last executing test programs: 37.629752576s ago: executing program 2 (id=418): r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) getuid() r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) setfsgid(0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x6c) statx(0xffffffffffffffff, 0x0, 0x800, 0x10, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) sendmmsg$unix(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x4004000}}], 0x1, 0x0) 37.58715609s ago: executing program 2 (id=419): r0 = syz_io_uring_setup(0x24f5, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r0, 0x0, 0x400000, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x52e, 0x0, 0x0, 0x0, 0x0) 28.665639981s ago: executing program 4 (id=482): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000100)={0x1d, r4}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@dellink={0x20, 0x11, 0x1, 0x70bd30, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x241ba, 0x40520}}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x400a) 28.103670467s ago: executing program 4 (id=485): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000600)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x3, 0x48, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) syz_clone3(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 26.825481207s ago: executing program 4 (id=488): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f00000009c0)={[{@dots}, {@fat=@usefree}, {@nodots}, {@fat=@flush}, {@fat=@time_offset={'time_offset', 0x3d, 0x2db}}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@fat=@quiet}, {@dots}, {@nodots}, {@nodots}, {@fat=@tz_utc}, {@fat=@sys_immutable}, {@fat=@dmask={'dmask', 0x3d, 0x3}}, {@dots}, {@fat=@showexec}, {@nodots}, {@fat=@usefree}, {@fat=@check_strict}, {@nodots}]}, 0xfd, 0x207, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(0x0, 0x303, 0x90) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x0, 0x6]}) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 26.337551483s ago: executing program 4 (id=489): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x18) r1 = io_uring_setup(0x1de0, &(0x7f0000000440)={0x0, 0x2d6b, 0x80}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x0) 24.589639982s ago: executing program 4 (id=491): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 17.66127484s ago: executing program 0 (id=507): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 17.311425957s ago: executing program 0 (id=508): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) semtimedop(0x0, 0x0, 0x0, 0x0) 7.098230667s ago: executing program 3 (id=519): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 4.730133169s ago: executing program 1 (id=524): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000100)={0x1d, r4}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@dellink={0x20, 0x11, 0x1, 0x70bd30, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x241ba, 0x40520}}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x400a) 4.130522195s ago: executing program 1 (id=525): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000014c0)=@newtaction={0x8c, 0x30, 0x80d, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x800}, @TCA_CT_LABELS_MASK={0x14, 0x8, "37a55358cbfec0e9d412939d8317fcdc"}, @TCA_CT_PARMS={0x18, 0x1, {0x2, 0x8, 0xffffffffffffffff, 0x4, 0x8}}, @TCA_CT_LABELS={0x14, 0x7, "a31a5744c98714e0c10894427408df27"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.962688785s ago: executing program 1 (id=526): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r1, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl(0xffffffffffffffff, 0x8b22, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r3, &(0x7f0000000a40)={0x2020}, 0x2020) write(r4, &(0x7f0000000140)="94", 0xfffffdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3.841487784s ago: executing program 3 (id=527): socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x4c0c, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e21, 0x6, @loopback, 0x3}}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x41) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)='virtiofs\x00', 0x0, &(0x7f0000000240)) socket$key(0xf, 0x3, 0x2) 2.95416814s ago: executing program 1 (id=528): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x1de0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x0) 2.7818808s ago: executing program 1 (id=529): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0/file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="2c756e695f786c6174653d312c756e695f786c6174653d312c71756965742c646973636172642c73686f72746e616d653d6d6978656400008d93c3891882b2a1dacab425ab8a7efb02c90a71ca86bbb1f98970461441cd215e5390a67a5b88c87f75a69213cd285da44c349d7126fe160f379b025022eaa1707cf6a4dc3076d0f1ea17842906c5939c5b560b0e63e92cda4f461a125f816e05029dc5c7c5a456ff9bbb78b845379321793bfabc53528ef323d2e5945b6cfd7fa9c372bb000040008d6a2d0ce0", @ANYRESHEX, @ANYBLOB='nonumtail=0,quiet,uni_xlate=1,uni_xlate=1,nonumtail=1,fmask=01777777777777777777777,utf8=1,rodir,utf8=1,uid=', @ANYRESHEX, @ANYRES64, @ANYRES64, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRESDEC, @ANYBLOB="a8043a485489624ae7dfcfd7a295dc5fc490ef3bc8698da0a289e0810f3feb2472863e28647629fa364c725ca8ca41fbb642b5a746dfdfd38f0e7bc364c28a597a", @ANYRES64], 0x6, 0x2aa, &(0x7f0000000940)="$eJzs3D9rc1UYAPDnpmkSdUgGR8ELOji9vO3qkiItFDMpGdRBi21BkiC0UGgVYydXF0c/gSC4+SVc/AaCq+DWDoUr9+Zem9Q0baRp/fP7LT095zznPOf00NIhz0evjAb7aRyef/5LtFpJ1LrRjcskOlGLypcxo/t1AAD/ZpdZFr9nE8vEJRHRWl1aAMAKLf33/4eVpwQArNi7773/9lavt/1OmrZiZ/TVST//zz7/OhnfOoxPYhgH8TzacRWR/WnS3smybFxPc514fTQ+6eeRow9/Ktff+i2iiN+IdnSKrtn43d72RjoxFT/O83ix3L+bx29GO16es/9ub3tzTnz0G/HGa1P5P4t2/PxxfBrD2C+SuI7/YiNN38q+ufjsgzy9PD4Zn/Sbxbxr2doj/2gAAAAAAAAAAAAAAAAAAAAAAPgPe1bWzmlGUb8n7yrr76xd5d+sR1rpzNbnmcQn1UI36gONs/i2qq/zPE3TrJxYxFfFButRf5JDAwAAAAAAAAAAAAAAAAAAwD/M8enZYG84PDh6kEZVDaD6WP/fXac71fNqLJp8UdYbKPaqldsuWDnWqjlJxMI08kM80LXc1Xjhtpy/+37ZBVt3z1lfdD8P06he12AvmX+Hzah6WtUj+XF6TiPuuVfjtqFsqefXmDvUXvrsjZeKxnjBnEgWJfbmr5ObK3uSm6doFLc66anPhq+XjanwG29jqff8198ViWodAAAAAAAAAAAAAAAAAACwUtcf+p0zeL4wtJY1V5YWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyq41rVOD0b7A2HB0f3aIzLmHtMbsTR8RMeDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+JPwIAAP//OmtnZA==") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406d0486c00000000000010902240001000000000904000001030000000921000000ecbd05000905810300"], 0x0) 1.71250463s ago: executing program 2 (id=487): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) 1.32571164s ago: executing program 2 (id=530): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20044840) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)='*', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x2, 0x0) 1.270174222s ago: executing program 1 (id=531): syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b080000090503dec8002a000009050502000000000009058b"], 0x0) 1.053346919s ago: executing program 2 (id=532): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000a80)={[{@user_xattr}, {@data_err_abort}, {@resuid}, {@usrquota}, {@norecovery}, {@nobh}, {@block_validity}, {@noinit_itable}, {@nomblk_io_submit}, {@block_validity}, {@nogrpid}]}, 0x2, 0x54f, &(0x7f0000001080)="$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") ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f0000000740)) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000001c0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000080)='./file1\x00', r1, r2) 896.346552ms ago: executing program 3 (id=533): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000100)={0x1d, r4}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@dellink={0x20, 0x11, 0x1, 0x70bd30, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x241ba, 0x40520}}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x400a) 852.445574ms ago: executing program 4 (id=492): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 780.657769ms ago: executing program 0 (id=509): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000140)={[{@minixdf}, {@nodelalloc}]}, 0x1, 0x242, &(0x7f0000000540)="$eJzs3T9oM2UcB/DvXRJf+75BX3URBBVERAvldRNcXheFgpQiIqhQEXFRWqG2uLVOLg46q3RyKeJmdZQiFBdFcKraoS6CFocWBx0il2u11oh/UnPifT5wyV3yPM/vOS7fJ1mOBGity0muJukkmU7SS1KcbnB7vV0+PtyY2llIBoNHvi+G7erj2km/S0nWk9yXZLss8lw3Wd16Yv+H3YfuenWld+fbW49PTfQkjx3s7z189NbcK+/N3rv66effzhW5mv5vzuv8FSNe6xbJjf9Gsf+Iotv0DPgr5l9694sq9zcluWOY/17K1BfvteVrtnu5580/6vv6d5/dMsm5AudvMOhV34HrA6B1yiT9FOVMknq/LGdm6t/wX3Yuls8vLb84/ezSyuIzTa9UwHnpJ3sPfnDh/Utn8v9Np84/8P9V5f/R+c2vqv2jTtOzASapyv/0U2t3R/6hdeQf2kv+ob3kH9pL/qG95B/aS/6hveQf2kv+ob3+Tv4/mtCcgMk4nX8AoF0GF5q+AxloStPrDwAAAAAAAAAAAAAAAAAA8HsbUzsLJ9ukan78RnLwQJLuqPqd4f8RJ9cOHy8eFlWzXxR1t7E8eduYA/xq8fAfdHqn4buvr/u62fqf3Nps/bXFZP3lJFe63bOfv8H1449/w5+833t6/BrjuP+xZuv/tNls/dnd5MNq/bkyav0pc/PwefT606+u35j1X/hxzAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmJ8DAAD//7lGcFk=") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)}], 0x1, 0x7fff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r3 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r3, r2, 0x0, 0x80006804) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4c842, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x100001) 425.636557ms ago: executing program 0 (id=534): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 388.554197ms ago: executing program 3 (id=535): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000014c0)=@newtaction={0x8c, 0x30, 0x80d, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x800}, @TCA_CT_LABELS_MASK={0x14, 0x8, "37a55358cbfec0e9d412939d8317fcdc"}, @TCA_CT_PARMS={0x18, 0x1, {0x2, 0x8, 0xffffffffffffffff, 0x4, 0x8}}, @TCA_CT_LABELS={0x14, 0x7, "a31a5744c98714e0c10894427408df27"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 325.028746ms ago: executing program 3 (id=536): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) listen(0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2705, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000001440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000001400)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, "cb00001400000000000000ffff0000e700"}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0) r4 = io_uring_setup(0x6248, &(0x7f0000000280)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x18, 0x20000000, r5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r7, r7, r6}, &(0x7f0000000580)=""/213, 0xd5, &(0x7f00000001c0)={&(0x7f00000000c0)={'sm3\x00'}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2808000, &(0x7f00000002c0)=ANY=[@ANYBLOB='iocharset=cp932,iocharset=koi8-ru,shortname=lower,uni_xlate=0,shortname=win95,codepage=860,iocharsut=cp869,utf8=0,shortname=mixed,iocmaccyrillic,rodir,shortname=winnt,shortname=win95,\x00'], 0x1, 0x2c3, &(0x7f0000000a40)="$eJzs3c9qY1UcB/BvmjRNVEgWrkTwgi5chens3E2RCoNdKVnoRsXpgDRhYAqBUTHOyidw5Tv4Dj6AG9/AhTsFd3YhXkly869NOtNh7Ej5fDb99Zzf79xzbk5vV/fk09eHJ/cenN5//PWvabVq2bmTOzmrpZudzH0bAOAmOSvL/FnOPCm3kWaSslP9tnMN0wMA/gNX+f8PANwMH3708fsHR0eHHxRFKxl+N+rXkgxro/6s/+B+vsggx7mVTv5OyoVZ/Mrdo8M0imKnPssftdNPhp/8XI1/8Ecyrd9PJ92L9e/dPTrcL2by1nA86k+uPPm5m5dqyUFZmw10O528mpS7qQZZ1t/eUJ9+M2+/+UM1/3+O00snv3yeBxnk3nSIZf03+0Xxbvn9X18l7yST+tp41N+b5i2V9ev8XAAAAAAAAAAAAAAAAAAAAAAAuNl6xUJ39fyc+WmAvd7m/un5QPUN5wNVJ/yMV87XuVUUxfwYn1F/N7P6Rl5rpPFCFw8AAAAAAAAAAAAAAAAAAAD/E6ePvjz5bDA4frgW/FSeb9kQVG/0p2pprHQ11rsuH2dDcPJjelevepog9Wpqg1pyLme+oGcYOZkVL1r2Lua069vK25sump1t97AxyHTyZ2VZXnWqbzzjAq8WzHfXZJNcklzP6aPW5k2ysjPb06HKspydIdHetmnXgnE1g7Wu+taq5nNae/Plp0v+/bLbshJMVry7uJnrOa3JJ7nSsvukAZtb/97Xgi1Pitpze+YAAAAAAAAAAAAAAAAAAACbLd/+zW8XOh+/kCkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLVbfv//Ikj3fMv5YFwVX5YzD/Yenm64bPealwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAN928AAAD//7DGU2k=") creat(0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r8, &(0x7f0000000100)='./file0\x00', r8, &(0x7f0000000200)='./bus/file0\x00', 0x0) 242.719906ms ago: executing program 2 (id=537): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x1c, r1, 0x10ada85e65c25359, 0x0, 0x8000000, {{0x6b}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 117.261949ms ago: executing program 0 (id=538): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)="fe", 0x1}, {&(0x7f0000001240)="1eac4d20f8509e2139d2842c8faedef008bcac1025cbc63d2bfe0c7bbe51c5bf73985d5106bf5b5e7e5761716e35b468ea79633c916c4a8026f9408d056b8977df67c0e6fd0b1b3da5de5d003382ac95eade5dadad870ce3749452d2c1c3651ffff244be3078fdbfeb97d093bba60131e733d91c4ad38e7b52aa7afa9cb8e2351bd3f8a7a2a0425b071f6790992b8c2a51d944b0161c5c97fcdc19c2ef7c66ccc23c77a28a34b216c429444343ea056f171399dc03d56a1131ba74d31fc1012d3deff0e43309fc9e3b88bec90a7680aa74ccd581e02eb436a0009fa62097513d0c9533256d81978fae39288edcb833739d2988ccf5a564bc00edd1ab0853b873cbab3ef227f11325d72dbe2f435351610d01d0f74e180df6eaa94651336e7713414e499586edd5693e587a186fcb68a973e823e61a072aaa4fb9e3a03ff4c17c9e343684255efba0d1b149b22c2d81f1ac5eaccaab01ab108178e97eb8a45d5d6cdeca0d6b9af9f88cfee58935be6902ac7c6915d60548367d164990b142d472b9b5700191b1f978fb36bcde646385dcf5cb7adf1ec70baef4061d2da93d2f5eefae1081374d58ab54532755c1b8bf303584296145e9aad2e3ccef93f30da9c102db5cfe346baba2fd3f157cb6e825e607365ff8c6187e216dc4072e582874ce63166405e21644015f99d5713165a377bfdc3143928e8469b4e312ce1f9dff83fe7c8d9fca791af2b46f1650e3937c9ab589d5f93fb578503aa64042c66571649844d93257489c1b658140e4c194c329a1a2c0117d123a45b213a118dd608bd6bdb2e0a6782f785321ff48eac4158ad9efb3737a6cfbb21d0dba732558493aa09dfa7fa41b4922e4e205a4792c9694661a18eff0d932d824f6987aa3dafa7ddc9b0acd70d43263c78dde88b7c665abbeec1cf1016ddc321f713cc3c149eeda6443b5b278eb3a05b08d510650b055d3193c4d5bbe084431cc40a626e81827d8bf2379435ada42a99569b35faa3af53f90f4dcf7a7d1c2e6fe4d7739b135981d40ba00de019909748640d554a159e552c6a7a7c77b213fad40dd785cc4ee983266b3377fbc7845a44992f82656b8240c169697599074348a4bac29423612e4c0ba89a66d08033b54b4d8f8704ab9470fe6316dc6ba610b7f3c1b0428607b13d2cfbed5c82d9214a1e97edaa27ed011d42800467fd54cddec7841f2aa513e7c8956842ea69b6b80208a4acbe9b678a9ab48a26df1cebd283f0d8e2956d8e8a4aad5b563ae75ddaf9b167d70b0e96f42a4f1c5bef1e777fedcb380707fc7ac87e249f322a01660687c04d1bbeeefeecadf86c3ef805d79964a862877cfbff40eb340f7065bc759013cbdcb25305ba6812a853b8d8e1960227826acb24311ed0e67f84565dd8858ca3be23409569e15ba7512", 0x3f0}], 0x2}, 0x0) 13.728544ms ago: executing program 3 (id=539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 0s ago: executing program 0 (id=540): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): 4] veth0_vlan: entered promiscuous mode [ 102.291843][ T6211] team0: Port device team_slave_1 added [ 102.352290][ T6034] veth1_vlan: entered promiscuous mode [ 102.395546][ T5236] Bluetooth: hci3: command tx timeout [ 102.415968][ T6211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.440574][ T6211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.474408][ T6211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.529929][ T6211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.539666][ T6211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.573432][ T6211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.633821][ T5236] Bluetooth: hci0: command tx timeout [ 102.690551][ T5422] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.713852][ T6211] hsr_slave_0: entered promiscuous mode [ 102.720020][ T6211] hsr_slave_1: entered promiscuous mode [ 102.727150][ T6211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.734866][ T6211] Cannot create hsr debugfs directory [ 102.759532][ T5422] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.780588][ T6034] veth0_macvtap: entered promiscuous mode [ 102.821226][ T6034] veth1_macvtap: entered promiscuous mode [ 102.867970][ T5422] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.958908][ T5422] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.994660][ T6104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.006481][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.020370][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.030465][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.041572][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.052571][ T6034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.107308][ T5242] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.116814][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.127711][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.137716][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.148282][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.159199][ T6034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.170557][ T6034] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.179343][ T6034] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.188232][ T6034] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.197445][ T6034] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.223057][ T6104] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.252408][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.259524][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.267744][ T5242] usb 5-1: device descriptor read/64, error -71 [ 103.274800][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.281925][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.297932][ T6087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.397123][ T5422] bridge_slave_1: left allmulticast mode [ 103.402821][ T5422] bridge_slave_1: left promiscuous mode [ 103.411666][ T5422] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.420905][ T5422] bridge_slave_0: left allmulticast mode [ 103.431545][ T5422] bridge_slave_0: left promiscuous mode [ 103.438289][ T5422] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.514319][ T5242] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 103.661472][ T5242] usb 5-1: device descriptor read/64, error -71 [ 103.784132][ T5242] usb usb5-port1: attempt power cycle [ 103.878729][ T5422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.890821][ T5422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.902664][ T5422] bond0 (unregistering): Released all slaves [ 104.133418][ T5242] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.147185][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.173508][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.181800][ T6087] veth0_vlan: entered promiscuous mode [ 104.205887][ T5242] usb 5-1: device descriptor read/8, error -71 [ 104.307658][ T6087] veth1_vlan: entered promiscuous mode [ 104.320782][ T1835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.341328][ T1835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.421436][ T5422] hsr_slave_0: left promiscuous mode [ 104.453301][ T5242] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 104.475554][ T5422] hsr_slave_1: left promiscuous mode [ 104.483997][ T5242] usb 5-1: device descriptor read/8, error -71 [ 104.503438][ T5422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.510869][ T5422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.529058][ T5422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.545020][ T5422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.593939][ T5242] usb usb5-port1: unable to enumerate USB device [ 104.715874][ T5422] veth1_macvtap: left promiscuous mode [ 104.720785][ T5236] Bluetooth: hci0: command tx timeout [ 104.743486][ T5422] veth0_macvtap: left promiscuous mode [ 104.749433][ T5422] veth1_vlan: left promiscuous mode [ 104.766518][ T5422] veth0_vlan: left promiscuous mode [ 104.867108][ T6321] hub 6-0:1.0: USB hub found [ 104.873603][ T6321] hub 6-0:1.0: 1 port detected [ 105.908815][ T5422] team0 (unregistering): Port device team_slave_1 removed [ 105.939423][ T5422] team0 (unregistering): Port device team_slave_0 removed [ 106.232548][ T6104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.258794][ T6327] tipc: Started in network mode [ 106.264102][ T6327] tipc: Node identity e0000002, cluster identity 4711 [ 106.270975][ T6327] tipc: Enabling of bearer rejected, failed to enable media [ 106.293981][ T6211] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.317490][ T6211] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.405018][ T6211] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.428885][ T6211] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.474090][ T6087] veth0_macvtap: entered promiscuous mode [ 106.502440][ T6087] veth1_macvtap: entered promiscuous mode [ 106.592689][ T29] audit: type=1326 audit(1728047737.546:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbff7dff9 code=0x7ffc0000 [ 106.655582][ T6104] veth0_vlan: entered promiscuous mode [ 106.675274][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.680179][ T29] audit: type=1326 audit(1728047737.546:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbff7dff9 code=0x7ffc0000 [ 106.694815][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.732518][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.743535][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.752749][ T29] audit: type=1326 audit(1728047737.546:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f5fbff7dff9 code=0x7ffc0000 [ 106.781796][ T29] audit: type=1326 audit(1728047737.546:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbff7dff9 code=0x7ffc0000 [ 106.796956][ T6087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.811408][ T5236] Bluetooth: hci0: command tx timeout [ 106.827462][ T6104] veth1_vlan: entered promiscuous mode [ 106.837745][ T29] audit: type=1326 audit(1728047737.546:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbff7dff9 code=0x7ffc0000 [ 106.921840][ T6342] loop1: detected capacity change from 0 to 512 [ 106.944008][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.970368][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.982112][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.995809][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.008838][ T6087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.017571][ T6342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.031987][ T6342] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.046681][ T6087] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.065964][ T6087] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.076297][ T6087] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.085566][ T6087] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.171098][ T6211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.188240][ T6211] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.199896][ T1835] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.207148][ T1835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.223995][ T6104] veth0_macvtap: entered promiscuous mode [ 107.233324][ T6104] veth1_macvtap: entered promiscuous mode [ 107.248714][ T6104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.259385][ T6104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.269496][ T6104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.280443][ T6104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.290504][ T6104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.301266][ T6104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.312546][ T6104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.396667][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.403806][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.673738][ T6104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.688029][ T6104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.701186][ T6104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.711851][ T6104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.721865][ T6104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.732440][ T6104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.743682][ T6104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.755089][ T6104] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.764094][ T6104] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.772799][ T6104] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.781693][ T6104] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.059884][ T6364] loop4: detected capacity change from 0 to 512 [ 108.067229][ T1835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.071999][ T5422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.090806][ T5422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.098185][ T1835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.152098][ T6364] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 108.163432][ T6364] System zones: 0-2, 18-18, 34-34 [ 108.178182][ T6364] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.212: bg 0: block 248: padding at end of block bitmap is not set [ 108.185058][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.201501][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.241744][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.250894][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.262421][ T6364] Quota error (device loop4): write_blk: dquota write failed [ 108.276280][ T6211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.398798][ T6364] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 108.401132][ T6211] veth0_vlan: entered promiscuous mode [ 108.429118][ T6364] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.212: Failed to acquire dquot type 1 [ 108.481864][ T6211] veth1_vlan: entered promiscuous mode [ 108.533063][ T6211] veth0_macvtap: entered promiscuous mode [ 108.558112][ T6364] EXT4-fs (loop4): 1 truncate cleaned up [ 108.576810][ T6364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.601059][ T6211] veth1_macvtap: entered promiscuous mode [ 108.657117][ T6364] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.690065][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.723248][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.736983][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.742738][ T6364] syz.4.212 (6364) used greatest stack depth: 17688 bytes left [ 108.747747][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.764996][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.775531][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.785472][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.796012][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.807295][ T6211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.824202][ T5935] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.836551][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.854210][ T6375] syz.0.213[6375] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.854311][ T6375] syz.0.213[6375] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.858414][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.865988][ T6375] syz.0.213[6375] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.936295][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.969269][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.979182][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.989720][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.999608][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.010119][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.021321][ T6211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.246242][ T6388] syz.1.206[6388] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.246340][ T6388] syz.1.206[6388] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.305063][ T6388] syz.1.206[6388] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.471539][ T6380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.506753][ T6380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.530397][ T6380] bond0 (unregistering): Released all slaves [ 109.585651][ T6211] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.595346][ T6211] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.608610][ T6211] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.621649][ T6211] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.832127][ T29] audit: type=1326 audit(1728047740.786:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593737dff9 code=0x7ffc0000 [ 109.880232][ T1835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.918941][ T1835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.948184][ T29] audit: type=1326 audit(1728047740.816:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593737dff9 code=0x7ffc0000 [ 110.027421][ T29] audit: type=1326 audit(1728047740.826:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f593737dff9 code=0x7ffc0000 [ 110.051920][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.068352][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.092725][ T6413] loop0: detected capacity change from 0 to 256 [ 110.124020][ T6413] loop0: detected capacity change from 256 to 0 [ 110.293850][ T6419] loop3: detected capacity change from 0 to 128 [ 110.336510][ T6104] syz-executor: attempt to access beyond end of device [ 110.336510][ T6104] loop0: rw=0, sector=12, nr_sectors = 4 limit=0 [ 110.373415][ T6104] FAT-fs (loop0): Directory bread(block 3) failed [ 110.387354][ T6419] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.423307][ T6419] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.437151][ T6104] syz-executor: attempt to access beyond end of device [ 110.437151][ T6104] loop0: rw=0, sector=0, nr_sectors = 4 limit=0 [ 110.460119][ T6104] FAT-fs (loop0): unable to read boot sector to mark fs as dirty [ 110.540986][ T6034] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.617813][ T6211] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.889530][ T149] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.000888][ T6440] loop4: detected capacity change from 0 to 256 [ 111.015706][ T6437] netlink: 256 bytes leftover after parsing attributes in process `syz.1.237'. [ 111.075181][ T6440] loop4: detected capacity change from 256 to 0 [ 111.114032][ T149] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.217533][ T6450] loop2: detected capacity change from 0 to 128 [ 111.245291][ T5935] syz-executor: attempt to access beyond end of device [ 111.245291][ T5935] loop4: rw=0, sector=12, nr_sectors = 4 limit=0 [ 111.277384][ T6450] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.317408][ T5935] FAT-fs (loop4): Directory bread(block 3) failed [ 111.606543][ T149] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.647544][ T5935] syz-executor: attempt to access beyond end of device [ 111.647544][ T5935] loop4: rw=0, sector=0, nr_sectors = 4 limit=0 [ 111.701245][ T5935] FAT-fs (loop4): unable to read boot sector to mark fs as dirty [ 111.944767][ T6450] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 112.033675][ T149] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.047515][ T5228] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 112.056295][ T5228] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 112.068188][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 112.068202][ T29] audit: type=1804 audit(1728047743.006:57): pid=6450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.243" name="/newroot/8/mnt/file1" dev="loop2" ino=12 res=1 errno=0 [ 112.099324][ T5228] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 112.120142][ T5228] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 112.129896][ T5228] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 112.138370][ T5228] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 112.187935][ T6087] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.441131][ T149] bridge_slave_1: left allmulticast mode [ 112.447735][ T149] bridge_slave_1: left promiscuous mode [ 112.468563][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.513064][ T149] bridge_slave_0: left allmulticast mode [ 112.519052][ T149] bridge_slave_0: left promiscuous mode [ 112.532611][ T6468] syz.2.250[6468] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.532712][ T6468] syz.2.250[6468] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.548612][ T6471] loop1: detected capacity change from 0 to 512 [ 112.551787][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.560881][ T6468] syz.2.250[6468] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.616659][ T6471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.663737][ T6471] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.799452][ T6477] loop3: detected capacity change from 0 to 256 [ 112.835967][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.853521][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 112.863683][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 112.867484][ T29] audit: type=1326 audit(1728047743.826:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.2.