMO1jvE/HhGfbh//z0apfXQKAAAAXCXZF2fiX0lEBgAAAFxZafse2CSt5PcCzESaViqde3g/EdNprd5ofna9vr+z1rlXdi7K6fpmrbqY31M7F+WkVb/bLn9Yf66nvhQRj0bE92en2vXKar22VvTFDwAAALgmbvWc//9jtnP+DwAAAFwxc0UnAAAAAIzdQ+f/7xaXBwAAADA+5v8BAADgSvvqq6+2lqzz/Ov3Yu31g/2t+ut31qqNrcr2/mpltb63W9mo1zfa39m3PWx/tXp99/Oxs//mQrPaaC40Dg7vbdf3d5r3Nk8+kxsAAAC4GI8++f5vkog4+sJUe2m5UXRSwIVIhm1w/Krd78ebC3CxSkUnABRmougEgMKUi04AKNyw6wADb975xehzAQAAxmP+kw/m/6e6bd35/+HXBobOHgKXWHquKYATQwUA8H/E/D9cX2V3AMK197HehiTi6Fj1o8//Z1l28zyZAQAAozLTXpK00pkLjJlI00ol4pH2YwHKyfpmrbqYnx/8erZ8s1VP2+9MzP4DAAAAAAAAAAAAAAAAAAAAAAAAwBllWRIZAAAAcKVFpH9K8if5z88+M9N7feBG8s/ZyB/0/caPX/vhmyvN5t7dVvvfHrQ3f5S3P9d5hgAAAABQrO55evc8HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG6f4Hb612lxMrb4wv7l++FBFz/eJPxGT7dTLKETH99yQmjr0viYjSCOIfvRMRj/WLn7TSirk8i37xpwqMn0bErRHEh+vs/db48/LDv39Je00aT7Vf+//+tcp/HEH8weNf+mD8Kw0Yfx45Y4zHj06J/07E4xOt+DdPjD/d+MmA+E+fMf43v3F4OGhd9m5nHO03/h2PtdDc3l1oHBze2dxe2ahuVHeWIn1h+cXl55cXF9Y3a9X8374xvvepn/7ntP5PD4g/1+n/k4P6/8wZ+//vX013i+V+8W8/3f/v72Od+Cc+/zT/2/eZvHw/y96ez8vJUcR8T4wnfvLLJ07r/9qA/g/7/799xv4/+7Xv/O6MmwIAF6BxcLi1UqtV9/oVuodgp23zvxayLHs7y7JsZDsccyHLzvBB9RSmTv/ESnEJ+nXewuRlSv5GXIo0CvrJLH3E/cTkadsUOSoBAADj8OFB/8l1ybE5GAAAAAAAAAAAAAAAAAAAAGB8LuKLynpjnvJ11AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhflvAAAA///EldO5") 1.631825861s ago: executing program 0 (id=270): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410884, &(0x7f0000000300)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc}, {@nomblk_io_submit}, {@user_xattr}, {@nodioread_nolock}, {@jqfmt_vfsv0}, {@discard}]}, 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") creat(&(0x7f0000003840)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf", [0xffffffffffffffff]}) write$cgroup_type(r0, &(0x7f0000000000), 0x180600) 615.56035ms ago: executing program 2 (id=271): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) write$binfmt_script(r2, 0x0, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x10002, &(0x7f0000000600)={[{@nogrpid}, {@discard}, {@dioread_nolock}, {@dioread_nolock}, {@bsdgroups}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@noblock_validity}]}, 0x0, 0x60e, &(0x7f0000001080)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = dup2(r3, r4) ioctl$BLKTRACESETUP(r6, 0x1275, 0x0) 472.732569ms ago: executing program 0 (id=272): r0 = syz_io_uring_setup(0xe42, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r0, 0x44e9, 0x0, 0x0, 0x0, 0x0) 254.588437ms ago: executing program 1 (id=273): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 173.528364ms ago: executing program 2 (id=274): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) bind$can_j1939(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001800)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}}], 0x2, 0x0) 173.252µs ago: executing program 2 (id=275): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r0}, 0x9) sched_setscheduler(0x0, 0x1, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) 0s ago: executing program 0 (id=276): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x34) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000edffffff0000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.224' (ED25519) to the list of known hosts. [ 51.417459][ T5216] cgroup: Unknown subsys name 'net' [ 51.524683][ T5216] cgroup: Unknown subsys name 'cpuset' [ 51.532604][ T5216] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.750767][ T5216] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.085580][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.090056][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.098888][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.104072][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.108307][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.114727][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.122356][ T5243] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.129566][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.136417][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.143661][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.148993][ T5245] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.156649][ T5236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.164241][ T5245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.170251][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.176768][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.192466][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.200098][ T5245] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.208162][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.216234][ T5245] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.224117][ T5245] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.231257][ T5245] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.244161][ T5246] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.251221][ T4622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.258342][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.265767][ T5246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.271509][ T5245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.281231][ T5245] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.289888][ T5246] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.290120][ T5245] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.304603][ T5246] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.508682][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 55.669239][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.677593][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.685000][ T5226] bridge_slave_0: entered allmulticast mode [ 55.691590][ T5226] bridge_slave_0: entered promiscuous mode [ 55.726038][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.733416][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.740530][ T5226] bridge_slave_1: entered allmulticast mode [ 55.747351][ T5226] bridge_slave_1: entered promiscuous mode [ 55.811414][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 55.841654][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.853924][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.916060][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 55.925336][ T5238] chnl_net:caif_netlink_parms(): no params data found [ 55.957782][ T5226] team0: Port device team_slave_0 added [ 55.964604][ T5242] chnl_net:caif_netlink_parms(): no params data found [ 55.998148][ T5226] team0: Port device team_slave_1 added [ 56.043488][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.050626][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.058127][ T5228] bridge_slave_0: entered allmulticast mode [ 56.065329][ T5228] bridge_slave_0: entered promiscuous mode [ 56.077003][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.084315][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.091515][ T5228] bridge_slave_1: entered allmulticast mode [ 56.098368][ T5228] bridge_slave_1: entered promiscuous mode [ 56.145432][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.152473][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.178794][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.192231][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.199179][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.225195][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.299710][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.314462][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.324563][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.331645][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.339043][ T5229] bridge_slave_0: entered allmulticast mode [ 56.345940][ T5229] bridge_slave_0: entered promiscuous mode [ 56.355946][ T5238] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.363545][ T5238] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.370626][ T5238] bridge_slave_0: entered allmulticast mode [ 56.377767][ T5238] bridge_slave_0: entered promiscuous mode [ 