last executing test programs: 8.459542086s ago: executing program 3 (id=418): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$eJzs3U1oM0UYwPEnaZImeXmbHERRkA6+CHpZ2uhZDNKCELC0jdgKwrbdaMialGyoRsS2J4+Kd0+Ch9KbBQ8F7VnoxZteRPDWi6BgBXVlv5LNV9PGpMH2/4OSycw8uzPZSXk27WYv3vj03UrJ0kp6Q6JJJRERkUuRrEQlEPEfo245IfLJd622A3n+wW8/PL22UUx6FWo5v/5CTik1N//Nex+m/G6ns3Kefevi19wv54+fP3nxz/o7ZUuVLVWtNZSutmo/NfQt01A7ZauiKbViGrplqHLVMupe+1f+dsza7m5T6dWdh+ndumFZSq82VcVoqkZNNepNpb+tl6tK0zT1MC0Ypni0uqrnRwzeHvNgMCH1el6fEZFUT0vxaCoDAgAAU9Wd/0edlH5Y/h/Syv83Za5QWFpVTud2/n/8zFnjwesnc37+f5rol/+/+KO3rY783zmdaOf/Ne/8oDQ8//9cbpD/92ZE98vI+X92AoPBaOYTPVWRjmdO/p/237+uwzePF9wC+T8AAAAAAAAAAAAAAAAAAAAAAP8Hl7adsW07EzwGP+1LCPznuJMGHf9ZEUk6R9/m+N9laxubknQv3HOOsfnxXnGv6D36Hc5ExBTjb7ubszaCK4+UIyvfmvt+/P5eccZtyZek7MTLomQk666nULxtL79aWFpUHj++dZlSOhyfk4w8Fo7/2l2dTnyuM97ff0KeexSK1yQj329LTUzZcSPb+/9oUalXXit0xafcfiLy860fFAAAAAAAxkxTLX3P3zVtULv3LSP5kvsxkSELkpG/+p/fL/Q9P49lnopNe/YAAAAAANwPVvODii5Ro+4WTLNfISUDm8ZQiHXUxEWkb+dEV038qi3PhGZ43fEkxLuDyX+d1xfBq3qTqOAfKZyBt5r8O6rIaOMJ5u/WRGLP/u43/XnTeUUOxF0AB+GmqFwjPNY9+HmnQvXt/Gjgdg79ibRqgo+NEgNeZ1np3U70ipUQ76mxI6MtgCc++/KP8b1BXjrxV8D7wzsfmoa9L9c5KF0FZxe9TfGJ/+IBAAAAcOvaSX9Q83K4OXwjkfDNcvjLPQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYzSRr/TrKgze++xtThUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYun8DAAD//7ct9c4=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101002, 0x12c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r4, 0x0) 7.42439104s ago: executing program 3 (id=429): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x2}, 0x64) r2 = fsmount(r0, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) 6.860045105s ago: executing program 4 (id=433): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r0, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 6.539974479s ago: executing program 4 (id=436): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x800) getsockopt(r0, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x400416, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0xfe, 0x1a5, &(0x7f0000000440)="$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") chmod(&(0x7f0000000040)='./file0/file0\x00', 0x124) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x145) fsync(r2) 6.249761761s ago: executing program 4 (id=438): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 5.539855101s ago: executing program 1 (id=439): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) socket$nl_rdma(0x10, 0x3, 0x14) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000300)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r4, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0xc, r4, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 4.978456646s ago: executing program 3 (id=440): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r2, r3}, 0xc) 4.654682259s ago: executing program 3 (id=441): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xfd, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x10, 0x2, 0x0) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0xffffffff}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001540)=@newtaction={0x18, 0x31, 0x829, 0x70bd25, 0x800, {}, [{0x4}]}, 0x22}, 0x1, 0x0, 0x0, 0x200080c1}, 0x4000880) syz_io_uring_setup(0x893, &(0x7f0000000140)={0x0, 0xaee4, 0x100, 0x1, 0x220}, &(0x7f0000000000), &(0x7f0000000340)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r5, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) read$ptp(r5, &(0x7f0000000040)=""/37, 0x25) 3.882065673s ago: executing program 1 (id=442): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fff}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x2, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.840536605s ago: executing program 2 (id=443): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) pipe2$9p(0x0, 0x80000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x55}, 0x8000053) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c0001400000000000000003200001800a00010071756f7461000000100002800c0001"], 0x110}}, 0x0) socket(0xa, 0x5, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000001200)=ANY=[@ANYRES64, @ANYRESHEX=r0, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32, @ANYRES8=r1, @ANYBLOB="e12a5948b006e1865f8acd053253372b8996c951d326a3e84cbcff68ed33b00059557ba10b375dd2a5520d56c91cc892adad24cb077a12c67b8b72db88a7d94e4cd74e3615be799de88c7b973133289afe4b48559c624be29b3b17564f66ffc014192ad1d59156d8d616078b9f4c293f6f19ae9b0bc4bcdf5d186d324e1f78d053c9b04e9291f4c1be89d825d9d229873f20f8f86dd28fa9519f41a37194696a70609e2ffd62f012dd36d197d5883383f7463561a5b875adbab46a5b61c2304847ac7fb3935dc970d32942e083757e2e1da2d742c80f0aa17bef573425"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000500)={'ip_vti0\x00', 0x0, 0x8, 0x7, 0x8, 0xe, {{0x8, 0x4, 0x2, 0x4, 0x20, 0x68, 0x0, 0x4, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0xb0, 0x3, 0xa, [{@private=0xa010102, 0x1}]}]}}}}}) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000040000000000000001000000950000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@getchain={0x3c, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0x1}, {0x0, 0x3}}, [{0x8, 0xb, 0x2}, {0x8}, {0x8, 0xb, 0xfe45}]}, 0x3c}}, 0x800) 3.71219034s ago: executing program 4 (id=444): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) 3.535856508s ago: executing program 4 (id=445): bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x30) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 3.513484038s ago: executing program 0 (id=446): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') pread64(r0, 0x0, 0x0, 0x99) 3.47572139s ago: executing program 3 (id=447): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffe00}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) syz_clone3(&(0x7f0000000700)={0x200000, &(0x7f0000000200), &(0x7f0000000280), 0x0, {0x17}, &(0x7f00000005c0)=""/75, 0x4b, 0x0, &(0x7f00000006c0)}, 0x58) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) 3.367920615s ago: executing program 1 (id=449): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x24, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x9, 0x2, 0x0, 0x70bd2c, 0x25dfdbff}, 0x10}, 0x1, 0x7}, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r3, 0x400, 0x1) fremovexattr(r3, &(0x7f0000000000)=@known='trusted.overlay.nlink\x00') bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup(r2) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x2, 0x0, 0x7}) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$eJzs3U1oM0UYwPEnaZImeXmbHERRkA6+CHpZ2uhZDNKCELC0jdgKwrbdaMialGyoRsS2J4+Kd0+Ch9KbBQ8F7VnoxZteRPDWi6BgBXVlv5LNV9PGpMH2/4OSycw8uzPZSXk27WYv3vj03UrJ0kp6Q6JJJRERkUuRrEQlEPEfo245IfLJd622A3n+wW8/PL22UUx6FWo5v/5CTik1N//Nex+m/G6ns3Kefevi19wv54+fP3nxz/o7ZUuVLVWtNZSutmo/NfQt01A7ZauiKbViGrplqHLVMupe+1f+dsza7m5T6dWdh+ndumFZSq82VcVoqkZNNepNpb+tl6tK0zT1MC0Ypni0uqrnRwzeHvNgMCH1el6fEZFUT0vxaCoDAgAAU9Wd/0edlH5Y/h/Syv83Za5QWFpVTud2/n/8zFnjwesnc37+f5rol/+/+KO3rY783zmdaOf/Ne/8oDQ8//9cbpD/92ZE98vI+X92AoPBaOYTPVWRjmdO/p/237+uwzePF9wC+T8AAAAAAAAAAAAAAAAAAAAAAP8Hl7adsW07EzwGP+1LCPznuJMGHf9ZEUk6R9/m+N9laxubknQv3HOOsfnxXnGv6D36Hc5ExBTjb7ubszaCK4+UIyvfmvt+/P5eccZtyZek7MTLomQk666nULxtL79aWFpUHj++dZlSOhyfk4w8Fo7/2l2dTnyuM97ff0KeexSK1yQj329LTUzZcSPb+/9oUalXXit0xafcfiLy860fFAAAAAAAxkxTLX3P3zVtULv3LSP5kvsxkSELkpG/+p/fL/Q9P49lnopNe/YAAAAAANwPVvODii5Ro+4WTLNfISUDm8ZQiHXUxEWkb+dEV038qi3PhGZ43fEkxLuDyX+d1xfBq3qTqOAfKZyBt5r8O6rIaOMJ5u/WRGLP/u43/XnTeUUOxF0AB+GmqFwjPNY9+HmnQvXt/Gjgdg79ibRqgo+NEgNeZ1np3U70ipUQ76mxI6MtgCc++/KP8b1BXjrxV8D7wzsfmoa9L9c5KF0FZxe9TfGJ/+IBAAAAcOvaSX9Q83K4OXwjkfDNcvjLPQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYzSRr/TrKgze++xtThUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYun8DAAD//7ct9c4=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101002, 0x12c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r4, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) 3.334556046s ago: executing program 0 (id=450): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000380)='./file0\x00', 0x2100017e) 3.333672496s ago: executing program 2 (id=451): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x48000) ioctl$BLKRASET(r0, 0x1262, 0x0) 3.233891791s ago: executing program 2 (id=452): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r4, 0x2000000a}}, 0x10) close_range(r2, r3, 0x0) 3.164004373s ago: executing program 3 (id=453): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) fstat(0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000400)='./file1\x00', &(0x7f0000000500)='system.posix_acl_default\x00', &(0x7f0000000940)={{}, {0x1, 0x3}, [], {0x4, 0x2}, [], {0x10, 0x5}, {0x20, 0x6}}, 0x24, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$nfs(0x0, 0x0, &(0x7f0000000080), 0x10840, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@keyring) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") 3.160287034s ago: executing program 2 (id=454): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) msgrcv(0x0, 0x0, 0x0, 0xe4b43f0e2aa28c96, 0x2000) 3.134175965s ago: executing program 0 (id=455): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="001f00000000000084652fed00000020a75a5287d9080000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r6}, &(0x7f0000000a00), &(0x7f0000000a40)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r6}, &(0x7f0000000880), &(0x7f00000008c0)=r5}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200000000000007d, &(0x7f0000000700)=ANY=[@ANYRESHEX=r0, @ANYRES32=r4, @ANYRESHEX, @ANYRES64=0x0, @ANYRESDEC=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) mkdir(0x0, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = syz_open_dev$evdev(0x0, 0x9, 0xc0100) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r10, 0x40189429, &(0x7f0000000440)={0x0, 0x9, 0x4}) 2.983981991s ago: executing program 1 (id=456): socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00'}, 0x18) setitimer(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0/file0\x00'}, 0x6e) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) 2.982365941s ago: executing program 2 (id=466): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0}) 729.204228ms ago: executing program 1 (id=457): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r2, r3+10000000}) r4 = add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000007c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x28}, 0x48, 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r7 = add_key$fscrypt_v1(&(0x7f0000001300), &(0x7f00000012c0)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6075ae1efae6210500000022040000001e3e2aa92fd796bc8c714a1ce1b876cba7ef54e6763fd7264c39ea00c508ba606269613800", 0x10}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r7, r6, r6, 0x0) keyctl$KEYCTL_MOVE(0x4, r4, r4, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESHEX], 0x2, 0x699, &(0x7f0000000140)="$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") execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 604.204434ms ago: executing program 0 (id=458): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 531.623877ms ago: executing program 2 (id=459): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[], 0xfa, 0x2c0, &(0x7f0000000100)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000840)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x0, 0x4, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x20, 0x20, 0x4}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000900)={0x0, @dev, @multicast2}, &(0x7f0000000940)=0xc) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bond0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x48}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a40)={'gretap0\x00', &(0x7f0000000980)={'syztnl0\x00', 0x0, 0x1, 0xd0, 0x0, 0x3, {{0x16, 0x4, 0x1, 0x1, 0x58, 0x65, 0x0, 0x9, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x11}, {[@generic={0x7, 0xa, "4c3840d69007de52"}, @lsrr={0x83, 0x3, 0xb1}, @end, @lsrr={0x83, 0x13, 0x85, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @rand_addr=0x64010100, @broadcast]}, @end, @lsrr={0x83, 0x1f, 0xf, [@local, @empty, @empty, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x3, 0xb1}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000b00)={'sit0\x00', &(0x7f0000000a80)={'gretap0\x00', 0x0, 0x20, 0x80, 0x3, 0x3, {{0xb, 0x4, 0x2, 0x38, 0x2c, 0x67, 0x0, 0xd7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @broadcast, {[@timestamp={0x44, 0x18, 0x82, 0x0, 0x4, [0x40, 0x7, 0x0, 0x10, 0x0]}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0xa}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3, 0x0, 0x0, 0x280, 0x8, 0x4d2005e, r4}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x8040) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x24, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10200000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000b40)={0x1d0, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r13, 0x0, 0x2}, 0x18) umount2(&(0x7f0000000040)='.