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0377dff9 code=0x7ffc0000 [ 112.903211][ T6477] loop3: detected capacity change from 256 to 0 [ 112.926172][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.949369][ T5236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 112.957742][ T29] audit: type=1326 audit(1728047743.856:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.2.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0377dff9 code=0x7ffc0000 [ 112.980950][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 112.989342][ T29] audit: type=1326 audit(1728047743.886:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.2.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fac0377dff9 code=0x7ffc0000 [ 113.010230][ T6034] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.078988][ T29] audit: type=1326 audit(1728047743.886:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.2.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0377dff9 code=0x7ffc0000 [ 113.102348][ T29] audit: type=1326 audit(1728047743.886:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.2.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0377dff9 code=0x7ffc0000 [ 113.132737][ T6211] syz-executor: attempt to access beyond end of device [ 113.132737][ T6211] loop3: rw=0, sector=12, nr_sectors = 4 limit=0 [ 113.223452][ T6211] FAT-fs (loop3): Directory bread(block 3) failed [ 113.330802][ T6211] syz-executor: attempt to access beyond end of device [ 113.330802][ T6211] loop3: rw=0, sector=0, nr_sectors = 4 limit=0 [ 113.335558][ T6495] loop2: detected capacity change from 0 to 128 [ 113.371875][ T6211] FAT-fs (loop3): unable to read boot sector to mark fs as dirty [ 113.387428][ T6495] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.424397][ T6495] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 113.490501][ T29] audit: type=1804 audit(1728047744.446:63): pid=6495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.260" name="/newroot/13/mnt/file1" dev="loop2" ino=12 res=1 errno=0 [ 113.528084][ T6087] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.615362][ T6498] hub 2-0:1.0: USB hub found [ 113.625896][ T6498] hub 2-0:1.0: 1 port detected [ 113.724013][ T29] audit: type=1326 audit(1728047744.676:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6503 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0377dff9 code=0x7ffc0000 [ 113.780645][ T29] audit: type=1326 audit(1728047744.676:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6503 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0377dff9 code=0x7ffc0000 [ 113.805500][ T29] audit: type=1326 audit(1728047744.686:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6503 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac0377dff9 code=0x7ffc0000 [ 113.833025][ T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.858866][ T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.891547][ T149] bond0 (unregistering): Released all slaves [ 114.020910][ T6502] netlink: 'syz.1.264': attribute type 10 has an invalid length. [ 114.052742][ T6502] team0: Failed to send options change via netlink (err -105) [ 114.063026][ T6502] team0: Port device netdevsim0 added [ 114.090269][ T6507] netlink: 'syz.1.264': attribute type 10 has an invalid length. [ 114.099816][ T6507] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 114.104120][ T6516] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.127538][ T6507] team0: Failed to send options change via netlink (err -105) [ 114.136505][ T6507] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 114.153328][ T5228] Bluetooth: hci3: command tx timeout [ 114.157878][ T6507] team0: Port device netdevsim0 removed [ 114.192751][ T6507] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 114.214923][ T6518] loop2: detected capacity change from 0 to 128 [ 114.264382][ T6518] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.354711][ T6518] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.500518][ T6459] chnl_net:caif_netlink_parms(): no params data found [ 114.530832][ T6528] program syz.1.274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.575495][ T6087] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.887427][ T6537] loop1: detected capacity change from 0 to 4096 [ 114.890430][ T149] hsr_slave_0: left promiscuous mode [ 114.897901][ T6542] syz.2.278[6542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.899448][ T6542] syz.2.278[6542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.913337][ T6542] syz.2.278[6542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.932547][ T149] hsr_slave_1: left promiscuous mode [ 114.989454][ T6537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.043457][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.050894][ T149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.086145][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.100692][ T149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.101354][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.117313][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.126508][ T5245] Bluetooth: hci4: command tx timeout [ 115.137195][ T149] veth1_macvtap: left promiscuous mode [ 115.137474][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.142713][ T149] veth0_macvtap: left promiscuous mode [ 115.167894][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.176925][ T149] veth1_vlan: left promiscuous mode [ 115.185201][ T5236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 115.192455][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.213243][ T149] veth0_vlan: left promiscuous mode [ 115.242044][ T6034] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.664067][ T149] team0 (unregistering): Port device team_slave_1 removed [ 115.698246][ T149] team0 (unregistering): Port device team_slave_0 removed [ 116.132714][ T6567] loop2: detected capacity change from 0 to 128 [ 116.160266][ T6567] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.174496][ T6567] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 116.233819][ T5228] Bluetooth: hci3: command tx timeout [ 116.256709][ T6087] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.275587][ T6459] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.290892][ T6459] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.301645][ T6459] bridge_slave_0: entered allmulticast mode [ 116.309064][ T6459] bridge_slave_0: entered promiscuous mode [ 116.398424][ T6459] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.432720][ T6459] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.440261][ T6459] bridge_slave_1: entered allmulticast mode [ 116.489347][ T6459] bridge_slave_1: entered promiscuous mode [ 116.565291][ T6459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.611012][ T6459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.724575][ T6459] team0: Port device team_slave_0 added [ 116.786556][ T6480] chnl_net:caif_netlink_parms(): no params data found [ 116.812440][ T6459] team0: Port device team_slave_1 added [ 116.925441][ T6459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.932414][ T6459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.941199][ T6600] loop2: detected capacity change from 0 to 128 [ 116.978346][ T6459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.996793][ T6459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.003870][ T6459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.047890][ T6459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.065830][ T6600] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.087235][ T6600] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.139537][ T6548] chnl_net:caif_netlink_parms(): no params data found [ 117.222507][ T5228] Bluetooth: hci4: command tx timeout [ 117.281300][ T5228] Bluetooth: hci0: command tx timeout [ 117.300122][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 117.300139][ T29] audit: type=1804 audit(1728047748.256:82): pid=6611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.292" name="/newroot/31/mnt/file1" dev="loop2" ino=12 res=1 errno=0 [ 117.334301][ T149] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.347634][ T6087] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.540528][ T6624] loop2: detected capacity change from 0 to 256 [ 117.543274][ T149] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.640462][ T29] audit: type=1326 audit(1728047748.596:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.1.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbff7dff9 code=0x7ffc0000 [ 117.694369][ T149] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.726589][ T29] audit: type=1326 audit(1728047748.596:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.1.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5fbff7dff9 code=0x7ffc0000 [ 117.756662][ T6459] hsr_slave_0: entered promiscuous mode [ 117.783538][ T6459] hsr_slave_1: entered promiscuous mode [ 117.794702][ T6459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.802284][ T6459] Cannot create hsr debugfs directory [ 117.811932][ T29] audit: type=1326 audit(1728047748.596:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.1.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbff7dff9 code=0x7ffc0000 [ 117.841026][ T29] audit: type=1326 audit(1728047748.596:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.1.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbff7dff9 code=0x7ffc0000 [ 117.880567][ T29] audit: type=1326 audit(1728047748.626:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.1.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f5fbff7dff9 code=0x7ffc0000 [ 117.926398][ T6480] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.955728][ T6480] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.963077][ T6480] bridge_slave_0: entered allmulticast mode [ 117.978161][ T29] audit: type=1326 audit(1728047748.626:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.1.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbff7dff9 code=0x7ffc0000 [ 118.004569][ T6480] bridge_slave_0: entered promiscuous mode [ 118.018329][ T6480] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.027128][ T6480] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.034596][ T29] audit: type=1326 audit(1728047748.636:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.1.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbff7dff9 code=0x7ffc0000 [ 118.042577][ T6641] loop2: detected capacity change from 0 to 128 [ 118.057939][ T6480] bridge_slave_1: entered allmulticast mode [ 118.071184][ T6480] bridge_slave_1: entered promiscuous mode [ 118.094166][ T149] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.102700][ T6641] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.118023][ T6641] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.141938][ T6632] syzkaller1: entered promiscuous mode [ 118.148331][ T6632] syzkaller1: entered allmulticast mode [ 118.161083][ T29] audit: type=1804 audit(1728047749.116:90): pid=6641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.301" name="/newroot/36/mnt/file1" dev="loop2" ino=12 res=1 errno=0 [ 118.209171][ T6087] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.313621][ T5228] Bluetooth: hci3: command tx timeout [ 118.400454][ T6480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.418912][ T6480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.495232][ T6652] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.595247][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.606881][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.622899][ T6548] bridge_slave_0: entered allmulticast mode [ 118.638292][ T6548] bridge_slave_0: entered promiscuous mode [ 118.667988][ T6652] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.699010][ T6480] team0: Port device team_slave_0 added [ 118.726221][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.735613][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.742744][ T6548] bridge_slave_1: entered allmulticast mode [ 118.749723][ T6548] bridge_slave_1: entered promiscuous mode [ 118.768790][ T6652] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.809296][ T6480] team0: Port device team_slave_1 added [ 118.910586][ T6652] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.991601][ T6548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.025831][ T6480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.037339][ T6480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.042549][ T6671] loop1: detected capacity change from 0 to 256 [ 119.063537][ T6480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.099609][ T29] audit: type=1804 audit(1728047750.056:91): pid=6671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.306" name="/newroot/33/file0/bus" dev="loop1" ino=1048688 res=1 errno=0 [ 119.136043][ T149] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.154369][ T6548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.220983][ T6480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.229499][ T6480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.258322][ T6480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.273531][ T5228] Bluetooth: hci4: command tx timeout [ 119.299098][ T149] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.351830][ T6652] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.363533][ T5228] Bluetooth: hci0: command tx timeout [ 119.380448][ T6652] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.393828][ T6548] team0: Port device team_slave_0 added [ 119.414761][ T149] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.470022][ T6652] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.481747][ T6548] team0: Port device team_slave_1 added [ 119.510315][ T6480] hsr_slave_0: entered promiscuous mode [ 119.533211][ T6480] hsr_slave_1: entered promiscuous mode [ 119.539849][ T6480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.548260][ T6480] Cannot create hsr debugfs directory [ 119.609715][ T149] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.655000][ T6678] loop1: detected capacity change from 0 to 128 [ 119.655852][ T6652] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.680017][ T6678] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.738553][ T6678] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.791611][ T6034] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.925881][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.948758][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.977357][ T6548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.045907][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.058609][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.084726][ T6548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.128600][ T6694] loop2: detected capacity change from 0 to 512 [ 120.150170][ T6459] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.161366][ T6459] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.182449][ T6459] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 120.245088][ T6694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.296633][ T6694] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.329712][ T6548] hsr_slave_0: entered promiscuous mode [ 120.337470][ T6548] hsr_slave_1: entered promiscuous mode [ 120.345171][ T6548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.371102][ T6548] Cannot create hsr debugfs directory [ 120.378931][ T6459] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 120.393630][ T5228] Bluetooth: hci3: command tx timeout [ 120.470327][ T6087] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.499214][ T149] bridge_slave_1: left allmulticast mode [ 120.506209][ T149] bridge_slave_1: left promiscuous mode [ 120.512509][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.558717][ T149] bridge_slave_0: left allmulticast mode [ 120.564909][ T149] bridge_slave_0: left promiscuous mode [ 120.586711][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.632174][ T149] bridge_slave_1: left allmulticast mode [ 120.648748][ T149] bridge_slave_1: left promiscuous mode [ 120.653416][ T6707] loop2: detected capacity change from 0 to 1024 [ 120.657910][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.662990][ T6707] EXT4-fs: Ignoring removed nobh option [ 120.682141][ T6707] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.691788][ T149] bridge_slave_0: left allmulticast mode [ 120.698506][ T149] bridge_slave_0: left promiscuous mode [ 120.698954][ T6709] loop1: detected capacity change from 0 to 128 [ 120.717233][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.718354][ T6707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.776878][ T6087] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.795293][ T6709] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.826242][ T6709] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.981575][ T6034] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.356363][ T5228] Bluetooth: hci4: command tx timeout [ 121.435906][ T5228] Bluetooth: hci0: command tx timeout [ 121.459350][ T6731] Invalid ELF header magic: != ELF [ 121.632303][ T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.645156][ T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.656167][ T149] bond0 (unregistering): Released all slaves [ 121.696469][ T6459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.835966][ T6739] loop1: detected capacity change from 0 to 128 [ 121.899223][ T6459] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.923797][ T6739] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.947074][ T6739] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 122.015948][ T6034] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.054192][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.061335][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.107357][ T6743] loop2: detected capacity change from 0 to 1024 [ 122.120908][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.128039][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.196759][ T6743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.222883][ T6743] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.226660][ T6749] loop1: detected capacity change from 0 to 128 [ 122.337968][ T6743] loop2: detected capacity change from 0 to 256 [ 122.351895][ T6743] msdos: Bad value for 'gid' [ 122.358124][ T6743] msdos: Bad value for 'gid' [ 122.665199][ T6757] loop2: detected capacity change from 0 to 512 [ 122.680782][ T6757] EXT4-fs: Ignoring removed oldalloc option [ 122.694364][ T6757] EXT4-fs: Ignoring removed oldalloc option [ 122.727139][ T6757] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 122.781739][ T6757] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.335: invalid indirect mapped block 83886080 (level 1) [ 122.832267][ T6757] EXT4-fs (loop2): Remounting filesystem read-only [ 122.839784][ T6757] EXT4-fs (loop2): 1 orphan inode deleted [ 122.853401][ T6757] EXT4-fs (loop2): 1 truncate cleaned up [ 122.861439][ T6757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.955602][ T6087] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.978171][ T6480] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 123.149767][ T6480] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 123.215089][ T6480] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 123.230358][ T6775] loop1: detected capacity change from 0 to 1024 [ 123.254841][ T149] hsr_slave_0: left promiscuous mode [ 123.265077][ T149] hsr_slave_1: left promiscuous mode [ 123.297102][ T6775] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.312436][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.327287][ T149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.336919][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.343208][ T6775] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.348302][ T149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.366733][ T149] hsr_slave_0: left promiscuous mode [ 123.374618][ T149] hsr_slave_1: left promiscuous mode [ 123.383619][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.391019][ T149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.407813][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.415380][ T149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.482251][ T149] veth1_macvtap: left promiscuous mode [ 123.496367][ T149] veth0_macvtap: left promiscuous mode [ 123.502133][ T149] veth1_vlan: left promiscuous mode [ 123.512479][ T149] veth0_vlan: left promiscuous mode [ 123.522865][ T149] veth1_macvtap: left promiscuous mode [ 123.537076][ T149] veth0_macvtap: left promiscuous mode [ 123.542836][ T149] veth1_vlan: left promiscuous mode [ 123.548348][ T5228] Bluetooth: hci0: command tx timeout [ 123.562849][ T149] veth0_vlan: left promiscuous mode [ 124.169963][ T6782] xt_CT: No such helper "syz1" [ 124.378792][ T6034] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.532876][ T6788] loop1: detected capacity change from 0 to 512 [ 124.567036][ T6788] EXT4-fs (loop1): 1 truncate cleaned up [ 124.574216][ T6788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.619107][ T6788] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.340: Directory hole found for htree leaf block 0 [ 124.675588][ T6034] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.836373][ T149] team0 (unregistering): Port device team_slave_1 removed [ 124.870715][ T149] team0 (unregistering): Port device team_slave_0 removed [ 125.412009][ T149] team0 (unregistering): Port device team_slave_1 removed [ 125.447984][ T149] team0 (unregistering): Port device team_slave_0 removed [ 125.762693][ T6480] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 126.015161][ T6459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.125580][ T6802] syz.2.346[6802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.125673][ T6802] syz.2.346[6802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.147766][ T6802] syz.2.346[6802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.254332][ T6548] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 126.311192][ T6548] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 126.347156][ T6459] veth0_vlan: entered promiscuous mode [ 126.353468][ T6548] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 126.384387][ T6548] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 126.419397][ T6480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.460657][ T6459] veth1_vlan: entered promiscuous mode [ 126.527036][ T6480] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.586370][ T2530] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.593514][ T2530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.611603][ T2530] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.618742][ T2530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.650598][ T6824] loop1: detected capacity change from 0 to 128 [ 126.666277][ T6459] veth0_macvtap: entered promiscuous mode [ 126.710443][ T6459] veth1_macvtap: entered promiscuous mode [ 126.823626][ T6824] syz.1.352: attempt to access beyond end of device [ 126.823626][ T6824] loop1: rw=2049, sector=145, nr_sectors = 184 limit=128 [ 126.865930][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 126.865946][ T29] audit: type=1326 audit(1728047757.826:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6823 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbff7dff9 code=0x7ffc0000 [ 126.901259][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.921837][ T29] audit: type=1326 audit(1728047757.856:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6823 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f5fbff7dff9 code=0x7ffc0000 [ 126.923707][ T6830] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 126.946044][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.950431][ T6830] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 126.983153][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.988657][ T6830] vhci_hcd vhci_hcd.0: Device attached [ 127.003316][ T29] audit: type=1326 audit(1728047757.856:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6823 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbff7dff9 code=0x7ffc0000 [ 127.025647][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.030847][ T6833] vhci_hcd: connection closed [ 127.038525][ T12] vhci_hcd: stop threads [ 127.044265][ T6459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.053931][ T12] vhci_hcd: release socket [ 127.059431][ T12] vhci_hcd: disconnect device [ 127.062168][ T35] kworker/u8:2: attempt to access beyond end of device [ 127.062168][ T35] loop1: rw=1, sector=177, nr_sectors = 1 limit=128 [ 127.119531][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.140164][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.159382][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.183228][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.205129][ T6459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.252414][ T6459] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.271042][ T6459] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.293220][ T6459] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.301963][ T6459] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.336406][ T6548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.352231][ T6548] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.384373][ T6548] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 127.394962][ T6548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.448682][ T5422] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.455837][ T5422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.510172][ T5422] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.515392][ T6849] syz.1.356[6849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.517296][ T6849] syz.1.356[6849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.517316][ T5422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.535612][ T6849] syz.1.356[6849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.698713][ T6480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.849562][ T6548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.906447][ T5422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.919976][ T5422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.943368][ T6867] loop1: detected capacity change from 0 to 128 [ 128.004538][ T6867] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 128.051355][ T6548] veth0_vlan: entered promiscuous mode [ 128.072113][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.114570][ T6867] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 128.128977][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.143022][ T6548] veth1_vlan: entered promiscuous mode [ 128.185420][ T6480] veth0_vlan: entered promiscuous mode [ 128.200843][ T29] audit: type=1804 audit(1728047759.156:98): pid=6867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.359" name="/newroot/62/mnt/file1" dev="loop1" ino=12 res=1 errno=0 [ 128.241024][ T6548] veth0_macvtap: entered promiscuous mode [ 128.269287][ T6480] veth1_vlan: entered promiscuous mode [ 128.309349][ T6548] veth1_macvtap: entered promiscuous mode [ 128.384184][ T29] audit: type=1326 audit(1728047759.336:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6883 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb871b7dff9 code=0x7ffc0000 [ 128.409877][ T6884] loop0: detected capacity change from 0 to 128 [ 128.423430][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.452937][ T6884] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 128.473143][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.482983][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.495416][ T29] audit: type=1326 audit(1728047759.336:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6883 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb871b7dff9 code=0x7ffc0000 [ 128.518348][ T29] audit: type=1326 audit(1728047759.336:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6883 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb871b7dff9 code=0x7ffc0000 [ 128.543740][ T29] audit: type=1326 audit(1728047759.336:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6883 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb871b7dff9 code=0x7ffc0000 [ 128.577160][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.592278][ T6884] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 128.609146][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.625325][ T29] audit: type=1326 audit(1728047759.346:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6883 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb871b7dff9 code=0x7ffc0000 [ 128.653616][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.666793][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.677350][ T6034] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.715727][ T29] audit: type=1326 audit(1728047759.366:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6883 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb871b7dff9 code=0x7ffc0000 [ 128.741677][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.763505][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.791700][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.813047][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.835235][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.850258][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.870100][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.928550][ T6548] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.002147][ T6548] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.025982][ T6548] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.036464][ T6548] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.056366][ T6912] syz.2.365[6912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.056451][ T6912] syz.2.365[6912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.077630][ T6912] syz.2.365[6912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.110504][ T6480] veth0_macvtap: entered promiscuous mode [ 129.168477][ T6480] veth1_macvtap: entered promiscuous mode [ 129.192689][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.244088][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.270104][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.323232][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.357755][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.385344][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.403750][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.414811][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.481202][ T6480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.556874][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.591344][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.626132][ T6935] loop2: detected capacity change from 0 to 128 [ 129.648464][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.682741][ T6935] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.695235][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.717769][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.728864][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.738804][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.750703][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.761077][ T6935] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.780892][ T6480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.792344][ T6480] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.801233][ T6480] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.810072][ T6480] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.819312][ T6480] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.841395][ T6087] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.935967][ T6946] loop6: detected capacity change from 0 to 7 [ 129.942622][ T6946] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.954375][ T6946] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.962694][ T6946] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.969937][ T6948] syz.1.376[6948] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.972037][ T6946] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.992370][ T6946] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.031455][ T5993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.042633][ T6946] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.055141][ T5993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.066060][ T6946] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.074679][ T6946] ldm_validate_partition_table(): Disk read failed. [ 130.087384][ T6946] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.097775][ T6946] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.106225][ T6946] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.127365][ T6946] Dev loop6: unable to read RDB block 0 [ 130.211262][ T6946] loop6: unable to read partition table [ 130.213767][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.217034][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.226051][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.232610][ T5993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.255349][ T6946] loop6: partition table beyond EOD, truncated [ 130.261617][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.269224][ T5993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.326105][ T6946] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 130.326105][ T6946] ) failed (rc=-5) [ 130.425297][ T6956] netlink: 'syz.1.380': attribute type 10 has an invalid length. [ 130.591690][ T6956] geneve0: entered promiscuous mode [ 130.657665][ T6956] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 130.826510][ T6980] loop2: detected capacity change from 0 to 128 [ 130.872577][ T6980] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.926039][ T6980] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 131.179144][ T6087] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.428705][ T7010] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.485830][ T7010] hub 9-0:1.0: USB hub found [ 131.492500][ T7010] hub 9-0:1.0: 8 ports detected [ 131.540302][ T7014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.398'. [ 131.557843][ T7013] loop0: detected capacity change from 0 to 512 [ 131.672945][ T7013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.776993][ T7013] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.858063][ T7020] bpf_get_probe_write_proto: 8 callbacks suppressed [ 131.858081][ T7020] syz.2.399[7020] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.883778][ T7013] syz.0.397[7013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.891074][ T7020] syz.2.399[7020] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.959258][ T7013] syz.0.397[7013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.966150][ T7020] syz.2.399[7020] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.004807][ T7023] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.397: corrupted xattr block 33: invalid header [ 132.053288][ T7013] syz.0.397[7013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.088986][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 132.089002][ T29] audit: type=1800 audit(1728047763.046:175): pid=7023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.397" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 132.195874][ T7028] loop6: detected capacity change from 0 to 7 [ 132.208510][ T7028] ldm_validate_partition_table(): Disk read failed. [ 132.219371][ T7028] Dev loop6: unable to read RDB block 0 [ 132.236277][ T7031] loop1: detected capacity change from 0 to 128 [ 132.237355][ T6459] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.262611][ T7028] loop6: unable to read partition table [ 132.302323][ T7028] loop6: partition table beyond EOD, truncated [ 132.303392][ T7031] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.309609][ T7028] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 132.309609][ T7028] ) failed (rc=-5) [ 132.339741][ T7031] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.458889][ T29] audit: type=1804 audit(1728047763.416:176): pid=7031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.403" name="/newroot/77/mnt/file1" dev="loop1" ino=12 res=1 errno=0 [ 132.550304][ T6034] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.794235][ T7044] syzkaller1: entered promiscuous mode [ 132.803239][ T7044] syzkaller1: entered allmulticast mode [ 132.964551][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.970933][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.310038][ T7065] syz.1.415[7065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.310120][ T7065] syz.1.415[7065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.321656][ T7065] syz.1.415[7065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.411737][ T7067] loop1: detected capacity change from 0 to 128 [ 133.498558][ T7067] tmpfs: Bad value for 'mpol' [ 134.556927][ T7091] loop0: detected capacity change from 0 to 256 [ 134.668621][ T29] audit: type=1804 audit(1728047765.626:177): pid=7091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.425" name="/newroot/16/file0/bus" dev="loop0" ino=1048705 res=1 errno=0 [ 135.264560][ T7104] loop1: detected capacity change from 0 to 512 [ 135.369913][ T7104] EXT4-fs (loop1): fragment/cluster size (8192) != block size (4096) [ 135.413383][ T7109] syz.3.428[7109] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.670319][ T7113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.434'. [ 136.199618][ T7123] loop4: detected capacity change from 0 to 512 [ 136.241584][ T29] audit: type=1326 audit(1728047767.196:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb871b7dff9 code=0x7ffc0000 [ 136.302434][ T7127] loop3: detected capacity change from 0 to 256 [ 136.329582][ T7123] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #17: comm syz.4.440: iget: bogus i_mode (0) [ 136.347875][ T7123] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.440: couldn't read orphan inode 17 (err -117) [ 136.362515][ T7123] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.400815][ T7123] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.440: bg 0: block 7: invalid block bitmap [ 136.413642][ T29] audit: type=1326 audit(1728047767.226:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb871b7dff9 code=0x7ffc0000 [ 136.507538][ T29] audit: type=1326 audit(1728047767.226:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fb871b7dff9 code=0x7ffc0000 [ 136.629298][ T6480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.646002][ T29] audit: type=1326 audit(1728047767.226:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb871b7dff9 code=0x7ffc0000 [ 136.739673][ T29] audit: type=1326 audit(1728047767.226:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb871b7dff9 code=0x7ffc0000 [ 136.937662][ T7134] bpf_get_probe_write_proto: 2 callbacks suppressed [ 136.937681][ T7134] syz.0.445[7134] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.957424][ T29] audit: type=1804 audit(1728047767.456:183): pid=7127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.442" name="/newroot/13/file0/bus" dev="loop3" ino=1048707 res=1 errno=0 [ 137.014813][ T7134] syz.0.445[7134] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.014935][ T7134] syz.0.445[7134] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.248399][ T29] audit: type=1326 audit(1728047767.806:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.1.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbff7dff9 code=0x7ffc0000 [ 137.558333][ T29] audit: type=1326 audit(1728047767.806:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.1.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbff7dff9 code=0x7ffc0000 [ 137.712666][ T29] audit: type=1326 audit(1728047767.806:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.1.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fbff7dff9 code=0x7ffc0000 [ 137.880757][ T29] audit: type=1326 audit(1728047767.806:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.1.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbff7dff9 code=0x7ffc0000 [ 138.088720][ T29] audit: type=1326 audit(1728047767.806:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.1.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbff7dff9 code=0x7ffc0000 [ 138.257050][ T29] audit: type=1326 audit(1728047767.806:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.1.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fbff7dff9 code=0x7ffc0000 [ 138.294073][ T7164] loop1: detected capacity change from 0 to 256 [ 138.429773][ T29] audit: type=1326 audit(1728047767.806:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.1.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbff7dff9 code=0x7ffc0000 [ 138.576552][ T29] audit: type=1326 audit(1728047767.806:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.1.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbff7dff9 code=0x7ffc0000 [ 138.610204][ T7171] syz.0.460[7171] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.610301][ T7171] syz.0.460[7171] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.676350][ T7171] syz.0.460[7171] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.724201][ T29] audit: type=1326 audit(1728047767.816:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.1.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f5fbff7dff9 code=0x7ffc0000 [ 139.023260][ T29] audit: type=1326 audit(1728047767.816:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.1.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbff7dff9 code=0x7ffc0000 [ 139.077637][ T7176] loop0: detected capacity change from 0 to 128 [ 139.216336][ T7176] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 139.323413][ T7176] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 139.412437][ T7184] loop4: detected capacity change from 0 to 2048 [ 139.489508][ T7184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.627842][ T6480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.651333][ T6459] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.890296][ T5993] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.129029][ T5993] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.346680][ T5993] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.357786][ T7199] syz.4.474[7199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.357872][ T7199] syz.4.474[7199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.380616][ T7199] syz.4.474[7199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.430571][ T7201] loop3: detected capacity change from 0 to 256 [ 140.529930][ T5993] bond0: (slave netdevsim0): Releasing backup interface [ 140.571970][ T5993] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.828839][ T5993] bridge_slave_1: left allmulticast mode [ 140.859049][ T5993] bridge_slave_1: left promiscuous mode [ 140.888582][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.965292][ T5993] bridge_slave_0: left allmulticast mode [ 140.986973][ T5993] bridge_slave_0: left promiscuous mode [ 141.027768][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.373418][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 141.382581][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 141.390385][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 141.399291][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 141.409595][ T5236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 141.416966][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 141.734091][ T7212] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 141.740661][ T7212] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 141.748732][ T7212] vhci_hcd vhci_hcd.0: Device attached [ 141.776039][ T7213] vhci_hcd: connection closed [ 141.795095][ T5993] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 141.878384][ T7216] loop0: detected capacity change from 0 to 128 [ 141.924931][ T35] vhci_hcd: stop threads [ 141.929473][ T35] vhci_hcd: release socket [ 141.936727][ T35] vhci_hcd: disconnect device [ 141.995141][ T5314] vhci_hcd: vhci_device speed not set [ 142.059589][ T7216] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.079721][ T7216] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 142.128368][ T5993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.139778][ T5993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.151646][ T5993] bond0 (unregistering): Released all slaves [ 142.241593][ T6459] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.497951][ T7221] loop0: detected capacity change from 0 to 1024 [ 143.089298][ T7221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0008-0000-000000000000 r/w without journal. Quota mode: none. [ 143.157351][ T5993] tipc: Left network mode [ 143.256566][ T7236] netlink: 'syz.4.485': attribute type 10 has an invalid length. [ 143.404911][ T6459] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0008-0000-000000000000. [ 143.515736][ T5236] Bluetooth: hci1: command tx timeout [ 143.818280][ T5228] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 143.834923][ T5228] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 143.843870][ T5228] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 143.851680][ T5228] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 