56.407105][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.417222][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.424597][ T5229] bridge_slave_1: entered allmulticast mode [ 56.431108][ T5229] bridge_slave_1: entered promiscuous mode [ 56.438510][ T5238] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.445830][ T5238] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.453535][ T5238] bridge_slave_1: entered allmulticast mode [ 56.460001][ T5238] bridge_slave_1: entered promiscuous mode [ 56.483241][ T5228] team0: Port device team_slave_0 added [ 56.525660][ T5238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.536519][ T5228] team0: Port device team_slave_1 added [ 56.542802][ T5242] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.550074][ T5242] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.557574][ T5242] bridge_slave_0: entered allmulticast mode [ 56.564262][ T5242] bridge_slave_0: entered promiscuous mode [ 56.571319][ T5242] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.578670][ T5242] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.585941][ T5242] bridge_slave_1: entered allmulticast mode [ 56.595731][ T5242] bridge_slave_1: entered promiscuous mode [ 56.604770][ T5226] hsr_slave_0: entered promiscuous mode [ 56.610936][ T5226] hsr_slave_1: entered promiscuous mode [ 56.637073][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.647813][ T5238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.684371][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.724154][ T5242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.750498][ T5238] team0: Port device team_slave_0 added [ 56.756868][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.766841][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.793205][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.809785][ T5242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.828376][ T5229] team0: Port device team_slave_0 added [ 56.837233][ T5238] team0: Port device team_slave_1 added [ 56.843761][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.850708][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.876892][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.900052][ T5229] team0: Port device team_slave_1 added [ 56.928354][ T5242] team0: Port device team_slave_0 added [ 56.943073][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.950022][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.976144][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.988251][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.995372][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.022484][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.044090][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.051022][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.077504][ T5238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.093427][ T5242] team0: Port device team_slave_1 added [ 57.109084][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.116131][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.142291][ T5238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.177208][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.184204][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.210454][ T5242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.223370][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.230316][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.253722][ T5244] Bluetooth: hci0: command tx timeout [ 57.256351][ T5242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.291179][ T5228] hsr_slave_0: entered promiscuous mode [ 57.297598][ T5228] hsr_slave_1: entered promiscuous mode [ 57.304131][ T5228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.311840][ T5228] Cannot create hsr debugfs directory [ 57.332340][ T5244] Bluetooth: hci2: command tx timeout [ 57.334602][ T5234] Bluetooth: hci1: command tx timeout [ 57.338188][ T5246] Bluetooth: hci3: command tx timeout [ 57.352677][ T5238] hsr_slave_0: entered promiscuous mode [ 57.358689][ T5238] hsr_slave_1: entered promiscuous mode [ 57.365749][ T5238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.373416][ T5238] Cannot create hsr debugfs directory [ 57.412259][ T5246] Bluetooth: hci4: command tx timeout [ 57.465606][ T5229] hsr_slave_0: entered promiscuous mode [ 57.471709][ T5229] hsr_slave_1: entered promiscuous mode [ 57.478119][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.486068][ T5229] Cannot create hsr debugfs directory [ 57.496415][ T5242] hsr_slave_0: entered promiscuous mode [ 57.503300][ T5242] hsr_slave_1: entered promiscuous mode [ 57.509197][ T5242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.516873][ T5242] Cannot create hsr debugfs directory [ 57.741160][ T5226] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.772816][ T5226] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.793911][ T5226] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.804972][ T5226] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.871329][ T5228] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.880249][ T5228] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.893878][ T5228] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.907585][ T5228] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.966907][ T5238] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.977707][ T5238] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.995216][ T5238] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.006563][ T5238] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.071775][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.093568][ T5242] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.103930][ T5242] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.143619][ T5242] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.153034][ T5242] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.181479][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.209811][ T2951] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.217082][ T2951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.241100][ T5229] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.250934][ T2991] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.258064][ T2991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.270555][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.286373][ T5229] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.296977][ T5229] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.307599][ T5229] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.377778][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.424912][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.432002][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.451352][ T2991] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.458445][ T2991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.470077][ T5238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.530082][ T5238] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.557964][ T5242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.593509][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.600591][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.669491][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.676587][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.691371][ T5242] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.718836][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.726016][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.745889][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.774653][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.781733][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.821296][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.834628][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.874769][ T5238] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.888387][ T5238] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.911874][ T2991] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.918997][ T2991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.951488][ T2991] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.958618][ T2991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.017002][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.048992][ T5242] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.185994][ T5228] veth0_vlan: entered promiscuous mode [ 59.257314][ T5228] veth1_vlan: entered promiscuous mode [ 59.304130][ T5238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.333837][ T5246] Bluetooth: hci0: command tx timeout [ 59.364098][ T5228] veth0_macvtap: entered promiscuous mode [ 59.390792][ T5226] veth0_vlan: entered promiscuous mode [ 59.412810][ T5246] Bluetooth: hci3: command tx timeout [ 59.418246][ T5246] Bluetooth: hci2: command tx timeout [ 59.424900][ T5244] Bluetooth: hci1: command tx timeout [ 59.448701][ T5228] veth1_macvtap: entered promiscuous mode [ 59.456753][ T5242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.471450][ T5238] veth0_vlan: entered promiscuous mode [ 59.485992][ T5238] veth1_vlan: entered promiscuous mode [ 59.492399][ T5246] Bluetooth: hci4: command tx timeout [ 59.518432][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.536052][ T5226] veth1_vlan: entered promiscuous mode [ 59.550768][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.574423][ T5228] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.583570][ T5228] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.593410][ T5228] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.602642][ T5228] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.616259][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.669390][ T5238] veth0_macvtap: entered promiscuous mode [ 59.694327][ T5242] veth0_vlan: entered promiscuous mode [ 59.700541][ T5238] veth1_macvtap: entered promiscuous mode [ 59.709097][ T5226] veth0_macvtap: entered promiscuous mode [ 59.729711][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.748538][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.759958][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.794695][ T5226] veth1_macvtap: entered promiscuous mode [ 59.825783][ T5242] veth1_vlan: entered promiscuous mode [ 59.840766][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.851758][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.856544][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.862445][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.875247][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.894463][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.908023][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.917970][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.928763][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.939902][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.954118][ T5238] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.962971][ T5238] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.971901][ T5238] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.981338][ T5238] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.015438][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.026119][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.037288][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.047985][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.059525][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.070308][ T5229] veth0_vlan: entered promiscuous mode [ 60.078285][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.092819][ T5226] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.093997][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.101728][ T5226] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.117871][ T5226] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.127177][ T5226] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.150790][ T5242] veth0_macvtap: entered promiscuous mode [ 60.179344][ T5229] veth1_vlan: entered promiscuous mode [ 60.209130][ T5228] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 60.231365][ T5242] veth1_macvtap: entered promiscuous mode [ 60.299172][ T5229] veth0_macvtap: entered promiscuous mode [ 60.363409][ T5229] veth1_macvtap: entered promiscuous mode [ 60.370705][ T2951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.371165][ T29] audit: type=1326 audit(1728276071.607:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6597dff9 code=0x7ffc0000 [ 60.398565][ T2951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.402963][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.410583][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.423998][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.432570][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.449258][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.457552][ T5312] loop0: detected capacity change from 0 to 2048 [ 60.461898][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.476054][ T29] audit: type=1326 audit(1728276071.607:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6597dff9 code=0x7ffc0000 [ 60.476092][ T29] audit: type=1326 audit(1728276071.667:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f2f6597dff9 code=0x7ffc0000 [ 60.505273][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.535346][ T29] audit: type=1326 audit(1728276071.667:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6597dff9 code=0x7ffc0000 [ 60.563170][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.566868][ T29] audit: type=1326 audit(1728276071.667:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6597dff9 code=0x7ffc0000 [ 60.582802][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.607468][ T29] audit: type=1326 audit(1728276071.667:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f6597dff9 code=0x7ffc0000 [ 60.639443][ T29] audit: type=1326 audit(1728276071.667:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6597dff9 code=0x7ffc0000 [ 60.645763][ T5312] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.662973][ T29] audit: type=1326 audit(1728276071.667:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6597dff9 code=0x7ffc0000 [ 60.686720][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.706393][ T29] audit: type=1326 audit(1728276071.667:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f6597dff9 code=0x7ffc0000 [ 60.712964][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.739000][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.751263][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.761383][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.776614][ T29] audit: type=1326 audit(1728276071.667:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6597dff9 code=0x7ffc0000 [ 60.785240][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.812866][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.823858][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.835422][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.862604][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.873662][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.889550][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.901439][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.917171][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.929472][ T5320] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 60.936241][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.951859][ T5320] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 738 with error 28 [ 60.966449][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.969359][ T5242] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.987535][ T5320] EXT4-fs (loop0): This should not happen!! Data will be lost [ 60.987535][ T5320] [ 60.992783][ T5242] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.005974][ T5320] EXT4-fs (loop0): Total free blocks count 0 [ 61.005996][ T5320] EXT4-fs (loop0): Free/Dirty block details [ 61.027051][ T5242] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.030571][ T5320] EXT4-fs (loop0): free_blocks=66060288 [ 61.042309][ T5242] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.053143][ T5320] EXT4-fs (loop0): dirty_blocks=1088 [ 61.058458][ T5320] EXT4-fs (loop0): Block reservation details [ 61.078759][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.082115][ T5320] EXT4-fs (loop0): i_reserved_data_blocks=68 [ 61.108783][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.120690][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.136703][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.146728][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.157356][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.167259][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.177777][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.193107][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.220096][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.240264][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.250059][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.262898][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.275414][ T5229] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.284584][ T5229] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.293500][ T5229] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.302528][ T5229] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.412409][ T5246] Bluetooth: hci0: command tx timeout [ 61.505484][ T5246] Bluetooth: hci2: command tx timeout [ 61.508161][ T1123] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 738 with max blocks 2048 with error 28 [ 61.510901][ T5246] Bluetooth: hci1: command tx timeout [ 61.529148][ T5246] Bluetooth: hci3: command tx timeout [ 61.546008][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.568012][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.584868][ T5244] Bluetooth: hci4: command tx timeout [ 61.714583][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.729251][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.780460][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.844230][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.950542][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.004738][ T5334] loop0: detected capacity change from 0 to 128 [ 62.011064][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.128123][ T5334] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 62.224286][ T5337] loop2: detected capacity change from 0 to 2048 [ 62.242619][ T5337] EXT4-fs: Ignoring removed oldalloc option [ 62.319029][ T5341] syz.4.10[5341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.319123][ T5341] syz.4.10[5341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.342497][ T5341] syz.4.10[5341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.355039][ T5337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.594437][ T5349] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3: bg 0: block 234: padding at end of block bitmap is not set [ 62.640725][ T5349] EXT4-fs (loop2): Remounting filesystem read-only [ 62.731730][ T5354] Illegal XDP return value 4294967274 on prog (id 10) dev N/A, expect packet loss! [ 62.996390][ T5242] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.230446][ T5371] loop3: detected capacity change from 0 to 1024 [ 63.237675][ T5371] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.268309][ T5371] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 63.324712][ T5371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.403311][ T5371] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 63.429865][ T5372] mmap: syz.4.17 (5372) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 63.492299][ T5244] Bluetooth: hci0: command tx timeout [ 63.572983][ T5244] Bluetooth: hci3: command tx timeout [ 63.573659][ T5246] Bluetooth: hci1: command tx timeout [ 63.578394][ T5244] Bluetooth: hci2: command tx timeout [ 63.615960][ T5379] netlink: 32 bytes leftover after parsing attributes in process `syz.1.24'. [ 63.653138][ T5244] Bluetooth: hci4: command tx timeout [ 63.827832][ T5386] 9pnet_fd: Insufficient options for proto=fd [ 64.375397][ T5403] block device autoloading is deprecated and will be removed. [ 64.403210][ T5403] syz.0.29: attempt to access beyond end of device [ 64.403210][ T5403] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 64.486252][ T5376] loop2: detected capacity change from 0 to 32768 [ 64.510265][ T5376] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.22 (5376) [ 64.558158][ T5411] loop1: detected capacity change from 0 to 736 [ 64.569102][ T5376] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 64.592300][ T5376] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 64.606415][ T5376] BTRFS info (device loop2): using free-space-tree [ 64.757777][ T5411] rock: directory entry would overflow storage [ 64.775314][ T5411] rock: sig=0x5850, size=36, remaining=14 [ 64.849698][ T5420] loop0: detected capacity change from 0 to 512 [ 64.870635][ T5420] ext3: Unknown parameter 'rootcontext' [ 65.195746][ T5242] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 65.361512][ T5455] loop1: detected capacity change from 0 to 512 [ 65.372741][ T5455] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 65.450390][ T5455] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.601294][ T5455] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 65.627131][ T5455] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 65.658119][ T5455] EXT4-fs (loop1): 1 truncate cleaned up [ 65.673226][ T5455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.731674][ T5455] netlink: 'syz.1.38': attribute type 1 has an invalid length. [ 65.831638][ T5238] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.844277][ T5470] loop2: detected capacity change from 0 to 512 [ 65.865620][ T5470] ======================================================= [ 65.865620][ T5470] WARNING: The mand mount option has been deprecated and [ 65.865620][ T5470] and is ignored by this kernel. Remove the mand [ 65.865620][ T5470] option from the mount to silence this warning. [ 65.865620][ T5470] ======================================================= [ 66.045442][ T5470] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.40: iget: bad extended attribute block 1 [ 66.088787][ T5470] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.40: couldn't read orphan inode 15 (err -117) [ 66.102212][ T5470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.320408][ T5242] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.367552][ T5487] loop1: detected capacity change from 0 to 512 [ 66.421165][ T5229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.422709][ T5487] ext3: Unknown parameter 'rootcontext' [ 66.517257][ T5497] loop2: detected capacity change from 0 to 512 [ 66.561747][ T5499] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.713755][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 66.713772][ T29] audit: type=1326 audit(1728276077.947:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5501 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6597dff9 code=0x7ffc0000 [ 66.873212][ T29] audit: type=1326 audit(1728276077.947:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5501 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6597dff9 code=0x7ffc0000 [ 66.918563][ T5512] netlink: 52 bytes leftover after parsing attributes in process `syz.2.46'. [ 67.512372][ T29] audit: type=1326 audit(1728276077.947:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5501 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f2f6597dff9 code=0x7ffc0000 [ 67.618145][ T29] audit: type=1326 audit(1728276077.947:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5501 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6597dff9 code=0x7ffc0000 [ 67.714084][ T5522] Zero length message leads to an empty skb [ 67.992493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.159656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 68.364420][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 