\x00', 0x2) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r14, &(0x7f0000000180), 0x40010) getsockname$llc(r14, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000003c0)=0x10) 531.005877ms ago: executing program 4 (id=460): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0xb62c3c36328d8dd9, 0x0, '\x00', 0x0, @fallback=0x6b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='devlink_trap_report\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xcb, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x368, 0xa, 0x148, 0x0, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x4, 0x1, 0x1, 0x0, 0x1], 0x3}, {0x3, [0x2, 0x6, 0x1, 0x0, 0x0, 0x3], 0x4}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x280, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x280, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x511) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f00000006c0)={@id={0x2, 0x0, @a}}) fcntl$lock(r6, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x7, 0xffff}) recvmmsg(r5, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000001040), 0x0, &(0x7f0000000dc0)=""/239, 0xef}}], 0x1, 0x20, &(0x7f00000003c0)={0x77359400}) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$hidraw(&(0x7f0000000000), 0x6, 0x77f002) ioctl$HIDIOCSFEATURE(r7, 0xc0404806, &(0x7f0000002580)="3e3f5cf98eba99de62005c53203d86c0ae26c38566fff4516a2ff40b2b31f1be2fcac6c84157522a9e454778fa99e430c45663a80fef59db3649b7913740d412306ed0f9396d9471e2f5e5b394c8b596324e37aad55cad470a821b4ba07c013396e6951af8f0ab1338e1cbc67405e2c1276d809088442bd9e71372080814c2fd428126b6fd73b01beb8edfef0b7a35a823157f4ae9e37df439654bcbce7c6737623df2b70622caa02b8bda10b77a22fcfd13eec354dc20b38789219a694dcff8c623974b7bbd9f05a36c355b91714316c761a83e577bc93c697b4e7b0e69750000000000000000") r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8], 0x14}}, 0x0) 294.225077ms ago: executing program 0 (id=461): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x31a, &(0x7f0000000900)="$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") unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) 227.14722ms ago: executing program 1 (id=462): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x74}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) r2 = socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x4000000) 0s ago: executing program 0 (id=463): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101002, 0x12c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r5, 0x0) kernel console output (not intermixed with test programs): pected cc 0x0c25 length: 249 > 3 [ 72.521231][ T4272] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.528353][ T4268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.535675][ T4272] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.606414][ T4273] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.624260][ T4273] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.632649][ T4273] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.640657][ T4273] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.649322][ T4273] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.656676][ T4273] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.932163][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 73.058649][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 73.139449][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 73.170521][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 73.212782][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.220133][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.229254][ T4276] device bridge_slave_0 entered promiscuous mode [ 73.268565][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.276008][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.284106][ T4276] device bridge_slave_1 entered promiscuous mode [ 73.341094][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.349280][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.358469][ T4265] device bridge_slave_0 entered promiscuous mode [ 73.385388][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.392699][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.400518][ T4265] device bridge_slave_1 entered promiscuous mode [ 73.418434][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.433167][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.475031][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 73.501082][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.508412][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.516870][ T4274] device bridge_slave_0 entered promiscuous mode [ 73.535987][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.543264][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.551174][ T4264] device bridge_slave_0 entered promiscuous mode [ 73.561336][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.570952][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.578713][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.587244][ T4274] device bridge_slave_1 entered promiscuous mode [ 73.596985][ T4276] team0: Port device team_slave_0 added [ 73.610740][ T4276] team0: Port device team_slave_1 added [ 73.616918][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.624198][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.632132][ T4264] device bridge_slave_1 entered promiscuous mode [ 73.646961][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.729730][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.741771][ T4265] team0: Port device team_slave_0 added [ 73.750281][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.764967][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.772105][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.798466][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.812590][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.823312][ T4265] team0: Port device team_slave_1 added [ 73.839129][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.853330][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.860332][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.886658][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.952833][ T4264] team0: Port device team_slave_0 added [ 73.983583][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.990699][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.017111][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.030057][ T4264] team0: Port device team_slave_1 added [ 74.038367][ T4274] team0: Port device team_slave_0 added [ 74.052398][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.059522][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.067651][ T4275] device bridge_slave_0 entered promiscuous mode [ 74.076519][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.083785][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.091823][ T4275] device bridge_slave_1 entered promiscuous mode [ 74.108833][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.116009][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.142345][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.155709][ T4274] team0: Port device team_slave_1 added [ 74.184117][ T4276] device hsr_slave_0 entered promiscuous mode [ 74.191179][ T4276] device hsr_slave_1 entered promiscuous mode [ 74.218041][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.225221][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.252046][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.285715][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.292767][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.318898][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.331045][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.338423][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.364629][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.377961][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.403752][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.410757][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.437124][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.454226][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.473050][ T4273] Bluetooth: hci1: command 0x0409 tx timeout [ 74.473066][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 74.512656][ T4265] device hsr_slave_0 entered promiscuous mode [ 74.519394][ T4265] device hsr_slave_1 entered promiscuous mode [ 74.526326][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.534464][ T4265] Cannot create hsr debugfs directory [ 74.552696][ T47] Bluetooth: hci2: command 0x0409 tx timeout [ 74.608741][ T4264] device hsr_slave_0 entered promiscuous mode [ 74.615792][ T4264] device hsr_slave_1 entered promiscuous mode [ 74.622947][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.630537][ T4264] Cannot create hsr debugfs directory [ 74.636146][ T47] Bluetooth: hci3: command 0x0409 tx timeout [ 74.646266][ T4275] team0: Port device team_slave_0 added [ 74.662761][ T4274] device hsr_slave_0 entered promiscuous mode [ 74.669542][ T4274] device hsr_slave_1 entered promiscuous mode [ 74.676713][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.684465][ T4274] Cannot create hsr debugfs directory [ 74.703357][ T4275] team0: Port device team_slave_1 added [ 74.712269][ T4272] Bluetooth: hci4: command 0x0409 tx timeout [ 74.812622][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.819618][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.845829][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.880481][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.887884][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.915433][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.042606][ T4275] device hsr_slave_0 entered promiscuous mode [ 75.049623][ T4275] device hsr_slave_1 entered promiscuous mode [ 75.056696][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.064420][ T4275] Cannot create hsr debugfs directory [ 75.147125][ T4276] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.173562][ T4276] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.197003][ T4276] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.210449][ T4276] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.276792][ T4265] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.287031][ T4265] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.333894][ T4265] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.343464][ T4265] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.403731][ T4264] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.428244][ T4264] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.440247][ T4264] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.470654][ T4264] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.499268][ T4274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.508861][ T4274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.523046][ T4274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.551142][ T4274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.638317][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.658722][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.669249][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.700748][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.728780][ T4275] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.743313][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.754215][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.764225][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.771505][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.784221][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.808141][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.817684][ T4275] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.827552][ T4275] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.838211][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.846702][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.856310][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.865305][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.872483][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.902427][ T4275] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.911928][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.923473][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.935992][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.947674][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.959439][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.967705][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.985650][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.000434][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.030055][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.039246][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.048633][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.055826][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.077286][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.085698][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.096041][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.123688][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.131679][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.140966][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.151150][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.158331][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.168205][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.177603][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.186591][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.193799][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.201745][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.210683][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.219381][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.226533][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.234722][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.245012][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.257726][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.266610][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.275470][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.284375][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.307049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.316919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.333241][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.346550][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.357513][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.376558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.385864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.396206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.406927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.417844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.427532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.436876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.445840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.455025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.482478][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.493049][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.501741][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.511900][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.527388][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.539129][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.552862][ T4272] Bluetooth: hci1: command 0x041b tx timeout [ 76.558952][ T4272] Bluetooth: hci0: command 0x041b tx timeout [ 76.573481][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.590982][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.629497][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.632323][ T4272] Bluetooth: hci2: command 0x041b tx timeout [ 76.644381][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.660597][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.683214][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.699744][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.712516][ T4272] Bluetooth: hci3: command 0x041b tx timeout [ 76.739182][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.748872][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.763809][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.784634][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.792361][ T4272] Bluetooth: hci4: command 0x041b tx timeout [ 76.807429][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.831558][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.888333][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.899173][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.933723][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.940901][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.963390][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.973292][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.992886][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.000051][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.033615][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.059820][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.073020][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.108913][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.133216][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.140834][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.148965][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.159481][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.167728][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.178010][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.200679][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.220356][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.229326][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.238673][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.248926][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.258460][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.267697][ T4346] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.274914][ T4346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.285357][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.294699][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.330396][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.348204][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.363706][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.382468][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.390725][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.402853][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.415750][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.426343][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.435491][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.442676][ T4346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.450352][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.459228][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.468483][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.505584][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.516013][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.526541][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.541622][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.550897][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.607089][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.620064][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.629458][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.639580][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.649335][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.659304][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.668586][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.689631][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.707553][ T4276] device veth0_vlan entered promiscuous mode [ 77.715546][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.726592][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.737095][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.745455][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.754214][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.763232][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.771628][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.779659][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.788852][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.800831][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.809858][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.825117][ T4265] device veth0_vlan entered promiscuous mode [ 77.831711][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.847260][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.866963][ T4276] device veth1_vlan entered promiscuous mode [ 77.914872][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.934166][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.953159][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.981831][ T4265] device veth1_vlan entered promiscuous mode [ 78.040220][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.050212][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.073341][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.092429][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.109954][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.119152][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.128347][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.139181][ T4264] device veth0_vlan entered promiscuous mode [ 78.174860][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.186238][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.194600][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.204888][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.218536][ T4276] device veth0_macvtap entered promiscuous mode [ 78.237106][ T4264] device veth1_vlan entered promiscuous mode [ 78.259298][ T4276] device veth1_macvtap entered promiscuous mode [ 78.283666][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.294630][ T4265] device veth0_macvtap entered promiscuous mode [ 78.310142][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.322822][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.331144][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.340815][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.372940][ T4264] device veth0_macvtap entered promiscuous mode [ 78.380918][ T4265] device veth1_macvtap entered promiscuous mode [ 78.390867][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.410394][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.419003][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.428863][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.437858][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.457228][ T4264] device veth1_macvtap entered promiscuous mode [ 78.471144][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.488815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.497979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.507503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.517888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.527186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.548708][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.560598][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.572738][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.585347][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.594868][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.605689][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.616437][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.627007][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.632401][ T4272] Bluetooth: hci0: command 0x040f tx timeout [ 78.641783][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.643353][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 78.651115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.664476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.672190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.680792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.690242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.699042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.707935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.716133][ T4273] Bluetooth: hci2: command 0x040f tx timeout [ 78.729996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.760245][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.770937][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.783810][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.792738][ T47] Bluetooth: hci3: command 0x040f tx timeout [ 78.800911][ T4276] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.810979][ T4276] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.820027][ T4276] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.828869][ T4276] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.845466][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.853076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.862258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.872417][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 78.882951][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.899652][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.918248][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.929231][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.946317][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.967568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.986659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.999657][ T4264] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.009641][ T4264] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.019131][ T4264] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.028026][ T4264] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.063483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.073120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.083065][ T4265] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.091817][ T4265] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.103078][ T4265] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.111840][ T4265] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.161337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.174296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.184607][ T4274] device veth0_vlan entered promiscuous mode [ 79.337828][ T4274] device veth1_vlan entered promiscuous mode [ 79.359447][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.372375][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.398270][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.436370][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.445628][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.456364][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.510062][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.521590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.543591][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.548536][ T4274] device veth0_macvtap entered promiscuous mode [ 79.558330][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.566723][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.577938][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.584876][ T4274] device veth1_macvtap entered promiscuous mode [ 79.608260][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.617964][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.638559][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.648035][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.689244][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.699253][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.712344][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.720967][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.746236][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.757809][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.768078][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.779102][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.789204][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.800267][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.812312][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.822274][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.832241][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.850529][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.861233][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.871085][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.881689][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.896595][ T4275] device veth0_vlan entered promiscuous mode [ 79.911903][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.926993][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.937680][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.948356][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.958393][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.969245][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.987752][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.997509][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.007751][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.030981][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.041883][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.059622][ T4275] device veth1_vlan entered promiscuous mode [ 80.075452][ T4274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.085997][ T4274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.096162][ T4274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.105355][ T4274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.126097][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.141788][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.150069][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.311875][ T4379] netlink: 'syz.1.2': attribute type 7 has an invalid length. [ 80.332647][ T4379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 80.354764][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.365833][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.378038][ T4275] device veth0_macvtap entered promiscuous mode [ 80.430689][ T27] audit: type=1107 audit(1764346965.169:2): pid=4380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 80.458598][ T4381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 80.478555][ T4275] device veth1_macvtap entered promiscuous mode [ 80.497342][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.517805][ T4383] device bridge0 entered promiscuous mode [ 80.529665][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.551840][ T4383] bridge0: port 3(macsec1) entered blocking state [ 80.555715][ T4388] loop1: detected capacity change from 0 to 512 [ 80.572779][ T4383] bridge0: port 3(macsec1) entered disabled state [ 80.597378][ T4383] device bridge0 left promiscuous mode [ 80.646532][ T4388] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 80.660457][ T4388] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.710511][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.718253][ T47] Bluetooth: hci1: command 0x0419 tx timeout [ 80.718293][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 80.732703][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.741669][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.756716][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.767838][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.778427][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.791156][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.802600][ T4273] Bluetooth: hci2: command 0x0419 tx timeout [ 80.804254][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.824865][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.835142][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.846266][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.859092][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.864025][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 80.879524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.882883][ T4273] Bluetooth: hci3: command 0x0419 tx timeout [ 80.898963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.915017][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.926461][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.938571][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.950267][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.961491][ T4273] Bluetooth: hci4: command 0x0419 tx timeout [ 80.968167][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.978927][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.989118][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.000054][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.011675][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.022267][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.031182][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.100236][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.137863][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.287474][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.308672][ T4275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.317869][ T4275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.326689][ T4275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.338558][ T4275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.198867][ T4400] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 82.204337][ T4401] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8'. [ 82.222630][ T4401] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8'. [ 82.241810][ T27] audit: type=1326 audit(1764346966.979:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4396 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc5f8f749 code=0x7ffc0000 [ 82.279237][ T4402] netlink: 'syz.1.7': attribute type 13 has an invalid length. [ 82.296842][ T27] audit: type=1326 audit(1764346966.979:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4396 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc5f8f749 code=0x7ffc0000 [ 82.554792][ T4412] Zero length message leads to an empty skb [ 82.928774][ T4402] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.936720][ T4402] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.524877][ T4402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.636823][ T4402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.775967][ T4418] loop3: detected capacity change from 0 to 128 [ 83.958783][ T4418] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 83.967070][ T4418] FAT-fs (loop3): Filesystem has been set read-only [ 83.974192][ T4418] syz.3.11: attempt to access beyond end of device [ 83.974192][ T4418] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 83.988855][ T4418] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 84.034257][ T4418] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 84.094792][ T4418] syz.3.11: attempt to access beyond end of device [ 84.094792][ T4418] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 84.161279][ T27] audit: type=1800 audit(1764346968.849:5): pid=4418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.11" name="file2" dev="loop3" ino=1048592 res=0 errno=0 [ 84.354389][ T4418] syz.3.11 (4418) used greatest stack depth: 20224 bytes left [ 85.081436][ T4402] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.090637][ T4402] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.099623][ T4402] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.108582][ T4402] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.463506][ T4429] syz.3.13 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 85.532558][ T4397] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 85.972860][ T4397] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 86.357232][ T4434] loop0: detected capacity change from 0 to 512 [ 86.393762][ T4439] syz.3.16[4439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.393868][ T4439] syz.3.16[4439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.441385][ T4434] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.1: bad orphan inode 11862016 [ 86.465105][ T4407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.491363][ T4434] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 86.533285][ T4407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.546313][ T4434] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.580137][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.599103][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.613194][ T4447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'. [ 86.634574][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.653766][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.682783][ T4447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17'. [ 86.795634][ T1169] cfg80211: failed to load regulatory.db [ 86.815682][ T4434] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 86.873615][ T4451] loop3: detected capacity change from 0 to 4096 [ 86.900495][ T4451] EXT4-fs (loop3): invalid inodes per group: 0 [ 86.900495][ T4451] [ 86.968355][ T27] audit: type=1326 audit(1764346971.709:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4454 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956598f749 code=0x7ffc0000 [ 87.054108][ T4451] loop3: detected capacity change from 0 to 128 [ 87.091443][ T27] audit: type=1326 audit(1764346971.709:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4454 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956598f749 code=0x7ffc0000 [ 87.101893][ T4451] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 87.135313][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 87.160089][ T27] audit: type=1326 audit(1764346971.709:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4454 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956598f749 code=0x7ffc0000 [ 87.168142][ T4457] tipc: Started in network mode [ 87.233818][ T4457] tipc: Node identity d6d3b1cefc3d, cluster identity 4711 [ 87.291750][ T4451] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 87.302268][ T27] audit: type=1326 audit(1764346971.739:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4454 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f956598f749 code=0x7ffc0000 [ 87.328431][ T4457] tipc: Enabled bearer , priority 0 [ 87.400482][ T4460] device syzkaller0 entered promiscuous mode [ 87.412245][ T27] audit: type=1326 audit(1764346971.739:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4454 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956598f749 code=0x7ffc0000 [ 87.474163][ T27] audit: type=1326 audit(1764346971.739:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4454 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956598f749 code=0x7ffc0000 [ 87.528814][ T27] audit: type=1326 audit(1764346971.739:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4454 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956598f749 code=0x7ffc0000 [ 87.559923][ T27] audit: type=1326 audit(1764346971.739:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4454 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956598f749 code=0x7ffc0000 [ 87.616574][ T27] audit: type=1326 audit(1764346971.739:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4454 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f956598f749 code=0x7ffc0000 [ 87.644908][ T4456] tipc: Resetting bearer [ 87.654865][ T4407] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 87.709270][ T27] audit: type=1326 audit(1764346971.739:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4454 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956598f749 code=0x7ffc0000 [ 87.795241][ T4477] ======================================================= [ 87.795241][ T4477] WARNING: The mand mount option has been deprecated and [ 87.795241][ T4477] and is ignored by this kernel. Remove the mand [ 87.795241][ T4477] option from the mount to silence this warning. [ 87.795241][ T4477] ======================================================= [ 89.021975][ C0] sched: RT throttling activated [ 89.024986][ T1169] tipc: Node number set to 720286158 [ 89.058182][ T4456] tipc: Disabling bearer [ 89.228968][ T4494] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 89.626815][ T4499] syz.2.32[4499] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.626923][ T4499] syz.2.32[4499] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.657475][ T4500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.33'. [ 89.741136][ T4502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.33'. [ 89.929878][ T4507] loop3: detected capacity change from 0 to 512 [ 90.065265][ T4507] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.34: bad orphan inode 11862016 [ 90.107526][ T4507] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 90.197985][ T4507] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.430537][ T4525] loop4: detected capacity change from 0 to 128 [ 90.580607][ T4525] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 90.588602][ T4525] FAT-fs (loop4): Filesystem has been set read-only [ 90.595362][ T4525] syz.4.37: attempt to access beyond end of device [ 90.595362][ T4525] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 90.610111][ T4525] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 90.618241][ T4525] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 90.705232][ T4525] syz.4.37: attempt to access beyond end of device [ 90.705232][ T4525] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 90.764320][ T4507] siw: device registration error -23 [ 91.296256][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 91.688342][ T4544] netlink: 128 bytes leftover after parsing attributes in process `syz.1.43'. [ 91.698421][ T4544] netlink: 16 bytes leftover after parsing attributes in process `syz.1.43'. [ 92.070320][ T4542] siw: device registration error -23 [ 92.602152][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 92.602180][ T27] audit: type=1326 audit(1764346977.339:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17978f749 code=0x7ffc0000 [ 92.665244][ T4548] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 92.753108][ T27] audit: type=1326 audit(1764346977.339:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17978f749 code=0x7ffc0000 [ 92.798592][ T4551] loop1: detected capacity change from 0 to 1024 [ 92.817139][ T4551] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.824412][ T27] audit: type=1326 audit(1764346977.389:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7ff17978f749 code=0x7ffc0000 [ 92.866324][ T4551] ext4: Unknown parameter 'seclabel' [ 92.936597][ T27] audit: type=1326 audit(1764346977.389:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17978f749 code=0x7ffc0000 [ 93.022202][ T27] audit: type=1326 audit(1764346977.389:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17978f749 code=0x7ffc0000 [ 93.120391][ T27] audit: type=1326 audit(1764346977.469:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff17978e1ff code=0x7ffc0000 [ 93.323759][ T27] audit: type=1326 audit(1764346977.469:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17978f749 code=0x7ffc0000 [ 93.346261][ T27] audit: type=1326 audit(1764346977.469:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17978f749 code=0x7ffc0000 [ 93.506669][ T4567] loop1: detected capacity change from 