143.859687][ T5228] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 143.867047][ T5228] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.237766][ T7251] loop4: detected capacity change from 0 to 256 [ 144.556325][ T7207] chnl_net:caif_netlink_parms(): no params data found [ 144.674436][ T5993] hsr_slave_0: left promiscuous mode [ 144.763280][ T5993] hsr_slave_1: left promiscuous mode [ 144.785061][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.792482][ T5993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.912037][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.929152][ T5993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.939823][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 144.957460][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 144.957781][ T5993] veth1_macvtap: left promiscuous mode [ 144.970084][ T5993] veth0_macvtap: left promiscuous mode [ 144.975744][ T5993] veth1_vlan: left promiscuous mode [ 144.981364][ T5993] veth0_vlan: left promiscuous mode [ 144.992777][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.050820][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.092981][ T5236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 145.109869][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.501960][ T5993] team0 (unregistering): Port device team_slave_1 removed [ 145.561364][ T5993] team0 (unregistering): Port device team_slave_0 removed [ 145.594304][ T5228] Bluetooth: hci1: command tx timeout [ 145.916773][ T5228] Bluetooth: hci0: command tx timeout [ 146.295806][ T7257] loop0: detected capacity change from 0 to 128 [ 146.337871][ T7257] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.358309][ T7257] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.442576][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 146.442591][ T29] audit: type=1804 audit(1728047777.396:200): pid=7257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.490" name="/newroot/36/mnt/file1" dev="loop0" ino=12 res=1 errno=0 [ 146.564194][ T6459] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.760757][ T5236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.809308][ T5236] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.829337][ T5236] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 146.850324][ T5236] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 146.869259][ T5236] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 146.889788][ T5236] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.915019][ T7207] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.922136][ T7207] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.929929][ T7207] bridge_slave_0: entered allmulticast mode [ 146.937107][ T7207] bridge_slave_0: entered promiscuous mode [ 146.945118][ T7207] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.952219][ T7207] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.976920][ T7207] bridge_slave_1: entered allmulticast mode [ 146.984280][ T7207] bridge_slave_1: entered promiscuous mode [ 147.151122][ T7278] Illegal XDP return value 4294967274 on prog (id 227) dev N/A, expect packet loss! [ 147.265572][ T7207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.297852][ T5236] Bluetooth: hci4: command tx timeout [ 147.309265][ T7281] process 'syz.0.495' launched './file0' with NULL argv: empty string added [ 147.496600][ T7244] chnl_net:caif_netlink_parms(): no params data found [ 147.524024][ T7207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.604436][ T7285] syz.0.496[7285] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.604528][ T7285] syz.0.496[7285] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.625102][ T7285] syz.0.496[7285] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.673347][ T5236] Bluetooth: hci1: command tx timeout [ 147.993871][ T5228] Bluetooth: hci0: command tx timeout [ 148.079135][ T7253] chnl_net:caif_netlink_parms(): no params data found [ 148.189899][ T7207] team0: Port device team_slave_0 added [ 148.318294][ T7207] team0: Port device team_slave_1 added [ 148.481721][ T7244] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.512118][ T7244] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.537140][ T7244] bridge_slave_0: entered allmulticast mode [ 148.552022][ T7244] bridge_slave_0: entered promiscuous mode [ 148.594414][ T7207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.617113][ T7207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.703210][ T7207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.763305][ T7244] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.783249][ T7244] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.790416][ T7244] bridge_slave_1: entered allmulticast mode [ 148.826709][ T7244] bridge_slave_1: entered promiscuous mode [ 148.932748][ T7207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.953131][ T7207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.012699][ T7207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.033678][ T5228] Bluetooth: hci5: command tx timeout [ 149.172422][ T7244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.277956][ T7244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.353503][ T5228] Bluetooth: hci4: command tx timeout [ 149.390096][ T5993] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.422686][ T7207] hsr_slave_0: entered promiscuous mode [ 149.434045][ T7207] hsr_slave_1: entered promiscuous mode [ 149.482540][ T7253] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.503370][ T7253] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.530892][ T7253] bridge_slave_0: entered allmulticast mode [ 149.548458][ T7253] bridge_slave_0: entered promiscuous mode [ 149.632443][ T5993] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.654934][ T7267] chnl_net:caif_netlink_parms(): no params data found [ 149.679032][ T7253] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.691951][ T7253] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.707112][ T7253] bridge_slave_1: entered allmulticast mode [ 149.718856][ T7253] bridge_slave_1: entered promiscuous mode [ 149.753330][ T5228] Bluetooth: hci1: command tx timeout [ 149.767781][ T7244] team0: Port device team_slave_0 added [ 149.811633][ T5993] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.962893][ T7244] team0: Port device team_slave_1 added [ 150.042306][ T5993] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.073860][ T5228] Bluetooth: hci0: command tx timeout [ 150.099697][ T7253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.145618][ T7253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.253414][ T7244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.280687][ T7244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.369258][ T7244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.474154][ T7244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.501451][ T7244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.586722][ T7244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.683436][ T7253] team0: Port device team_slave_0 added [ 150.908905][ T7253] team0: Port device team_slave_1 added [ 151.109217][ T7244] hsr_slave_0: entered promiscuous mode [ 151.114973][ T5228] Bluetooth: hci5: command tx timeout [ 151.139152][ T7244] hsr_slave_1: entered promiscuous mode [ 151.154928][ T7244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.163021][ T7244] Cannot create hsr debugfs directory [ 151.263264][ T7253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.281493][ T7253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.365026][ T7253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.392016][ T7267] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.407163][ T7267] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.420555][ T7267] bridge_slave_0: entered allmulticast mode [ 151.435202][ T5228] Bluetooth: hci4: command tx timeout [ 151.446838][ T7267] bridge_slave_0: entered promiscuous mode [ 151.502359][ T7338] syzkaller1: entered promiscuous mode [ 151.508117][ T7338] syzkaller1: entered allmulticast mode [ 151.527876][ T7253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.544572][ T7253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.580699][ T7253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.599653][ T7267] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.616892][ T7267] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.631132][ T7267] bridge_slave_1: entered allmulticast mode [ 151.642566][ T7267] bridge_slave_1: entered promiscuous mode [ 151.938578][ T7267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.086248][ T5993] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.153503][ T5228] Bluetooth: hci0: command tx timeout [ 152.207063][ T7253] hsr_slave_0: entered promiscuous mode [ 152.222024][ T7253] hsr_slave_1: entered promiscuous mode [ 152.283287][ T7253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.290865][ T7253] Cannot create hsr debugfs directory [ 152.322286][ T7267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.725006][ T5993] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.841160][ T7267] team0: Port device team_slave_0 added [ 153.018947][ T5993] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.059838][ T7355] loop0: detected capacity change from 0 to 256 [ 153.073691][ T7267] team0: Port device team_slave_1 added [ 153.197439][ T5228] Bluetooth: hci5: command tx timeout [ 153.215251][ T5993] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.282457][ T7267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.299499][ T7267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.336952][ T7267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.356816][ T7267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.404524][ T7267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.480713][ T7267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.513483][ T5228] Bluetooth: hci4: command tx timeout [ 153.804888][ T7267] hsr_slave_0: entered promiscuous mode [ 153.823860][ T7267] hsr_slave_1: entered promiscuous mode [ 153.850189][ T7267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.888363][ T7267] Cannot create hsr debugfs directory [ 153.928459][ T5993] bridge_slave_1: left allmulticast mode [ 153.952901][ T5993] bridge_slave_1: left promiscuous mode [ 153.979244][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.034272][ T5993] bridge_slave_0: left allmulticast mode [ 154.039947][ T5993] bridge_slave_0: left promiscuous mode [ 154.053808][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.089660][ T5993] bridge_slave_1: left allmulticast mode [ 154.113570][ T5993] bridge_slave_1: left promiscuous mode [ 154.119258][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.173954][ T5993] bridge_slave_0: left allmulticast mode [ 154.179617][ T5993] bridge_slave_0: left promiscuous mode [ 154.210792][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.768330][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.778113][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.786881][ T5236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.795126][ T5236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.802932][ T5236] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 154.814166][ T5236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.273300][ T5228] Bluetooth: hci5: command tx timeout [ 155.456785][ T5993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.477138][ T5993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.497281][ T5993] bond0 (unregistering): Released all slaves [ 155.630866][ T5993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.649346][ T5993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.660232][ T5993] bond0 (unregistering): Released all slaves [ 155.708899][ T7207] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 155.867236][ T7207] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 155.887263][ T7207] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 155.969659][ T7207] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 156.224848][ T7207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.240451][ T7207] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.265982][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.273142][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.293585][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.300687][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.382506][ T7207] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 156.393139][ T7207] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.642033][ T7357] chnl_net:caif_netlink_parms(): no params data found [ 156.676528][ T7244] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 156.711019][ T7207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.741254][ T7253] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.772030][ T7244] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 156.785380][ T7244] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 156.830830][ T5993] hsr_slave_0: left promiscuous mode [ 156.847281][ T5993] hsr_slave_1: left promiscuous mode [ 156.859663][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.867993][ T5993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.885944][ T5228] Bluetooth: hci3: command tx timeout [ 156.892422][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.900009][ T5993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.921727][ T5993] hsr_slave_0: left promiscuous mode [ 156.938475][ T5993] hsr_slave_1: left promiscuous mode [ 156.950050][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.970283][ T5993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.980613][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.998394][ T5993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.060234][ T5993] veth1_vlan: left promiscuous mode [ 157.070620][ T5993] veth0_vlan: left promiscuous mode [ 157.082696][ T5993] veth1_macvtap: left promiscuous mode [ 157.092958][ T5993] veth0_macvtap: left promiscuous mode [ 157.099714][ T5993] veth1_vlan: left promiscuous mode [ 157.105756][ T5993] veth0_vlan: left promiscuous mode [ 157.717015][ T5993] team0 (unregistering): Port device team_slave_1 removed [ 157.773377][ T5993] team0 (unregistering): Port device team_slave_0 removed [ 158.739513][ T5993] team0 (unregistering): Port device team_slave_1 removed [ 158.777860][ T5993] team0 (unregistering): Port device team_slave_0 removed [ 158.953200][ T5228] Bluetooth: hci3: command tx timeout [ 159.349038][ T7207] veth0_vlan: entered promiscuous mode [ 159.368491][ T7207] veth1_vlan: entered promiscuous mode [ 159.391811][ T7207] veth0_macvtap: entered promiscuous mode [ 159.400630][ T7207] veth1_macvtap: entered promiscuous mode [ 159.408954][ T7253] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.433559][ T7244] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 159.544107][ T7253] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.639102][ T7253] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.670520][ T7357] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.683394][ T7357] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.690646][ T7357] bridge_slave_0: entered allmulticast mode [ 159.704992][ T7357] bridge_slave_0: entered promiscuous mode [ 159.713371][ T7357] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.720453][ T7357] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.728149][ T7357] bridge_slave_1: entered allmulticast mode [ 159.735106][ T7357] bridge_slave_1: entered promiscuous