68.466759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 68.648101][ T5538] loop1: detected capacity change from 0 to 2048 [ 68.804299][ T5537] loop3: detected capacity change from 0 to 512 [ 68.883127][ T5538] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.890096][ T5537] ext3: Unknown parameter 'rootcontext' [ 69.650799][ T5538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.979548][ T5562] loop3: detected capacity change from 0 to 512 [ 70.012860][ T5562] ext2: Unknown parameter 'seclabel' [ 70.130090][ T5538] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.63: bg 0: block 234: padding at end of block bitmap is not set [ 70.224083][ T5538] EXT4-fs (loop1): Remounting filesystem read-only [ 70.983930][ T5568] loop2: detected capacity change from 0 to 736 [ 71.141783][ T5577] block device autoloading is deprecated and will be removed. [ 71.162358][ T5577] syz.0.76: attempt to access beyond end of device [ 71.162358][ T5577] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 71.268535][ T5238] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.352738][ T5587] loop2: detected capacity change from 0 to 512 [ 71.451447][ T5581] loop4: detected capacity change from 0 to 512 [ 71.458817][ T5581] ext3: Unknown parameter 'rootcontext' [ 71.473977][ T5587] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.83: corrupted in-inode xattr: invalid ea_ino [ 71.552427][ T5587] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.83: couldn't read orphan inode 15 (err -117) [ 71.565601][ T5587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.619404][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.628882][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.039877][ T5242] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.614944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.623631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.753380][ T29] audit: type=1326 audit(1728276083.987:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5608 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd997dff9 code=0x7ffc0000 [ 72.887290][ T5615] syz.0.91 uses obsolete (PF_INET,SOCK_PACKET) [ 72.998757][ T29] audit: type=1326 audit(1728276083.987:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5608 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd997dff9 code=0x7ffc0000 [ 73.099320][ T29] audit: type=1326 audit(1728276083.987:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5608 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f2cd997dff9 code=0x7ffc0000 [ 73.189904][ T29] audit: type=1326 audit(1728276084.157:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5614 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6597dff9 code=0x7ffc0000 [ 73.288814][ T29] audit: type=1326 audit(1728276084.157:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5614 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6597dff9 code=0x7ffc0000 [ 73.371172][ T29] audit: type=1326 audit(1728276084.157:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5614 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f6597dff9 code=0x7ffc0000 [ 73.393719][ T29] audit: type=1326 audit(1728276084.167:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5614 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6597dff9 code=0x7ffc0000 [ 73.416100][ T29] audit: type=1326 audit(1728276084.167:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5614 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6597dff9 code=0x7ffc0000 [ 73.441441][ T29] audit: type=1326 audit(1728276084.167:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5614 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f2f6597dff9 code=0x7ffc0000 [ 73.464836][ T29] audit: type=1326 audit(1728276084.167:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5614 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6597dff9 code=0x7ffc0000 [ 73.908341][ T5623] kvm: kvm [5622]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x1 [ 74.008789][ T5632] loop2: detected capacity change from 0 to 512 [ 74.022701][ T5632] ext3: Unknown parameter 'rootcontext' [ 74.153689][ T5652] netlink: 'syz.4.105': attribute type 7 has an invalid length. [ 74.268116][ T5647] loop3: detected capacity change from 0 to 8192 [ 75.188146][ T5669] loop4: detected capacity change from 0 to 512 [ 75.195505][ T5669] EXT4-fs: Ignoring removed orlov option [ 75.202217][ T5669] EXT4-fs: Ignoring removed oldalloc option [ 75.236195][ T5674] 9pnet_fd: Insufficient options for proto=fd [ 75.280452][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 75.305504][ T5669] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.111: Parent and EA inode have the same ino 15 [ 75.334518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 75.429994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 75.498547][ T5669] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.111: Parent and EA inode have the same ino 15 [ 75.868387][ T5669] EXT4-fs (loop4): 1 orphan inode deleted [ 75.875272][ T5669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.903667][ T5669] netlink: 'syz.4.111': attribute type 3 has an invalid length. [ 75.911474][ T5669] netlink: 'syz.4.111': attribute type 3 has an invalid length. [ 75.925023][ T5669] netlink: 16 bytes leftover after parsing attributes in process `syz.4.111'. [ 75.979832][ T5687] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.111: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 76.322935][ T5226] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.941200][ T937] cfg80211: failed to load regulatory.db [ 76.997008][ T5697] 9pnet_fd: Insufficient options for proto=fd [ 77.087377][ T5704] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.190874][ T5708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.123'. [ 77.200283][ T5708] bridge_slave_1: left allmulticast mode [ 77.212212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.252461][ T5708] bridge_slave_1: left promiscuous mode [ 77.488224][ T5708] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.731058][ T5708] bridge_slave_0: left allmulticast mode [ 77.737824][ T5708] bridge_slave_0: left promiscuous mode [ 77.805275][ T5708] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.037634][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.175275][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.509595][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.416972][ T5738] loop0: detected capacity change from 0 to 512 [ 79.471655][ T5738] ext3: Unknown parameter 'rootcontext' [ 79.484566][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.027552][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.038398][ T5234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.057329][ T5234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.069728][ T5234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.081307][ T5234] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.082462][ T5234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.377755][ T5746] tty tty24: ldisc open failed (-12), clearing slot 23 [ 80.381363][ T5753] loop0: detected capacity change from 0 to 512 [ 80.437497][ T11] bridge_slave_1: left allmulticast mode [ 80.437706][ T5753] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 80.459960][ T11] bridge_slave_1: left promiscuous mode [ 80.491437][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.538707][ T5753] block device autoloading is deprecated and will be removed. [ 80.549400][ T5753] syz.0.140: attempt to access beyond end of device [ 80.549400][ T5753] loop75: rw=0, sector=2, nr_sectors = 2 limit=0 [ 80.569229][ T11] bridge_slave_0: left allmulticast mode [ 80.592129][ T11] bridge_slave_0: left promiscuous mode [ 80.598185][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.615757][ T5753] EXT4-fs (loop0): couldn't read superblock of external journal [ 81.237406][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.250462][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.261722][ T11] bond0 (unregistering): Released