0 to 128 [ 93.761408][ T4567] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 93.769479][ T4567] FAT-fs (loop1): Filesystem has been set read-only [ 93.776269][ T4567] syz.1.52: attempt to access beyond end of device [ 93.776269][ T4567] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 93.790822][ T4567] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 93.798901][ T4567] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 93.860987][ T4567] syz.1.52: attempt to access beyond end of device [ 93.860987][ T4567] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 93.900754][ T27] audit: type=1800 audit(1764346978.619:43): pid=4567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.52" name="file2" dev="loop1" ino=1048599 res=0 errno=0 [ 94.599838][ T4585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.60'. [ 94.641046][ T4585] loop3: detected capacity change from 0 to 2048 [ 94.697014][ T4585] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 94.963775][ T4593] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 95.042867][ T4593] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 184 with error 28 [ 95.100035][ T4593] EXT4-fs (loop3): This should not happen!! Data will be lost [ 95.100035][ T4593] [ 95.140985][ T4593] EXT4-fs (loop3): Total free blocks count 0 [ 95.162499][ T4593] EXT4-fs (loop3): Free/Dirty block details [ 95.172629][ T4600] loop1: detected capacity change from 0 to 512 [ 95.182091][ T4593] EXT4-fs (loop3): free_blocks=2415919104 [ 95.195912][ T4593] EXT4-fs (loop3): dirty_blocks=192 [ 95.208577][ T4593] EXT4-fs (loop3): Block reservation details [ 95.220676][ T4600] EXT4-fs (loop1): Unsupported blocksize for fs-verity [ 95.221662][ T4593] EXT4-fs (loop3): i_reserved_data_blocks=12 [ 95.510245][ T4547] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 95.841818][ T4614] loop1: detected capacity change from 0 to 128 [ 95.911259][ T4614] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 95.933106][ T4616] IPv6: Can't replace route, no match found [ 95.939638][ T4614] FAT-fs (loop1): Filesystem has been set read-only [ 95.973549][ T4614] syz.1.67: attempt to access beyond end of device [ 95.973549][ T4614] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 96.022104][ T4614] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 96.052155][ T4614] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 96.073126][ T4614] syz.1.67: attempt to access beyond end of device [ 96.073126][ T4614] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 96.119292][ T27] audit: type=1800 audit(1764346980.859:44): pid=4614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.67" name="file2" dev="loop1" ino=1048600 res=0 errno=0 [ 96.549905][ T4638] loop2: detected capacity change from 0 to 512 [ 96.678318][ T4638] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.75: bg 0: block 393: padding at end of block bitmap is not set [ 96.680434][ T4638] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 96.683661][ T4638] EXT4-fs (loop2): 2 truncates cleaned up [ 96.683715][ T4638] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 96.808673][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 96.904255][ T4645] loop4: detected capacity change from 0 to 512 [ 96.935489][ T4645] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 96.935510][ T4645] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 96.979436][ T4645] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3836: comm syz.4.78: Allocating blocks 41-42 which overlap fs metadata [ 96.991315][ T4645] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3836: comm syz.4.78: Allocating blocks 41-42 which overlap fs metadata [ 97.152906][ T4645] EXT4-fs error (device loop4): ext4_acquire_dquot:6809: comm syz.4.78: Failed to acquire dquot type 1 [ 97.183174][ T4645] EXT4-fs error (device loop4): mb_free_blocks:1810: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 97.227448][ T4645] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #12: comm syz.4.78: corrupted inode contents [ 97.293260][ T4645] EXT4-fs error (device loop4): ext4_dirty_inode:6133: inode #12: comm syz.4.78: mark_inode_dirty error [ 97.342201][ T4645] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #12: comm syz.4.78: corrupted inode contents [ 97.395123][ T4645] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #12: comm syz.4.78: mark_inode_dirty error [ 97.437970][ T4645] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #12: comm syz.4.78: corrupted inode contents [ 97.447362][ T4661] loop0: detected capacity change from 0 to 128 [ 97.490017][ T4645] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 97.518744][ T4661] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 97.523980][ T4664] loop2: detected capacity change from 0 to 512 [ 97.542489][ T4645] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #12: comm syz.4.78: corrupted inode contents [ 97.549397][ T4661] FAT-fs (loop0): Filesystem has been set read-only [ 97.581082][ T4645] EXT4-fs error (device loop4): ext4_truncate:4318: inode #12: comm syz.4.78: mark_inode_dirty error [ 97.601775][ T4664] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 97.613547][ T4661] syz.0.85: attempt to access beyond end of device [ 97.613547][ T4661] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 97.631326][ T4664] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.651760][ T4645] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 97.669412][ T4664] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 97.688830][ T4645] EXT4-fs (loop4): 1 truncate cleaned up [ 97.697064][ T4645] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 97.714393][ T4664] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 97.714910][ T4645] EXT4-fs (loop4): unmounting filesystem. [ 97.730102][ T4661] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 97.739036][ T4661] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 97.754030][ T4664] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 97.772817][ T4669] Illegal XDP return value 4294967274 on prog (id 37) dev N/A, expect packet loss! [ 97.779252][ T4664] System zones: [ 97.785123][ T4661] syz.0.85: attempt to access beyond end of device [ 97.785123][ T4661] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.793045][ T4664] 0-2 [ 97.811585][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 97.811598][ T27] audit: type=1800 audit(1764346982.549:45): pid=4661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.85" name="file2" dev="loop0" ino=1048601 res=0 errno=0 [ 97.823278][ T4664] , 18-18, 34-35 [ 97.908637][ T4664] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 98.029548][ T4664] fscrypt (loop2, inode 12): Error -61 getting encryption context [ 98.160266][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 98.324269][ T4685] netlink: 'syz.2.93': attribute type 7 has an invalid length. [ 98.347347][ T4685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'. [ 98.615342][ T4671] netlink: 20 bytes leftover after parsing attributes in process `syz.1.89'. [ 99.875335][ T4704] loop0: detected capacity change from 0 to 128 [ 99.914694][ T4706] netlink: 'syz.3.104': attribute type 21 has an invalid length. [ 99.941324][ T4704] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 99.960073][ T4706] netlink: 132 bytes leftover after parsing attributes in process `syz.3.104'. [ 99.970607][ T4704] FAT-fs (loop0): Filesystem has been set read-only [ 99.990528][ T4706] netlink: 20 bytes leftover after parsing attributes in process `syz.3.104'. [ 100.001785][ T4704] syz.0.102: attempt to access beyond end of device [ 100.001785][ T4704] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 100.011141][ T4708] netlink: 64 bytes leftover after parsing attributes in process `syz.2.103'. [ 100.026193][ T4704] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 100.042572][ T4704] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 100.065503][ T4704] syz.0.102: attempt to access beyond end of device [ 100.065503][ T4704] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 100.088426][ T27] audit: type=1800 audit(1764346984.829:46): pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.102" name="file2" dev="loop0" ino=1048602 res=0 errno=0 [ 100.482568][ T4702] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 100.546594][ T4719] loop0: detected capacity change from 0 to 2048 [ 101.048551][ T4734] smc: net device bond0 applied user defined pnetid SYZ0 [ 101.633670][ T4746] loop1: detected capacity change from 0 to 128 [ 103.191312][ T4745] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 103.199294][ T4745] FAT-fs (loop1): Filesystem has been set read-only [ 103.206005][ T4745] syz.1.117: attempt to access beyond end of device [ 103.206005][ T4745] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 103.219790][ T4745] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 103.227714][ T4745] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 103.243547][ T4745] syz.1.117: attempt to access beyond end of device [ 103.243547][ T4745] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 103.258306][ T27] audit: type=1800 audit(1764346987.999:47): pid=4745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.117" name="file2" dev="loop1" ino=1048603 res=0 errno=0 [ 103.642197][ T4756] loop1: detected capacity change from 0 to 512 [ 103.690014][ T4755] mmap: syz.4.122 (4755) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.774072][ T4756] Quota error (device loop1): v2_read_file_info: Block with free entry 652037 out of range (1, 6). [ 103.787623][ T4756] EXT4-fs warning (device loop1): ext4_enable_quotas:7061: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 103.810992][ T4756] EXT4-fs (loop1): mount failed [ 103.886143][ T4768] netlink: 'syz.2.125': attribute type 10 has an invalid length. [ 104.070908][ T4768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.077556][ T4772] loop4: detected capacity change from 0 to 256 [ 104.111162][ T4772] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.125054][ T4768] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 104.199926][ T4772] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.333915][ T4778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.129'. [ 104.491520][ T4774] loop1: detected capacity change from 0 to 8192 [ 105.086474][ T4787] loop4: detected capacity change from 0 to 128 [ 107.735420][ T4785] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 107.743404][ T4785] FAT-fs (loop4): Filesystem has been set read-only [ 107.750097][ T4785] syz.4.132: attempt to access beyond end of device [ 107.750097][ T4785] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 107.764023][ T4785] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 107.771892][ T4785] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 107.828633][ T4785] syz.4.132: attempt to access beyond end of device [ 107.828633][ T4785] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 107.842817][ T27] audit: type=1800 audit(1764346992.589:48): pid=4785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.132" name="file2" dev="loop4" ino=1048606 res=0 errno=0 [ 108.047437][ T4795] loop0: detected capacity change from 0 to 512 [ 108.117219][ T4795] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 109.892204][ T27] audit: type=1326 audit(1764346994.619:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4834 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4018f749 code=0x7ffc0000 [ 110.059402][ T4839] loop1: detected capacity change from 0 to 128 [ 110.161237][ T4839] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 110.169263][ T4839] FAT-fs (loop1): Filesystem has been set read-only [ 110.176077][ T4839] syz.1.148: attempt to access beyond end of device [ 110.176077][ T4839] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 110.190738][ T4839] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 110.198805][ T4839] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 110.241030][ T4839] syz.1.148: attempt to access beyond end of device [ 110.241030][ T4839] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 110.322570][ T27] audit: type=1326 audit(1764346994.619:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4834 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4018f749 code=0x7ffc0000 [ 110.619973][ T4839] syz.1.148 (4839) used greatest stack depth: 20160 bytes left [ 110.773747][ T27] audit: type=1326 audit(1764346994.669:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4834 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca4018f749 code=0x7ffc0000 [ 110.797368][ T27] audit: type=1326 audit(1764346994.669:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4834 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4018f749 code=0x7ffc0000 [ 110.850755][ T27] audit: type=1326 audit(1764346994.669:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4834 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4018f749 code=0x7ffc0000 [ 110.934367][ T4841] loop3: detected capacity change from 0 to 512 [ 110.940926][ T27] audit: type=1326 audit(1764346994.669:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4834 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca4018f749 code=0x7ffc0000 [ 111.008708][ T27] audit: type=1326 audit(1764346994.679:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4834 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4018f749 code=0x7ffc0000 [ 111.062220][ T4850] program syz.4.154 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.069743][ T4841] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 111.107655][ T4841] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.113964][ T27] audit: type=1326 audit(1764346994.679:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4834 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca4018f749 code=0x7ffc0000 [ 111.254494][ T27] audit: type=1326 audit(1764346994.679:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4834 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4018f749 code=0x7ffc0000 [ 111.311211][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 111.355801][ T27] audit: type=1326 