mode [ 159.743736][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.754423][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.768481][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.789943][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.804670][ T7207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.818049][ T7244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.875186][ T7244] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.897378][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.908073][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.917986][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.928517][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.939570][ T7207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.966440][ T7357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.978367][ T7357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.029396][ T7244] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 160.040399][ T7244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.063139][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.070233][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.079317][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.086492][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.120166][ T7207] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.129286][ T7207] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.138207][ T7207] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.147113][ T7207] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.225863][ T7357] team0: Port device team_slave_0 added [ 160.233710][ T7357] team0: Port device team_slave_1 added [ 160.331927][ T7357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.339306][ T7357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.365518][ T7357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.378107][ T7357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.385130][ T7357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.411350][ T7357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.588342][ T5422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.599555][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.608360][ T7244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.613190][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.616150][ T5422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.695664][ T7357] hsr_slave_0: entered promiscuous mode [ 160.702104][ T7357] hsr_slave_1: entered promiscuous mode [ 160.708563][ T7357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.716610][ T7357] Cannot create hsr debugfs directory [ 160.886535][ T7244] veth0_vlan: entered promiscuous mode [ 160.897531][ T7244] veth1_vlan: entered promiscuous mode [ 160.919347][ T7244] veth0_macvtap: entered promiscuous mode [ 160.928407][ T7244] veth1_macvtap: entered promiscuous mode [ 160.942940][ T7244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.953782][ T7244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.964220][ T7244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.975057][ T7244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.984989][ T7244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.995440][ T7244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.006376][ T7244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.015625][ T7244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.026452][ T7244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.036648][ T7244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.047218][ T5228] Bluetooth: hci3: command tx timeout [ 161.052710][ T7244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.062999][ T7244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.073916][ T7244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.085543][ T7244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.176395][ T7244] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.185193][ T7244] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.194115][ T7244] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.202798][ T7244] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.235345][ T7376] loop1: detected capacity change from 0 to 1024 [ 161.301543][ T7376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.323294][ T7376] 9pnet: Could not find request transport: Dnzekfmf۞sM=9{znNBZُBīmql4‰V^Ͷ$J"O+' - [ 161.389043][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.400930][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.502963][ T7207] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.545269][ T7357] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.571888][ T7253] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 161.592130][ T7253] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 161.666551][ T5422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.677541][ T5422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.698170][ T7267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 161.712634][ T7267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 161.727883][ T7267] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 161.747686][ T7267] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 161.803938][ T7253] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 161.836377][ T7357] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.904847][ T7253] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 162.017093][ T7357] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.198186][ T7357] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.343689][ T66] bridge_slave_1: left allmulticast mode [ 162.349891][ T66] bridge_slave_1: left promiscuous mode [ 162.371590][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.399182][ T66] bridge_slave_0: left allmulticast mode [ 162.408569][ T66] bridge_slave_0: left promiscuous mode [ 162.421656][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.596185][ T7387] loop1: detected capacity change from 0 to 1024 [ 162.605162][ T7387] EXT4-fs: Ignoring removed nobh option [ 162.610748][ T7387] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.835744][ T7387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.014447][ T7207] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.034357][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.075166][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.113326][ T5228] Bluetooth: hci3: command tx timeout [ 163.124332][ T66] bond0 (unregistering): Released all slaves [ 163.576026][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.516'. [ 163.736393][ T7267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.762104][ T7357] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 163.779058][ T7357] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 163.815478][ T66] hsr_slave_0: left promiscuous mode [ 163.827276][ T66] hsr_slave_1: left promiscuous mode [ 163.837609][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.850870][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.905642][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.913054][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.996846][ T66] veth1_macvtap: left promiscuous mode [ 164.002392][ T66] veth0_macvtap: left promiscuous mode [ 164.038348][ T66] veth1_vlan: left promiscuous mode [ 164.052627][ T66] veth0_vlan: left promiscuous mode [ 165.129121][ T66] team0 (unregistering): Port device team_slave_1 removed [ 165.261739][ T66] team0 (unregistering): Port device team_slave_0 removed [ 166.118140][ T7425] loop1: detected capacity change from 0 to 1024 [ 166.128909][ T7425] EXT4-fs: Ignoring removed nobh option [ 166.143409][ T7425] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.224552][ T7425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.378724][ T7207] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.557403][ T7253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.580799][ T7253] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.612735][ T7253] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 166.623201][ T7253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.665493][ T7357] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 166.694406][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.701537][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.714188][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.721378][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.741663][ T7407] syzkaller1: entered promiscuous mode [ 166.750010][ T7407] syzkaller1: entered allmulticast mode [ 166.850215][ T7357] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 167.023984][ T7357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.036242][ T7267] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.049660][ T7357] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.065206][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.072296][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.122851][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.129999][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.186497][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.193673][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.262679][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.269834][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.513925][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 167.611216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 167.658628][ T7253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.911998][ T7267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 167.923144][ T7267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.004048][ T7253] veth0_vlan: entered promiscuous mode [ 168.015889][ T7253] veth1_vlan: entered promiscuous mode [ 168.081997][ T7253] veth0_macvtap: entered promiscuous mode [ 168.126309][ T7253] veth1_macvtap: entered promiscuous mode [ 168.208757][ T7357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.230651][ T7253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.251969][ T7253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.270249][ T7253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.281505][ T7253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.299447][ T7253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.320194][ T7253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.348321][ T7253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.371251][ T7457] loop1: detected capacity change from 0 to 256 [ 168.387792][ T7267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.428356][ T7253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.452213][ T7253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.468692][ T7253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.513755][ T7253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.544420][ T7253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.558816][ T7253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.570272][ T7253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.625049][ T7253] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.654498][ T7253] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.664512][ T7465] virtio-fs: tag not found [ 168.667837][ T7253] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.693172][ T7253] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.713292][ T5284] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 168.763944][ T7357] veth0_vlan: entered promiscuous mode [ 168.791862][ T7357] veth1_vlan: entered promiscuous mode [ 168.867604][ T5284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.889570][ T5284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.895123][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.930752][ T5284] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 168.933263][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.961134][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.995988][ T5284] usb 2-1: config 0 descriptor?? [ 169.025764][ T5284] usbhid 2-1:0.0: can't add hid device: -22 [ 169.042038][ T7357] veth0_macvtap: entered promiscuous mode [ 169.042148][ T5284] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 169.091268][ T7357] veth1_macvtap: entered promiscuous mode [ 169.094512][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.117638][ T7267] veth0_vlan: entered promiscuous mode [ 169.123537][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.149862][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.171505][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.181526][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.192136][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.202191][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.210929][ T5323] usb 2-1: USB disconnect, device number 2 [ 169.212682][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.228420][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.238929][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.250864][ T7357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.267535][ T7267] veth1_vlan: entered promiscuous mode [ 169.289438][ T7267] veth0_macvtap: entered promiscuous mode [ 169.299244][ T7267] veth1_macvtap: entered promiscuous mode [ 169.315550][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.326097][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.336316][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.346870][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.357221][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.371215][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.381131][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.391650][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.401823][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.412601][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.423900][ T7267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.436447][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.447027][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.457209][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.468020][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.478006][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.488506][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.498422][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.508915][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.519946][ T7267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.564797][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.575343][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.585272][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.596319][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.606254][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.616776][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.626656][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.637183][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.647085][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.657572][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.669382][ T7357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.705197][ T7267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.714504][ T7267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.723307][ T7267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.742253][ T7267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.756854][ T7357] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.766573][ T7357] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.803301][ T7357] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.822208][ T7357] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.988254][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.014916][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.059622][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.073835][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.093360][ T46] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 170.113492][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.129337][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.177742][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.185635][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.289659][ T7478] loop2: detected capacity change from 0 to 1024 [ 170.334039][ T7478] EXT4-fs: Ignoring removed nobh option [ 170.363319][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 170.368230][ T7478] EXT4-fs: Ignoring removed nomblk_io_submit option [ 170.369827][ T46] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 200 [ 170.385863][ T7483] loop0: detected capacity change from 0 to 128 [ 170.388754][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 170.435096][ T7483] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.440387][ T46] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 170.479580][ T7483] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 170.494978][ T7478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.532631][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 170.542686][ T46] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 170.563221][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.583926][ T29] audit: type=1804 audit(1728047801.486:201): pid=7483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.509" name="/newroot/0/mnt/file1" dev="loop0" ino=12 res=1 errno=0 [ 170.611889][ T46] usb 2-1: config 0 descriptor?? [ 170.629574][ T7474] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 170.654705][ T7357] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.796493][ T7493] syzkaller1: entered promiscuous mode [ 170.806131][ T7493] syzkaller1: entered allmulticast mode [ 170.832992][ T7253] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.882561][ T8] usb 2-1: USB disconnect, device number 3 [ 170.891714][ T7495] loop3: detected capacity change from 0 to 256 [ 170.923923][ T7495] vfat: Unknown parameter 'iocharsut' [ 171.093061][ C0] BUG: unable to handle page fault for address: fffffbfffb11e000 [ 171.100810][ C0] #PF: supervisor read access in kernel mode [ 171.106773][ C0] #PF: error_code(0x0000) - not-present page [ 171.112722][ C0] PGD 23ffe4067 P4D 23ffe4067 PUD 23ffe3067 PMD 0 [ 171.119211][ C0] Oops: Oops: 0000 [#1] PREEMPT SMP KASAN PTI [ 171.125261][ C0] CPU: 0 UID: 0 PID: 7479 Comm: syz.4.492 Not tainted 6.12.0-rc1-next-20241003-syzkaller #0 [ 171.135297][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 171.145332][ C0] RIP: 0010:kasan_check_range+0x82/0x290 [ 171.150953][ C0] Code: 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd <41> 80 3b 00 0f 85 c9 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00 [ 171.170564][ C0] RSP: 0018:ffffc90000006cd8 EFLAGS: 00010286 [ 171.176623][ C0] RAX: 0000000000000001 RBX: 1ffffffffb11e000 RCX: ffffffff81cf410f [ 171.184571][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffffd88f0000 [ 171.192516][ C0] RBP: ffffffffffffffff R08: ffffffffd88f0007 R09: 1ffffffffb11e000 [ 171.200475][ C0] R10: dffffc0000000000 R11: fffffbfffb11e000 R12: ffffffffd88f0000 [ 171.208429][ C0] R13: 0000000000000008 R14: dffffc0000000001 R15: fffffbfffb11e001 [ 171.216404][ C0] FS: 00007f06176046c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 171.225333][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.231902][ C0] CR2: fffffbfffb11e000 CR3: 00000000281e0000 CR4: 00000000003526f0 [ 171.239864][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 171.247815][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 171.255761][ C0] Call Trace: [ 171.259017][ C0] [ 171.261867][ C0] ? __die_body+0x5f/0xb0 [ 171.266174][ C0] ? page_fault_oops+0x8e4/0xcc0 [ 171.271121][ C0] ? __pfx_page_fault_oops+0x10/0x10 [ 171.276384][ C0] ? is_prefetch+0x4ed/0x780 [ 171.280956][ C0] ? __pfx_is_prefetch+0x10/0x10 [ 171.285902][ C0] ? __bad_area_nosemaphore+0x118/0x770 [ 171.291426][ C0] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 171.297296][ C0] ? spurious_kernel_fault+0x119/0x5a0 [ 171.302733][ C0] ? exc_page_fault+0x5c8/0x8c0 [ 171.307570][ C0] ? asm_exc_page_fault+0x26/0x30 [ 171.312573][ C0] ? copy_from_kernel_nofault+0x6f/0x2f0 [ 171.318197][ C0] ? kasan_check_range+0x82/0x290 [ 171.323228][ C0] copy_from_kernel_nofault+0x6f/0x2f0 [ 171.328663][ C0] bpf_probe_read_compat+0x10f/0x180 [ 171.333957][ C0] ? bpf_trace_run2+0x1fc/0x540 [ 171.338793][ C0] bpf_prog_737a72641ece9b26+0x43/0x45 [ 171.344232][ C0] bpf_trace_run2+0x2ec/0x540 [ 171.348885][ C0] ? kvfree_call_rcu+0x48c/0x790 [ 171.353800][ C0] ? __pfx_bpf_trace_run2+0x10/0x10 [ 171.359010][ C0] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 171.364280][ C0] ? ieee80211_inform_bss+0xbb2/0x1080 [ 171.369719][ C0] ? ieee80211_inform_bss+0xbb2/0x1080 [ 171.375159][ C0] ? ieee80211_inform_bss+0xbb2/0x1080 [ 171.380616][ C0] kfree+0x378/0x420 [ 171.384507][ C0] ? ieee80211_inform_bss+0x5fb/0x1080 [ 171.389967][ C0] ieee80211_inform_bss+0xbb2/0x1080 [ 171.395246][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 171.400942][ C0] ? trace_kmalloc+0x1f/0xd0 [ 171.405508][ C0] ? cfg80211_inform_single_bss_data+0xd6e/0x2090 [ 171.411899][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 171.417592][ C0] cfg80211_inform_single_bss_data+0xec1/0x2090 [ 171.423811][ C0] ? __lock_acquire+0x1384/0x2050 [ 171.428814][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 171.435468][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 171.440646][ C0] ? validate_chain+0x11e/0x5920 [ 171.445558][ C0] ? cfg80211_inform_bss_data+0x3b6/0x5e70 [ 171.451341][ C0] cfg80211_inform_bss_data+0x3ce/0x5e70 [ 171.456954][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 171.463084][ C0] ? validate_chain+0x11e/0x5920 [ 171.468000][ C0] ? __pfx_validate_chain+0x10/0x10 [ 171.473171][ C0] ? validate_chain+0x11e/0x5920 [ 171.478083][ C0] ? validate_chain+0x11e/0x5920 [ 171.482993][ C0] ? mark_lock+0x9a/0x360 [ 171.487314][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 171.493368][ C0] ? __pfx_validate_chain+0x10/0x10 [ 171.498546][ C0] ? mark_lock+0x9a/0x360 [ 171.502861][ C0] ? __lock_acquire+0x1384/0x2050 [ 171.507897][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 171.512906][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 171.518711][ C0] cfg80211_inform_bss_frame_data+0x3b8/0x720 [ 171.524760][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 171.530544][ C0] ieee80211_bss_info_update+0x8a7/0xbc0 [ 171.536178][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 171.542307][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 171.548637][ C0] ? kcov_remote_start+0x97/0x7d0 [ 171.553641][ C0] ? ieee80211_get_channel_khz+0x173/0x920 [ 171.559426][ C0] ieee80211_scan_rx+0x526/0x9c0 [ 171.564349][ C0] ieee80211_rx_list+0x2b02/0x3780 [ 171.569454][ C0] ? __lock_acquire+0x1384/0x2050 [ 171.574460][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 171.579917][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 171.584947][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 171.590933][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 171.597249][ C0] ? ieee80211_rx_napi+0xd6/0x3c0 [ 171.602251][ C0] ieee80211_rx_napi+0x18a/0x3c0 [ 171.607166][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 171.613472][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 171.618906][ C0] ? skb_dequeue+0x113/0x150 [ 171.623510][ C0] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 171.629466][ C0] tasklet_action_common+0x321/0x4d0 [ 171.634731][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 171.640516][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 171.646822][ C0] ? workqueue_softirq_action+0xce/0x140 [ 171.652443][ C0] handle_softirqs+0x2c5/0x980 [ 171.657224][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 171.661965][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 171.667245][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 171.672426][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 171.677022][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 171.682200][ C0] irq_exit_rcu+0x9/0x30 [ 171.686420][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 171.692059][ C0] [ 171.694969][ C0] [ 171.697897][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 171.703868][ C0] RIP: 0010:unwind_next_frame+0x12d/0x22d0 [ 171.709652][ C0] Code: 6d 35 48 89 e8 48 c1 e8 03 48 89 44 24 28 42 0f b6 04 20 84 c0 0f 85 b8 19 00 00 4c 0f be 7d 00 48 8b 44 24 30 42 80 3c 20 00 <48> 8b 5c 24 18 74 08 48 89 df e8 a4 5d bd 00 4c 03 3b 49 ff cf 4c [ 171.729252][ C0] RSP: 0018:ffffc90004056e90 EFLAGS: 00000246 [ 171.735298][ C0] RAX: 1ffff9200080adf5 RBX: 0000000000000000 RCX: ffffffff8bd1c900 [ 171.743245][ C0] RDX: dffffc0000000000 RSI: ffffffff81f06e59 RDI: ffffffff814156e0 [ 171.751191][ C0] RBP: ffffc90004056f95 R08: 0000000000000001 R09: ffffc90004057050 [ 171.759138][ C0] R10: ffffc90004056fb0 R11: ffffffff818088a0 R12: dffffc0000000000 [ 171.767086][ C0] R13: ffffc90004056f60 R14: ffffffff81f06e59 R15: 0000000000000000 [ 171.775036][ C0] ? get_page_from_freelist+0x3129/0x3270 [ 171.780744][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 171.786896][ C0] ? queued_write_lock_slowpath+0x440/0x44a [ 171.792768][ C0] ? get_page_from_freelist+0x3129/0x3270 [ 171.798461][ C0] ? unwind_next_frame+0xb0/0x22d0 [ 171.803555][ C0] ? post_alloc_hook+0x1f3/0x230 [ 171.808472][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 171.814600][ C0] arch_stack_walk+0x11c/0x150 [ 171.819340][ C0] ? get_page_from_freelist+0x3129/0x3270 [ 171.825035][ C0] stack_trace_save+0x118/0x1d0 [ 171.829861][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 171.835232][ C0] save_stack+0xfb/0x1f0 [ 171.839462][ C0] ? __pfx_save_stack+0x10/0x10 [ 171.844294][ C0] ? post_alloc_hook+0x1f3/0x230 [ 171.849207][ C0] ? get_page_from_freelist+0x3129/0x3270 [ 171.854907][ C0] __set_page_owner+0x92/0x800 [ 171.859647][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 171.866215][ C0] ? get_page_from_freelist+0x87d/0x3270 [ 171.871831][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 171.877179][ C0] post_alloc_hook+0x1f3/0x230 [ 171.881946][ C0] get_page_from_freelist+0x3129/0x3270 [ 171.887471][ C0] ? mark_lock+0x9a/0x360 [ 171.891776][ C0] ? __lock_acquire+0x1384/0x2050 [ 171.896786][ C0] __alloc_pages_noprof+0x256/0x6c0 [ 171.901962][ C0] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 171.907681][ C0] alloc_pages_mpol_noprof+0x3e8/0x680 [ 171.913130][ C0] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 171.919086][ C0] ? __pfx_lock_release+0x10/0x10 [ 171.924088][ C0] folio_alloc_mpol_noprof+0x36/0x50 [ 171.929363][ C0] shmem_alloc_and_add_folio+0x49b/0x13d0 [ 171.935078][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 171.941212][ C0] ? shmem_allowable_huge_orders+0x1f3/0x3b0 [ 171.947168][ C0] shmem_get_folio_gfp+0x5a9/0x20a0 [ 171.952365][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 171.957544][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 171.963148][ C0] ? fault_in_iov_iter_readable+0x49/0x280 [ 171.968939][ C0] ? fault_in_readable+0x187/0x2b0 [ 171.974032][ C0] ? fault_in_readable+0x288/0x2b0 [ 171.979117][ C0] shmem_write_begin+0x17e/0x460 [ 171.984043][ C0] ? __pfx_shmem_write_begin+0x10/0x10 [ 171.989479][ C0] ? fault_in_iov_iter_readable+0x229/0x280 [ 171.995353][ C0] generic_perform_write+0x344/0x6d0 [ 172.000628][ C0] ? __pfx_generic_perform_write+0x10/0x10 [ 172.006410][ C0] ? __pfx_generic_write_checks+0x10/0x10 [ 172.012105][ C0] ? rcu_read_lock_any_held+0xb7/0x160 [ 172.017567][ C0] ? file_update_time+0x2ab/0x450 [ 172.022581][ C0] shmem_file_write_iter+0xf9/0x120 [ 172.027770][ C0] vfs_write+0xa6d/0xc90 [ 172.031989][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 172.037789][ C0] ? __pfx_vfs_write+0x10/0x10 [ 172.042530][ C0] ? fdget_pos+0x24e/0x320 [ 172.046924][ C0] ksys_write+0x183/0x2b0 [ 172.051227][ C0] ? __pfx_ksys_write+0x10/0x10 [ 172.056053][ C0] ? do_syscall_64+0x100/0x230 [ 172.060804][ C0] ? do_syscall_64+0xb6/0x230 [ 172.065457][ C0] do_syscall_64+0xf3/0x230 [ 172.069939][ C0] ? clear_bhb_loop+0x35/0x90 [ 172.074597][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.080464][ C0] RIP: 0033:0x7f061677dff9 [ 172.084855][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.104438][ C0] RSP: 002b:00007f0617604038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 172.112830][ C0] RAX: ffffffffffffffda RBX: 00007f0616935f80 RCX: 00007f061677dff9 [ 172.120785][ C0] RDX: 00000000fffffd9d RSI: 0000000020000100 RDI: 0000000000000007 [ 172.128735][ C0] RBP: 00007f06167f0296 R08: 0000000000000000 R09: 0000000000000000 [ 172.136692][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.144651][ C0] R13: 0000000000000000 R14: 00007f0616935f80 R15: 00007ffffe648738 [ 172.152605][ C0] [ 172.155599][ C0] Modules linked in: [ 172.159502][ C0] CR2: fffffbfffb11e000 [ 172.163652][ C0] ---[ end trace 0000000000000000 ]--- [ 172.163688][ C1] BUG: unable to handle page fault for address: fffffbfffb11e000 [ 172.169097][ C0] RIP: 0010:kasan_check_range+0x82/0x290 [ 172.176786][ C1] #PF: supervisor read access in kernel mode [ 172.182383][ C0] Code: 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd <41> 80 3b 00 0f 85 c9 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00 [ 172.188326][ C1] #PF: error_code(0x0000) - not-present page [ 172.207897][ C0] RSP: 0018:ffffc90000006cd8 EFLAGS: 00010286 [ 172.213841][ C1] PGD 23ffe4067 P4D 23ffe4067 [ 172.219878][ C0] [ 172.219886][ C0] RAX: 0000000000000001 RBX: 1ffffffffb11e000 RCX: ffffffff81cf410f [ 172.224624][ C1] PUD 23ffe3067 [ 172.226930][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffffd88f0000 [ 172.234876][ C1] PMD 0 [ 172.238393][ C0] RBP: ffffffffffffffff R08: ffffffffd88f0007 R09: 1ffffffffb11e000 [ 172.246334][ C1] [ 172.249182][ C0] R10: dffffc0000000000 R11: fffffbfffb11e000 R12: ffffffffd88f0000 [ 172.257135][ C1] Oops: Oops: 0000 [#2] PREEMPT SMP KASAN PTI [ 172.259441][ C0] R13: 0000000000000008 R14: dffffc0000000001 R15: fffffbfffb11e001 [ 172.267402][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Tainted: G D 6.12.0-rc1-next-20241003-syzkaller #0 [ 172.273424][ C0] FS: 00007f06176046c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 172.281369][ C1] Tainted: [D]=DIE [ 172.292864][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.301787][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 172.305475][ C0] CR2: fffffbfffb11e000 CR3: 00000000281e0000 CR4: 00000000003526f0 [ 172.312039][ C1] RIP: 0010:kasan_check_range+0x82/0x290 [ 172.322068][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 172.330008][ C1] Code: 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd <41> 80 3b 00 0f 85 c9 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00 [ 172.335607][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 172.343548][ C1] RSP: 0018:ffffc900001e6b18 EFLAGS: 00010286 [ 172.363124][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 173.470518][ C0] Shutting down cpus with NMI [ 173.488831][ C0] Kernel Offset: disabled [ 173.493136][ C0] Rebooting in 86400 seconds..