all slaves [ 81.325454][ T5770] ip6tnl1: entered promiscuous mode [ 81.330686][ T5770] ip6tnl1: entered allmulticast mode [ 81.959303][ T5788] loop4: detected capacity change from 0 to 512 [ 82.112810][ T5788] ext3: Unknown parameter 'rootcontext' [ 82.214343][ T5234] Bluetooth: hci2: command tx timeout [ 82.542224][ T5814] loop0: detected capacity change from 0 to 512 [ 82.549048][ T5814] ext4: Unknown parameter 'smackfsdef' [ 82.698035][ T5819] ip6tnl1: entered promiscuous mode [ 82.704087][ T5819] ip6tnl1: entered allmulticast mode [ 83.664338][ T5827] netlink: 'syz.2.161': attribute type 1 has an invalid length. [ 83.705873][ T11] hsr_slave_0: left promiscuous mode [ 83.713764][ T11] hsr_slave_1: left promiscuous mode [ 83.722651][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.740751][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.757899][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.793857][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.849269][ T11] veth1_macvtap: left promiscuous mode [ 83.865436][ T11] veth0_macvtap: left promiscuous mode [ 83.886501][ T11] veth1_vlan: left promiscuous mode [ 83.891975][ T11] veth0_vlan: left promiscuous mode [ 84.033102][ T5844] loop0: detected capacity change from 0 to 512 [ 84.039909][ T5844] ext4: Unknown parameter 'smackfsdef' [ 84.305484][ T5234] Bluetooth: hci2: command tx timeout [ 85.656822][ T11] team0 (unregistering): Port device team_slave_1 removed [ 85.711091][ T11] team0 (unregistering): Port device team_slave_0 removed [ 86.181825][ T5749] chnl_net:caif_netlink_parms(): no params data found [ 86.385266][ T5234] Bluetooth: hci2: command tx timeout [ 86.454458][ T5874] netlink: 20 bytes leftover after parsing attributes in process `syz.1.177'. [ 86.530424][ T5874] openvswitch: netlink: Flow key attr not present in new flow. [ 86.545556][ T5749] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.556089][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.581160][ T5749] bridge_slave_0: entered allmulticast mode [ 86.607641][ T5749] bridge_slave_0: entered promiscuous mode [ 86.640824][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.656846][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.692752][ T5749] bridge_slave_1: entered allmulticast mode [ 86.731948][ T5749] bridge_slave_1: entered promiscuous mode [ 86.815373][ T5887] loop1: detected capacity change from 0 to 512 [ 86.858178][ T5749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.879016][ T5887] ext4: Unknown parameter 'smackfsdef' [ 86.903333][ T5890] loop4: detected capacity change from 0 to 164 [ 86.904376][ T5749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.085511][ T5890] syz.4.182: attempt to access beyond end of device [ 87.085511][ T5890] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 87.167708][ T5890] syz.4.182: attempt to access beyond end of device [ 87.167708][ T5890] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 87.657264][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 87.657282][ T29] audit: type=1800 audit(1728276098.705:161): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.182" name="file0" dev="loop4" ino=1862 res=0 errno=0 [ 87.709131][ T5749] team0: Port device team_slave_0 added [ 87.771157][ T5749] team0: Port device team_slave_1 added [ 88.052600][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.086926][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.154766][ T5922] loop1: detected capacity change from 0 to 764 [ 88.157413][ T5749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.182383][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.211858][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.248582][ T5749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.511880][ T5234] Bluetooth: hci2: command tx timeout [ 88.543725][ T5749] hsr_slave_0: entered promiscuous mode [ 88.572707][ T5749] hsr_slave_1: entered promiscuous mode [ 88.600934][ T5749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.618778][ T5749] Cannot create hsr debugfs directory [ 88.738081][ T5942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.199'. [ 88.767837][ T5938] loop1: detected capacity change from 0 to 512 [ 88.775372][ T5942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.199'. [ 88.790033][ T5938] ext4: Unknown parameter 'smackfsdef' [ 88.841605][ T5941] bridge0: entered promiscuous mode [ 88.966730][ T5941] vlan2: entered promiscuous mode [ 88.981778][ T5941] bridge0: left promiscuous mode [ 89.707496][ T5946] ptrace attach of "./syz-executor exec"[5238] was attempted by "./syz-executor exec"[5946] [ 90.137789][ T5956] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.189100][ T5960] netlink: 132 bytes leftover after parsing attributes in process `syz.2.204'. [ 90.414060][ T5967] lo speed is unknown, defaulting to 1000 [ 90.427344][ T5967] lo speed is unknown, defaulting to 1000 [ 90.436588][ T5972] ip6tnl1: entered promiscuous mode [ 90.443522][ T5972] ip6tnl1: entered allmulticast mode [ 90.452984][ T5967] lo speed is unknown, defaulting to 1000 [ 90.467060][ T5967] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 90.569472][ T5967] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 90.714140][ T5967] lo speed is unknown, defaulting to 1000 [ 90.754191][ T5978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.209'. [ 90.784523][ T5967] lo speed is unknown, defaulting to 1000 [ 90.799302][ T5977] loop1: detected capacity change from 0 to 1024 [ 90.830812][ T5967] lo speed is unknown, defaulting to 1000 [ 90.849839][ T5978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.209'. [ 90.853709][ T5977] EXT4-fs (loop1): inodes count not valid: 1 vs 32 [ 90.908612][ T5967] lo speed is unknown, defaulting to 1000 [ 90.973394][ T5967] lo speed is unknown, defaulting to 1000 [ 91.096798][ T5749] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.164553][ T5749] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.199571][ T5989] No such timeout policy "syz1" [ 91.206217][ T29] audit: type=1326 audit(1728276102.408:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.1.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0857dff9 code=0x7ffc0000 [ 91.209457][ T5991] loop4: detected capacity change from 0 to 512 [ 91.234214][ T5749] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.270958][ T5749] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.288431][ T5991] ext4: Unknown parameter 'smackfsdef' [ 91.293585][ T29] audit: type=1326 audit(1728276102.408:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.1.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0857dff9 code=0x7ffc0000 [ 91.337601][ T29] audit: type=1326 audit(1728276102.428:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.1.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d0857dff9 code=0x7ffc0000 [ 92.103476][ T29] audit: type=1326 audit(1728276102.428:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.1.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0857dff9 code=0x7ffc0000 [ 92.228534][ T29] audit: type=1326 audit(1728276102.428:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.1.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0857dff9 code=0x7ffc0000 [ 92.336371][ T29] audit: type=1326 audit(1728276102.428:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.1.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d0857dff9 code=0x7ffc0000 [ 92.346249][ T5749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.416733][ T29] audit: type=1326 audit(1728276102.428:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.1.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0857dff9 code=0x7ffc0000 [ 92.464347][ T29] audit: type=1326 audit(1728276102.428:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.1.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0857dff9 code=0x7ffc0000 [ 92.497155][ T29] audit: type=1326 audit(1728276102.428:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.1.