audit(1764346994.679:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4834 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca4018f749 code=0x7ffc0000 [ 112.477495][ T4867] loop1: detected capacity change from 0 to 512 [ 112.561615][ T4867] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 112.599832][ T4867] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.633591][ T4874] loop0: detected capacity change from 0 to 1024 [ 112.647430][ T4874] EXT4-fs: Ignoring removed orlov option [ 112.684377][ T4867] EXT4-fs error (device loop1): ext4_acquire_dquot:6809: comm syz.1.160: Failed to acquire dquot type 0 [ 112.696433][ T4874] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 112.755713][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 112.893804][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 113.080572][ T4882] loop1: detected capacity change from 0 to 2048 [ 113.108629][ T4884] sg_write: data in/out 156/65394 bytes for SCSI command 0x0-- guessing data in; [ 113.108629][ T4884] program syz.2.167 not setting count and/or reply_len properly [ 113.137818][ T4884] loop2: detected capacity change from 0 to 128 [ 113.284723][ T4882] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 114.250809][ T4901] loop0: detected capacity change from 0 to 1024 [ 114.284972][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 114.303197][ T4901] EXT4-fs: inline encryption not supported [ 114.340628][ T4898] loop3: detected capacity change from 0 to 2048 [ 114.385296][ T4901] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 114.411030][ T4898] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 114.907208][ T27] kauditd_printk_skb: 94 callbacks suppressed [ 114.907244][ T27] audit: type=1326 audit(1764346999.639:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4897 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4018f749 code=0x7ffc0000 [ 115.252029][ T27] audit: type=1326 audit(1764346999.689:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4897 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4018f749 code=0x7ffc0000 [ 115.274978][ T27] audit: type=1326 audit(1764346999.709:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4897 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4018f749 code=0x7ffc0000 [ 115.309037][ T27] audit: type=1326 audit(1764346999.709:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4897 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca4018f749 code=0x7ffc0000 [ 115.309080][ T27] audit: type=1326 audit(1764346999.729:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4897 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4018f749 code=0x7ffc0000 [ 115.309116][ T27] audit: type=1326 audit(1764346999.739:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4897 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4018f749 code=0x7ffc0000 [ 115.309151][ T27] audit: type=1326 audit(1764346999.739:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4897 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4018f749 code=0x7ffc0000 [ 115.309186][ T27] audit: type=1326 audit(1764346999.759:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4897 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4018f749 code=0x7ffc0000 [ 115.309221][ T27] audit: type=1326 audit(1764346999.759:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4896 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff17978e1ff code=0x7ffc0000 [ 115.309257][ T27] audit: type=1326 audit(1764346999.759:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4897 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fca4018f749 code=0x7ffc0000 [ 115.513403][ T4898] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 115.514240][ T4898] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 228 with error 28 [ 115.514273][ T4898] EXT4-fs (loop3): This should not happen!! Data will be lost [ 115.514273][ T4898] [ 115.514290][ T4898] EXT4-fs (loop3): Total free blocks count 0 [ 115.514306][ T4898] EXT4-fs (loop3): Free/Dirty block details [ 115.514321][ T4898] EXT4-fs (loop3): free_blocks=2415919104 [ 115.514339][ T4898] EXT4-fs (loop3): dirty_blocks=240 [ 115.514353][ T4898] EXT4-fs (loop3): Block reservation details [ 115.514366][ T4898] EXT4-fs (loop3): i_reserved_data_blocks=15 [ 115.708912][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 116.045525][ T4916] tty tty22: ldisc open failed (-12), clearing slot 21 [ 118.115093][ T4967] loop3: detected capacity change from 0 to 512 [ 118.173474][ T4967] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 120.947392][ T27] kauditd_printk_skb: 217 callbacks suppressed [ 120.947407][ T27] audit: type=1326 audit(1764347005.689:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4979 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17978f749 code=0x7ffc0000 [ 121.075356][ T27] audit: type=1326 audit(1764347005.739:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4979 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff17978f749 code=0x7ffc0000 [ 121.097832][ T27] audit: type=1326 audit(1764347005.739:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4979 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17978f749 code=0x7ffc0000 [ 121.121366][ T27] audit: type=1326 audit(1764347005.739:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4979 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff17978f749 code=0x7ffc0000 [ 121.145996][ T27] audit: type=1326 audit(1764347005.739:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4979 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17978f749 code=0x7ffc0000 [ 121.204589][ T27] audit: type=1326 audit(1764347005.739:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4979 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff17978f749 code=0x7ffc0000 [ 121.209137][ T4988] loop1: detected capacity change from 0 to 128 [ 121.266221][ T27] audit: type=1326 audit(1764347005.749:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4979 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17978f749 code=0x7ffc0000 [ 121.335360][ T27] audit: type=1326 audit(1764347005.769:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4979 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff17978f749 code=0x7ffc0000 [ 121.363486][ T27] audit: type=1326 audit(1764347005.769:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4979 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17978f749 code=0x7ffc0000 [ 121.386960][ T27] audit: type=1326 audit(1764347005.769:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4979 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7ff17978f749 code=0x7ffc0000 [ 121.449547][ T4988] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 121.488546][ T4988] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 121.714125][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 122.606613][ T5007] loop1: detected capacity change from 0 to 512 [ 122.660577][ T4435] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 122.981686][ T5015] tipc: Enabled bearer , priority 0 [ 122.997041][ T5015] device syzkaller0 entered promiscuous mode [ 123.089183][ T5023] loop0: detected capacity change from 0 to 128 [ 123.188416][ T5023] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 123.196498][ T5023] FAT-fs (loop0): Filesystem has been set read-only [ 123.203238][ T5023] syz.0.210: attempt to access beyond end of device [ 123.203238][ T5023] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 123.217782][ T5023] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 123.225758][ T5023] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 123.310149][ T5023] syz.0.210: attempt to access beyond end of device [ 123.310149][ T5023] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 123.705653][ T5015] tipc: Resetting bearer [ 123.757070][ T5014] tipc: Resetting bearer [ 123.947677][ T5014] tipc: Disabling bearer [ 123.972885][ T5031] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 124.170889][ T5038] loop2: detected capacity change from 0 to 164 [ 124.248816][ T5038] process 'syz.2.217' launched '/dev/fd/3' with NULL argv: empty string added [ 124.527214][ T5047] loop1: detected capacity change from 0 to 1024 [ 124.584800][ T5038] syz.2.217: attempt to access beyond end of device [ 124.584800][ T5038] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 124.612844][ T5047] EXT4-fs: Ignoring removed orlov option [ 124.667045][ T5038] syz.2.217: attempt to access beyond end of device [ 124.667045][ T5038] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 125.350619][ T5055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'. [ 125.356294][ T5047] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 125.543435][ T5058] loop3: detected capacity change from 0 to 1024 [ 125.620446][ T5058] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.222: bad orphan inode 134217728 [ 125.640825][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 125.648029][ T5058] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 125.872827][ T5067] xt_connbytes: Forcing CT accounting to be enabled [ 125.879735][ T5067] Cannot find set identified by id 0 to match [ 125.960762][ T5070] loop4: detected capacity change from 0 to 128 [ 126.076447][ T5070] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 126.084689][ T5070] FAT-fs (loop4): Filesystem has been set read-only [ 126.091372][ T5070] syz.4.225: attempt to access beyond end of device [ 126.091372][ T5070] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 126.105989][ T5070] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 126.113945][ T5070] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 126.157409][ T5070] syz.4.225: attempt to access beyond end of device [ 126.157409][ T5070] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 126.180279][ T27] kauditd_printk_skb: 86 callbacks suppressed [ 126.180316][ T27] audit: type=1800 audit(126.112:474): pid=5070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.225" name="file2" dev="loop4" ino=1048610 res=0 errno=0 [ 126.587515][ T27] audit: type=1800 audit(126.482:475): pid=5058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.222" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 126.696690][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 126.828031][ T27] audit: type=1326 audit(126.772:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5081 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4018f749 code=0x7ffc0000 [ 126.928244][ T27] audit: type=1326 audit(126.772:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5081 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4018f749 code=0x7ffc0000 [ 127.050894][ T27] audit: type=1326 audit(126.772:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5081 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca4018f749 code=0x7ffc0000 [ 127.296775][ T27] audit: type=1326 audit(126.772:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5081 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4018f749 code=0x7ffc0000 [ 127.604258][ T5089] loop4: detected capacity change from 0 to 1024 [ 127.734807][ T27] audit: type=1326 audit(126.772:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5081 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4018f749 code=0x7ffc0000 [ 127.749531][ T5089] EXT4-fs: Ignoring removed orlov option [ 127.776580][ T27] audit: type=1326 audit(126.772:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5081 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca4018f749 code=0x7ffc0000 [ 127.800073][ T27] audit: type=1326 audit(126.772:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5081 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4018f749 code=0x7ffc0000 [ 127.821771][ T27] audit: type=1326 audit(126.772:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5081 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4018f749 code=0x7ffc0000 [ 127.853921][ T5095] loop0: detected capacity change from 0 to 128 [ 127.918059][ T5095] FAT-fs (loop0): bogus sectors per cluster 0 [ 127.960356][ T5095] FAT-fs (loop0): Can't find a valid FAT filesystem [ 127.971300][ T5089] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 128.177111][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 128.287904][ T5101] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.492518][ T5105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'. [ 128.672019][ T5112] loop0: detected capacity change from 0 to 512 [ 129.039076][ T5112] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 129.054472][ T5112] EXT4-fs (loop0): orphan cleanup on readonly fs [ 129.103102][ T5112] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #16: comm syz.0.241: corrupted inode contents [ 129.120052][ T5112] EXT4-fs (loop0): Remounting filesystem read-only [ 129.126749][ T5112] EXT4-fs error (device loop0): ext4_dirty_inode:6133: inode #16: comm syz.0.241: mark_inode_dirty error [ 129.145584][ T5112] EXT4-fs (loop0): Remounting filesystem read-only [ 129.152758][ T5112] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #16: comm syz.0.241: corrupted inode contents [ 129.167617][ T5112] EXT4-fs (loop0): Remounting filesystem read-only [ 129.174407][ T5112] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.241: mark_inode_dirty error [ 129.188103][ T5112] EXT4-fs (loop0): Remounting filesystem read-only [ 129.195572][ T5112] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #16: comm syz.0.241: corrupted inode contents [ 129.227825][ T5112] EXT4-fs (loop0): Remounting filesystem read-only [ 129.234473][ T5112] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 129.260665][ T5112] EXT4-fs (loop0): Remounting filesystem read-only [ 129.267743][ T5112] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #16: comm syz.0.241: corrupted inode contents [ 129.291268][ T5112] EXT4-fs (loop0): Remounting filesystem read-only [ 129.298377][ T5112] EXT4-fs error (device loop0): ext4_truncate:4318: inode #16: comm syz.0.241: mark_inode_dirty error [ 129.309947][ T5112] EXT4-fs (loop0): Remounting filesystem read-only [ 129.316589][ T5112] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 129.326541][ T5112] EXT4-fs (loop0): Remounting