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d0857dff9 code=0x7ffc0000 [ 92.666673][ T5749] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.733532][ T2991] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.740625][ T2991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.789376][ T6013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.219'. [ 92.808679][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.815826][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.839807][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 92.839829][ T29] audit: type=1326 audit(1728276104.016:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.0.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6597dff9 code=0x7ffc0000 [ 92.873448][ T6013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.219'. [ 92.888944][ T6023] loop4: detected capacity change from 0 to 512 [ 92.970209][ T29] audit: type=1326 audit(1728276104.016:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.0.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6597dff9 code=0x7ffc0000 [ 92.991330][ T5749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.997185][ T6023] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.221: bg 0: block 393: padding at end of block bitmap is not set [ 93.046786][ T29] audit: type=1326 audit(1728276104.016:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0857dff9 code=0x7ffc0000 [ 93.079009][ T6032] netlink: 256 bytes leftover after parsing attributes in process `syz.0.223'. [ 93.088487][ T29] audit: type=1326 audit(1728276104.016:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0857dff9 code=0x7ffc0000 [ 93.095502][ T6030] loop2: detected capacity change from 0 to 16 [ 93.118295][ T6030] erofs: Unknown parameter '' [ 93.132347][ T29] audit: type=1326 audit(1728276104.026:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d0857dff9 code=0x7ffc0000 [ 93.192244][ T6023] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 93.199529][ T6030] loop2: detected capacity change from 0 to 8192 [ 93.228696][ T6023] EXT4-fs (loop4): 2 truncates cleaned up [ 93.257439][ T6023] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.296577][ T29] audit: type=1326 audit(1728276104.026:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0857dff9 code=0x7ffc0000 [ 93.441182][ T29] audit: type=1326 audit(1728276104.026:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0857dff9 code=0x7ffc0000 [ 93.464515][ T29] audit: type=1326 audit(1728276104.036:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d0857dff9 code=0x7ffc0000 [ 93.502047][ T5226] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.508071][ T29] audit: type=1326 audit(1728276104.036:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0857dff9 code=0x7ffc0000 [ 93.964347][ T29] audit: type=1326 audit(1728276104.036:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0857dff9 code=0x7ffc0000 [ 94.261272][ T5749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.332740][ T5749] veth0_vlan: entered promiscuous mode [ 94.347457][ T5749] veth1_vlan: entered promiscuous mode [ 94.370464][ T5749] veth0_macvtap: entered promiscuous mode [ 94.379672][ T5749] veth1_macvtap: entered promiscuous mode [ 94.394004][ T5749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.404771][ T5749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.414877][ T5749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.425618][ T5749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.435677][ T5749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.446991][ T5749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.457331][ T5749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.468011][ T5749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.482426][ T6063] loop2: detected capacity change from 0 to 512 [ 94.484732][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.574646][ T6060] ip6tnl1: entered promiscuous mode [ 94.579862][ T6060] ip6tnl1: entered allmulticast mode [ 94.599020][ T5749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.614302][ T5749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.653678][ T5749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.704753][ T5749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.728711][ T5749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.762099][ T6063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.785371][ T5749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.824076][ T5749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.840745][ T6063] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.872794][ T6076] loop1: detected capacity change from 0 to 128 [ 94.879312][ T5749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.935836][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.973499][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.005177][ T6076] batadv_slave_0: entered allmulticast mode [ 95.070102][ T5749] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.358739][ T5242] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.434375][ T5749] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.637198][ T5749] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.747322][ T5749] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.276112][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.316660][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.324505][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.380724][ T2951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.409564][ T2951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.457719][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.497514][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.531172][ T25] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 96.559857][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.592932][ T6103] lo speed is unknown, defaulting to 1000 [ 96.630089][ T25] usb 1-1: config 0 descriptor?? [ 96.884699][ T6090] loop0: detected capacity change from 0 to 1024 [ 96.984864][ T6090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.342248][ T5281] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.401464][ T5281] usb 3-1: Using ep0 maxpacket: 16 [ 100.572795][ T5281] usb 3-1: device descriptor read/all, error -71 [ 100.931585][ T6142] loop2: detected capacity change from 0 to 4096 [ 100.965436][ T6150] netlink: 16 bytes leftover after parsing attributes in process `syz.3.251'. [ 101.066242][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 101.075307][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 101.094656][ T5228] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.104790][ T25] usb 1-1: USB disconnect, device number 2 [ 101.223730][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 101.223746][ T29] audit: type=1326 audit(1728276112.352:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.1.253" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d0857dff9 code=0x0 [ 101.378289][ T6142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.836989][ T6176] loop0: detected capacity change from 0 to 512 [ 101.883960][ T6176] ext3: Unknown parameter 'rootcontext' [ 101.905129][ T6177] capability: warning: `syz.2.248' uses 32-bit capabilities (legacy support in use) [ 102.010177][ T6184] loop3: detected capacity change from 0 to 1024 [ 102.150572][ T5281] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 102.361999][ T5281] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.373762][ T5281] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 102.398560][ T5281] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 102.423479][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.446395][ T5242] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.454260][ T5281] usb 5-1: config 0 descriptor?? [ 102.486314][ T5281] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 102.842225][ T6208] loop2: detected capacity change from 0 to 512 [ 102.889724][ T6208] ext4: Unknown parameter 'smackfsdef' [ 103.046725][ T6213] loop0: detected capacity change from 0 to 2048 [ 103.098388][ T6215] ptrace attach of "./syz-executor exec"[5226] was attempted by "./syz-executor exec"[6215] [ 103.120884][ T6213] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.446782][ T6213] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.656335][ T6210] loop1: detected capacity change from 0 to 512 [ 103.760252][ T6210] ext3: Unknown parameter 'rootcontext' [ 103.904432][ T6213] loop0: detected capacity change from 2048 to 64 [ 104.061469][ T6224] loop2: detected capacity change from 0 to 1024 [ 104.213275][ T5228] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.245875][ T6218] kmmpd-loop0: attempt to access beyond end of device [ 104.245875][ T6218] loop0: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 104.274347][ T6218] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 104.523119][ T29] audit: type=1326 audit(1728276115.632:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd997dff9 code=0x7ffc0000 [ 104.581862][ T29] audit: type=1326 audit(1728276115.632:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd997dff9 code=0x7ffc0000 [ 104.624949][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.641456][ T6231] BUG: unable to handle page fault for address: fffffbfffbc00000 [ 104.649183][ T6231] #PF: supervisor read access in kernel mode [ 104.655139][ T6231] #PF: error_code(0x0000) - not-present page [ 104.661088][ T6231] PGD 23ffe4067 P4D 23ffe4067 PUD 23ffe3067 PMD 0 [ 104.667587][ T6231] Oops: Oops: 0000 [#1] PREEMPT SMP KASAN PTI [ 104.673638][ T6231] CPU: 1 UID: 0 PID: 6231 Comm: syz.2.275 Not tainted 6.12.0-rc1-next-20241003-syzkaller #0 [ 104.683680][ T6231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 104.693710][ T6231] RIP: 0010:kasan_check_range+0x82/0x290 [ 104.699334][ T6231] Code: 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd <41> 80 3b 00 0f 85 c9 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00 [ 104.718940][ T6231] RSP: 0018:ffffc900044679f8 EFLAGS: 00010286 [ 104.724984][ T6231] RAX: 0000000000000001 RBX: 1ffffffffbc00000 RCX: ffffffff81cf410f [ 104.732933][ T6231] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffffde000000 [ 104.740882][ T6231] RBP: ffffffffffffffff R08: ffffffffde000003 R09: 1ffffffffbc00000 [ 104.748830][ T6231] R10: dffffc0000000000 R11: fffffbfffbc00000 R12: ffffffffde000000 [ 104.756794][ T6231] R13: 0000000000000004 R14: dffffc0000000001 R15: fffffbfffbc00001 [ 104.764753][ T6231] FS: 00007f2cda7646c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 104.773746][ T6231] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.780307][ T6231] CR2: fffffbfffbc00000 CR3: 0000000044524000 CR4: 00000000003526f0 [ 104.788258][ T6231] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 104.796207][ T6231] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 104.804156][ T6231] Call Trace: [ 104.807415][ T6231] [ 104.810325][ T6231] ? __die_body+0x5f/0xb0 [ 104.814633][ T6231] ? page_fault_oops+0x8e4/0xcc0 [ 104.819549][ T6231] ? is_bpf_text_address+0x26/0x2a0 [ 104.824761][ T6231] ? kernel_text_address+0xa7/0xe0 [ 104.829851][ T6231] ? __pfx_page_fault_oops+0x10/0x10 [ 104.835114][ T6231] ? unwind_get_return_address+0x4d/0x90 [ 104.840741][ T6231] ? __pfx_validate_chain+0x10/0x10 [ 104.845915][ T6231] ? is_prefetch+0x4ed/0x780 [ 104.850486][ T6231] ? __pfx_is_prefetch+0x10/0x10 [ 104.855406][ T6231] ? __asan_memset+0x23/0x50 [ 104.859975][ T6231] ? __bad_area_nosemaphore+0x118/0x770 [ 104.865500][ T6231] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 104.871372][ T6231] ? spurious_kernel_fault+0x119/0x5a0 [ 104.876812][ T6231] ? exc_page_fault+0x5c8/0x8c0 [ 104.881645][ T6231] ? asm_exc_page_fault+0x26/0x30 [ 104.886651][ T6231] ? copy_from_kernel_nofault+0x6f/0x2f0 [ 104.892262][ T6231] ? kasan_check_range+0x82/0x290 [ 104.897267][ T6231] copy_from_kernel_nofault+0x6f/0x2f0 [ 104.902701][ T6231] bpf_probe_read_compat+0x10f/0x180 [ 104.907965][ T6231] ? bpf_trace_run3+0x24c/0x5a0 [ 104.912792][ T6231] bpf_prog_577616742b6817b3+0x46/0x48 [ 104.918236][ T6231] bpf_trace_run3+0x33a/0x5a0 [ 104.922891][ T6231] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 104.928764][ T6231] ? __pfx_bpf_trace_run3+0x10/0x10 [ 104.933939][ T6231] ? __seccomp_filter+0xb38/0x1fe0 [ 104.939025][ T6231] ? __wake_up_common_lock+0x18c/0x1e0 [ 104.944465][ T6231] ? __seccomp_filter+0xb38/0x1fe0 [ 104.949570][ T6231] ? __seccomp_filter+0xb38/0x1fe0 [ 104.954658][ T6231] kmem_cache_free+0x367/0x410 [ 104.959405][ T6231] __seccomp_filter+0xb38/0x1fe0 [ 104.964322][ T6231] ? fput+0x1a8/0x230 [ 104.968285][ T6231] ? __pfx___seccomp_filter+0x10/0x10 [ 104.973630][ T6231] ? bpf_raw_tracepoint_open+0x18b/0x1f0 [ 104.979259][ T6231] ? __sys_bpf+0x3c0/0x810 [ 104.983652][ T6231] ? __pfx___sys_bpf+0x10/0x10 [ 104.988397][ T6231] ? __secure_computing+0x125/0x370 [ 104.993571][ T6231] syscall_trace_enter+0xa8/0x150 [ 104.998571][ T6231] do_syscall_64+0xcc/0x230 [ 105.003056][ T6231] ? clear_bhb_loop+0x35/0x90 [ 105.007717][ T6231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.013591][ T6231] RIP: 0033:0x7f2cd997dff9 [ 105.018004][ T6231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.037588][ T6231] RSP: 002b:00007f2cda7640e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 105.045978][ T6231] RAX: ffffffffffffffda RBX: 00007f2cd9b35f88 RCX: 00007f2cd997dff9 [ 105.053927][ T6231] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2cd9b35f8c [ 105.061874][ T6231] RBP: 00007f2cd9b35f80 R08: 7fffffffffffffff R09: 0000000000000000 [ 105.069823][ T6231] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f2cd9b35f8c [ 105.077772][ T6231] R13: 0000000000000000 R14: 00007ffe0854a6f0 R15: 00007ffe0854a7d8 [ 105.085725][ T6231] [ 105.088723][ T6231] Modules linked in: [ 105.092604][ T6231] CR2: fffffbfffbc00000 [ 105.096743][ T6231] ---[ end trace 0000000000000000 ]--- [ 105.096772][ C0] BUG: unable to handle page fault for address: fffffbfffbc00000 [ 105.102180][ T6231] RIP: 0010:kasan_check_range+0x82/0x290 [ 105.109868][ C0] #PF: supervisor read access in kernel mode [ 105.115467][ T6231] Code: 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd <41> 80 3b 00 0f 85 c9 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00 [ 105.121418][ C0] #PF: error_code(0x0000) - not-present page [ 105.141001][ T6231] RSP: 0018:ffffc900044679f8 EFLAGS: 00010286 [ 105.146952][ C0] PGD 23ffe4067 P4D 23ffe4067 [ 105.152994][ T6231] [ 105.153003][ T6231] RAX: 0000000000000001 RBX: 1ffffffffbc00000 RCX: ffffffff81cf410f [ 105.157736][ C0] PUD 23ffe3067 [ 105.160036][ T6231] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffffde000000 [ 105.167979][ C0] PMD 0 [ 105.171494][ T6231] RBP: ffffffffffffffff R08: ffffffffde000003 R09: 1ffffffffbc00000 [ 105.179439][ C0] [ 105.179448][ C0] Oops: Oops: 0000 [#2] PREEMPT SMP KASAN PTI [ 105.182264][ T6231] R10: dffffc0000000000 R11: fffffbfffbc00000 R12: ffffffffde000000 [ 105.190242][ C0] CPU: 0 UID: 0 PID: 6217 Comm: syz.3.264 Tainted: G D 6.12.0-rc1-next-20241003-syzkaller #0 [ 105.192548][ T6231] R13: 0000000000000004 R14: dffffc0000000001 R15: fffffbfffbc00001 [ 105.198614][ C0] Tainted: [D]=DIE [ 105.206555][ T6231] FS: 00007f2cda7646c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 105.218066][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 105.226026][ T6231] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.229721][ C0] RIP: 0010:kasan_check_range+0x82/0x290 [ 105.238624][ T6231] CR2: fffffbfffbc00000 CR3: 0000000044524000 CR4: 00000000003526f0 [ 105.248658][ C0] Code: 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd <41> 80 3b 00 0f 85 c9 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00 [ 105.255219][ T6231] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 105.260817][ C0] RSP: 0018:ffffc90000007878 EFLAGS: 00010286 [ 105.268789][ T6231] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 105.288365][ C0] [ 105.296315][ T6231] Kernel panic - not syncing: Fatal exception [ 106.400063][ T6231] Shutting down cpus with NMI [ 106.421422][ T6231] Kernel Offset: disabled [ 106.425729][ T6231] Rebooting in 86400 seconds..