filesystem read-only [ 129.334164][ T5112] EXT4-fs (loop0): 1 truncate cleaned up [ 129.342587][ T4789] EXT4-fs error (device loop0): ext4_release_dquot:6845: comm kworker/u4:16: Failed to release dquot type 1 [ 129.396612][ T4789] EXT4-fs (loop0): Remounting filesystem read-only [ 129.413821][ T5112] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 129.691236][ T5118] loop4: detected capacity change from 0 to 128 [ 129.749609][ T5118] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 129.757575][ T5118] FAT-fs (loop4): Filesystem has been set read-only [ 129.764300][ T5118] syz.4.242: attempt to access beyond end of device [ 129.764300][ T5118] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 129.778814][ T5118] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 129.786762][ T5118] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 129.833113][ T5118] syz.4.242: attempt to access beyond end of device [ 129.833113][ T5118] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 129.950429][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 129.956907][ T5105] device hsr_slave_1 left promiscuous mode [ 130.421601][ T5101] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.604831][ T5101] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.745769][ T5101] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.698668][ T5101] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.749501][ T5101] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.788506][ T5101] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.840874][ T5101] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.485468][ T5164] loop2: detected capacity change from 0 to 128 [ 132.523898][ T5164] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 132.531858][ T5164] FAT-fs (loop2): Filesystem has been set read-only [ 132.538717][ T5164] syz.2.256: attempt to access beyond end of device [ 132.538717][ T5164] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 132.553277][ T5164] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 132.561195][ T5164] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 132.613960][ T5164] syz.2.256: attempt to access beyond end of device [ 132.613960][ T5164] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 132.638680][ T27] kauditd_printk_skb: 45 callbacks suppressed [ 132.638826][ T27] audit: type=1800 audit(132.572:528): pid=5164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.256" name="file2" dev="loop2" ino=1048612 res=0 errno=0 [ 132.876703][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.888605][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.585697][ T5174] device veth0 entered promiscuous mode [ 133.725614][ T5174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.263'. [ 133.779896][ T5175] loop2: detected capacity change from 0 to 1024 [ 134.015400][ T5175] EXT4-fs: Ignoring removed orlov option [ 134.167383][ T5175] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 134.177166][ T5187] loop0: detected capacity change from 0 to 512 [ 134.449710][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 134.577010][ T5194] loop3: detected capacity change from 0 to 512 [ 134.722364][ T5194] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 135.135518][ T5216] loop0: detected capacity change from 0 to 128 [ 137.364340][ T5212] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 137.372336][ T5212] FAT-fs (loop0): Filesystem has been set read-only [ 137.378968][ T5212] syz.0.275: attempt to access beyond end of device [ 137.378968][ T5212] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 137.393646][ T5212] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 137.401527][ T5212] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 137.419685][ T5212] syz.0.275: attempt to access beyond end of device [ 137.419685][ T5212] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 137.433294][ T27] audit: type=1800 audit(137.382:529): pid=5212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.275" name="file2" dev="loop0" ino=1048613 res=0 errno=0 [ 137.854380][ T5220] netlink: 'syz.0.278': attribute type 1 has an invalid length. [ 137.863620][ T5222] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 137.905793][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 137.984290][ T5224] netlink: 'syz.1.280': attribute type 12 has an invalid length. [ 138.046497][ T5225] loop1: detected capacity change from 0 to 128 [ 138.130624][ T5225] EXT4-fs error (device loop1): __ext4_fill_super:5397: inode #2: comm syz.1.280: iget: checksum invalid [ 138.131376][ T27] audit: type=1326 audit(138.072:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5231 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8abd8f749 code=0x7ffc0000 [ 138.164025][ T27] audit: type=1326 audit(138.072:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5231 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8abd8f749 code=0x7ffc0000 [ 138.213635][ T27] audit: type=1326 audit(138.162:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5231 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe8abd8f749 code=0x7ffc0000 [ 138.272360][ T5225] EXT4-fs (loop1): get root inode failed [ 138.278097][ T5225] EXT4-fs (loop1): mount failed [ 138.312428][ T27] audit: type=1326 audit(138.202:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5233 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe8abdc2005 code=0x7ffc0000 [ 138.372812][ T5237] loop2: detected capacity change from 0 to 512 [ 138.389851][ T5237] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 138.406529][ T27] audit: type=1326 audit(138.352:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5233 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fe8abd8f749 code=0x7ffc0000 [ 138.520947][ T27] audit: type=1326 audit(138.352:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5231 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8abd8f749 code=0x7ffc0000 [ 138.545246][ T5237] EXT4-fs (loop2): 1 truncate cleaned up [ 138.550951][ T5237] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 138.701423][ T27] audit: type=1326 audit(138.352:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5231 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8abd8f749 code=0x7ffc0000 [ 139.501624][ T5252] syz.4.288 (5252) used greatest stack depth: 17480 bytes left [ 139.603953][ T5249] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.2.284: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 139.806414][ T5249] EXT4-fs error (device loop2) in ext4_delete_entry:2800: Corrupt filesystem [ 139.856304][ T5249] EXT4-fs warning (device loop2): ext4_rename_delete:3778: inode #2: comm syz.2.284: Deleting old file: nlink 4, error=-117 [ 139.949942][ T5264] loop3: detected capacity change from 0 to 128 [ 141.023318][ T5256] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 141.031306][ T5256] FAT-fs (loop3): Filesystem has been set read-only [ 141.038066][ T5256] syz.3.289: attempt to access beyond end of device [ 141.038066][ T5256] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 141.052109][ T5256] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 141.060135][ T5256] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 141.080920][ T27] audit: type=1326 audit(141.022:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5261 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4018f749 code=0x7ffc0000 [ 141.127173][ T5256] syz.3.289: attempt to access beyond end of device [ 141.127173][ T5256] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 141.413005][ T5262] netlink: 'syz.0.292': attribute type 1 has an invalid length. [ 141.460345][ T27] audit: type=1800 audit(141.082:538): pid=5256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.289" name="file2" dev="loop3" ino=1048614 res=0 errno=0 [ 141.595510][ T27] audit: type=1326 audit(141.352:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5261 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca4018f749 code=0x7ffc0000 [ 141.738685][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 141.857424][ T5273] loop0: detected capacity change from 0 to 1024 [ 141.878184][ T5277] netlink: 180 bytes leftover after parsing attributes in process `syz.1.295'. [ 141.889349][ T5276] loop3: detected capacity change from 0 to 512 [ 141.901047][ T5273] EXT4-fs: Ignoring removed orlov option [ 141.907847][ T5273] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.926704][ T5279] loop2: detected capacity change from 0 to 512 [ 141.930680][ T5276] ext4: Unknown parameter 'seclabel' [ 141.979706][ T5279] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 141.982028][ T4435] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 142.050836][ T5273] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 142.060643][ T5279] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 143.594177][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 143.626103][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 144.115126][ T5316] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 144.122088][ T5316] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 144.154005][ T5316] vhci_hcd vhci_hcd.0: Device attached [ 144.223105][ T5321] loop2: detected capacity change from 0 to 128 [ 144.278994][ T5321] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 144.287015][ T5321] FAT-fs (loop2): Filesystem has been set read-only [ 144.293767][ T5321] syz.2.304: attempt to access beyond end of device [ 144.293767][ T5321] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 144.309277][ T5321] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 144.317338][ T5321] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 144.361817][ T5321] syz.2.304: attempt to access beyond end of device [ 144.361817][ T5321] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 144.384402][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 144.384439][ T27] audit: type=1800 audit(144.322:551): pid=5321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.304" name="file2" dev="loop2" ino=1048615 res=0 errno=0 [ 144.595040][ T5319] vhci_hcd: connection closed [ 144.598383][ T4479] vhci_hcd: stop threads [ 144.810250][ T4479] vhci_hcd: release socket [ 144.853625][ T4479] vhci_hcd: disconnect device [ 145.117534][ T5328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'. [ 145.465608][ T5339] netlink: 76 bytes leftover after parsing attributes in process `syz.2.319'. [ 146.120118][ T5342] loop3: detected capacity change from 0 to 2048 [ 146.517455][ T5342] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #2: comm syz.3.320: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 146.594604][ T5342] EXT4-fs (loop3): get root inode failed [ 146.601211][ T5342] EXT4-fs (loop3): mount failed [ 146.670886][ T5358] loop1: detected capacity change from 0 to 128 [ 146.935032][ T5363] loop4: detected capacity change from 0 to 128 [ 147.081517][ T5363] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 147.089534][ T5363] FAT-fs (loop4): Filesystem has been set read-only [ 147.096293][ T5363] syz.4.324: attempt to access beyond end of device [ 147.096293][ T5363] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 147.111259][ T5363] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 147.119601][ T5363] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 147.180143][ T5363] syz.4.324: attempt to access beyond end of device [ 147.180143][ T5363] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 147.202454][ T27] audit: type=1800 audit(147.142:552): pid=5363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.324" name="file2" dev="loop4" ino=1048616 res=0 errno=0 [ 147.557735][ T27] audit: type=1800 audit(147.312:553): pid=5358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.325" name="file1" dev="loop1" ino=1048617 res=0 errno=0 [ 147.764938][ T27] audit: type=1326 audit(147.712:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5368 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8abd8f749 code=0x7ffc0000 [ 147.836207][ T27] audit: type=1326 audit(147.742:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5368 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe8abd8f749 code=0x7ffc0000 [ 147.914678][ T27] audit: type=1326 audit(147.742:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5368 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8abd8f749 code=0x7ffc0000 [ 147.919126][ T5375] loop0: detected capacity change from 0 to 512 [ 147.992085][ T27] audit: type=1326 audit(147.742:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5368 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe8abd8f749 code=0x7ffc0000 [ 148.040433][ T5375] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 148.108801][ T5375] EXT4-fs (loop0): orphan cleanup on readonly fs [ 148.142091][ T27] audit: type=1326 audit(147.742:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5368 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8abd8f749 code=0x7ffc0000 [ 148.164238][ T27] audit: type=1326 audit(147.742:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5368 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8abd8f749 code=0x7ffc0000 [ 148.186728][ T27] audit: type=1326 audit(147.742:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5368 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8abd8f749 code=0x7ffc0000 [ 148.282292][ T5375] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #16: comm syz.0.330: corrupted inode contents [ 148.326981][ T5375] EXT4-fs (loop0): Remounting filesystem read-only [ 148.339501][ T5375] EXT4-fs error (device loop0): ext4_dirty_inode:6133: inode #16: comm syz.0.330: mark_inode_dirty error [ 148.364581][ T5375] EXT4-fs (loop0): Remounting filesystem read-only [ 148.375021][ T5375] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #16: comm syz.0.330: corrupted inode contents [ 148.391152][ T5386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.334'. [ 148.402638][ T5375] EXT4-fs (loop0): Remounting filesystem read-only [ 148.409223][ T5375] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.330: mark_inode_dirty error [ 148.493731][ T5375] EXT4-fs (loop0): Remounting filesystem read-only [ 148.588510][ T5375] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #16: comm syz.0.330: corrupted inode contents [ 148.869453][ T5375] EXT4-fs (loop0): Remounting filesystem read-only [ 148.990339][ T5375] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 149.255846][ T5375] EXT4-fs (loop0): Remounting filesystem read-only [ 149.280828][ T5375] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #16: comm syz.0.330: corrupted inode contents [ 149.307473][ T5375] EXT4-fs (loop0): Remounting filesystem read-only [ 149.389132][ T5375] EXT4-fs error (device loop0): ext4_truncate:4318: inode #16: comm syz.0.330: mark_inode_dirty error [ 149.447301][ T5375] EXT4-fs (loop0): Remounting filesystem read-only [ 149.478103][ T5375] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 149.490062][ T5375] EXT4-fs (loop0): Remounting filesystem read-only [ 149.503069][ T5375] EXT4-fs (loop0): 1 truncate cleaned up [ 149.944963][ T4479] __quota_error: 23 callbacks suppressed [ 149.944983][ T4479] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 149.991569][ T4479] EXT4-fs error (device loop0): ext4_release_dquot:6845: comm kworker/u4:11: Failed to release dquot type 1 [ 150.068899][ T5401] loop1: detected capacity change from 0 to 128 [ 150.107583][ T5401] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 150.115748][ T5401] FAT-fs (loop1): Filesystem has been set read-only [ 150.122476][ T5401] syz.1.338: attempt to access beyond end of device [ 150.122476][ T5401] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 150.137533][ T5401] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 150.145510][ T5401] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 150.188299][ T5401] syz.1.338: attempt to access beyond end of device [ 150.188299][ T5401] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 150.239245][ T4479] EXT4-fs (loop0): Remounting filesystem read-only [ 150.262607][ T27] audit: type=1800 audit(150.152:584): pid=5401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.338" name="file2" dev="loop1" ino=1048618 res=0 errno=0 [ 150.412218][ T5375] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 150.448872][ T5375] EXT4-fs (loop0): unmounting filesystem. [ 151.140808][ T27] audit: type=1326 audit(151.082:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5416 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc5f8f749 code=0x7ffc0000 [ 151.141633][ T5414] loop0: detected capacity change from 0 to 164 [ 151.190657][ T27] audit: type=1326 audit(151.112:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5416 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fdcc5f8f749 code=0x7ffc0000 [ 151.229752][ T27] audit: type=1326 audit(151.112:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5416 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc5f8f749 code=0x7ffc0000 [ 151.287268][ T27] audit: type=1326 audit(151.112:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5416 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdcc5f8f749 code=0x7ffc0000 [ 151.331765][ T5414] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 151.335507][ T27] audit: type=1326 audit(151.112:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5416 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc5f8f749 code=0x7ffc0000 [ 151.371507][ T27] audit: type=1326 audit(151.112:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5416 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fdcc5f8f749 code=0x7ffc0000 [ 151.398577][ T27] audit: type=1326 audit(151.112:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5416 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc5f8f749 code=0x7ffc0000 [ 151.427947][ T27] audit: type=1326 audit(151.112:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5416 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcc5f8f749 code=0x7ffc0000 [ 151.463718][ T5422] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 151.809836][ T5422] rock: directory entry would overflow storage [ 152.181509][ T5422] rock: sig=0x4f50, size=4, remaining=3 [ 152.349572][ T5422] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 152.918394][ T47] Bluetooth: hci5: command 0x1003 tx timeout [ 152.932040][ T4273] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 152.936843][ T5435] loop0: detected capacity change from 0 to 128 [ 153.033603][ T5438] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 153.064448][ T5438] bond0: (slave batadv0): Releasing backup interface [ 153.135436][ T5438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.160716][ T5438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 153.204499][ T5438] device bridge_slave_0 left promiscuous mode [ 153.235182][ T5438] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.288746][ T5438] device bridge_slave_1 left promiscuous mode [ 153.315952][ T5445] loop3: detected capacity change from 0 to 2048 [ 153.323005][ T5438] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.365751][ T5438] bond0: (slave bond_slave_0): Releasing backup interface [ 153.427954][ T5445] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 153.437391][ T5438] bond0: (slave bond_slave_1): Releasing backup interface [ 153.583516][ T5438] team0: Port device team_slave_0 removed [ 153.664476][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 153.827749][ T5458] loop4: detected capacity change from 0 to 1024 [ 153.854365][ T5458] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.935744][ T5458] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 154.006699][ T5438] team0: Port device team_slave_1 removed [ 154.038402][ T5438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.092172][ T5438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.107830][ T5438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.132926][ T5438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.426357][ T5473] loop0: detected capacity change from 0 to 8192 [ 154.683073][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 154.988951][ T5493] loop2: detected capacity change from 0 to 732 [ 155.032588][ T5493] isofs_fill_super: get root inode failed [ 155.256629][ T5499] bridge0 speed is unknown, defaulting to 1000 [ 155.316337][ T27] kauditd_printk_skb: 28 callbacks suppressed [ 155.316363][ T27] audit: type=1326 audit(155.262:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5498 comm="syz.4.371" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8abd8f749 code=0x0 [ 155.380332][ T5509] loop1: detected capacity change from 0 to 128 [ 155.456531][ T5509] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 155.843545][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 156.811770][ T5543] bridge0 speed is unknown, defaulting to 1000 [ 157.504857][ T5560] Cannot find add_set index 0 as target [ 157.698984][ T27] audit: type=1326 audit(157.642:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5564 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8abd8f749 code=0x7ffc0000 [ 157.782310][ T27] audit: type=1326 audit(157.642:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5564 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8abd8f749 code=0x7ffc0000 [ 157.872236][ T27] audit: type=1326 audit(157.652:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5564 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8abd8f749 code=0x7ffc0000 [ 157.986919][ T27] audit: type=1326 audit(157.652:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5564 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8abd8f749 code=0x7ffc0000 [ 158.068344][ T5574] netlink: 'syz.4.391': attribute type 7 has an invalid length. [ 158.102061][ T27] audit: type=1326 audit(157.652:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5564 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8abd8f749 code=0x7ffc0000 [ 158.154746][ T27] audit: type=1326 audit(157.662:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5564 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8abd8f749 code=0x7ffc0000 [ 158.273428][ T27] audit: type=1326 audit(157.662:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5564 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8abd8f749 code=0x7ffc0000 [ 158.396347][ T27] audit: type=1326 audit(157.692:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5564 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fe8abd8f749 code=0x7ffc0000 [ 158.516358][ T27] audit: type=1326 audit(157.692:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5564 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8abd8f749 code=0x7ffc0000 [ 158.674382][ T5585] loop3: detected capacity change from 0 to 512 [ 158.702276][ T5577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.393'. [ 158.704626][ T5589] capability: warning: `syz.4.396' uses 32-bit capabilities (legacy support in use) [ 159.224206][ T5585] EXT4-fs: Ignoring removed oldalloc option [ 159.245667][ T5601] loop4: detected capacity change from 0 to 128 [ 159.257651][ T5601] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 159.265836][ T5601] FAT-fs (loop4): Filesystem has been set read-only [ 159.273072][ T5601] syz.4.397: attempt to access beyond end of device [ 159.273072][ T5601] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 159.286960][ T5601] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 159.295023][ T5601] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 159.304969][ T5601] syz.4.397: attempt to access beyond end of device [ 159.304969][ T5601] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 159.317073][ T5585] EXT4-fs (loop3): Test dummy encryption mode enabled [ 159.363728][ T5585] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 159.439565][ T5585] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.395: bad orphan inode 131083 [ 159.452197][ T5585] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 159.468697][ T5585] EXT4-fs (loop3): unmounting filesystem. [ 159.681492][ T5615] loop3: detected capacity change from 0 to 512 [ 159.707225][ T5615] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2769: inode #11: comm syz.3.404: corrupted xattr block 95 [ 159.725693][ T5618] loop2: detected capacity change from 0 to 512 [ 159.734721][ T5618] EXT4-fs: Ignoring removed i_version option [ 159.740868][ T5615] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2819: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 159.754961][ T5618] EXT4-fs: Ignoring removed bh option [ 159.763642][ T5615] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.404: bg 0: block 7: invalid block bitmap [ 159.779130][ T5615] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 159.789219][ T5615] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2935: inode #11: comm syz.3.404: corrupted xattr block 95 [ 159.886176][ T5618] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 159.897821][ T5615] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 159.947767][ T5615] EXT4-fs (loop3): 1 orphan inode deleted [ 159.954638][ T5615] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 160.073478][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 160.160648][ T5629] netlink: 64 bytes leftover after parsing attributes in process `syz.0.410'. [ 160.207106][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 160.274296][ T5633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.778632][ T5647] loop2: detected capacity change from 0 to 128 [ 160.901409][ T5650] loop3: detected capacity change from 0 to 128 [ 160.912909][ T5650] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 160.920823][ T5650] FAT-fs (loop3): Filesystem has been set read-only [ 160.927761][ T5650] syz.3.418: attempt to access beyond end of device [ 160.927761][ T5650] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 160.942906][ T5650] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 160.951065][ T5650] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 160.960107][ T5650] syz.3.418: attempt to access beyond end of device [ 160.960107][ T5650] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 160.976077][ T27] kauditd_printk_skb: 47 callbacks suppressed [ 160.976091][ T27] audit: type=1800 audit(160.922:678): pid=5650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.418" name="file2" dev="loop3" ino=1048623 res=0 errno=0 [ 161.011242][ T5647] syz.2.417: attempt to access beyond end of device [ 161.011242][ T5647] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 161.140151][ T5658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.423'. [ 161.192260][ T5658] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.216510][ T5663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.423'. [ 161.363658][ T27] audit: type=1326 audit(161.312:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5669 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc5f8f749 code=0x7ffc0000 [ 161.426295][ T27] audit: type=1326 audit(161.342:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5669 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fdcc5f8f749 code=0x7ffc0000 [ 161.547912][ T27] audit: type=1326 audit(161.342:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5669 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc5f8f749 code=0x7ffc0000 [ 161.587537][ T27] audit: type=1326 audit(161.342:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5669 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdcc5f8f749 code=0x7ffc0000 [ 161.611988][ T5670] loop2: detected capacity change from 0 to 8192 [ 161.624161][ T27] audit: type=1326 audit(161.342:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5669 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc5f8f749 code=0x7ffc0000 [ 161.641711][ T5672] loop0: detected capacity change from 0 to 512 [ 161.647156][ T27] audit: type=1326 audit(161.342:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5669 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fdcc5f8f749 code=0x7ffc0000 [ 161.701099][ T5670] loop2: p1 p2 p3 p4 [ 161.701099][ T5670] p1: [ 161.740527][ T5670] loop2: p1 size 196608 extends beyond EOD, truncated [ 161.751171][ T5672] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 161.791854][ T5670] loop2: p2 start 164919041 is beyond EOD, truncated [ 161.797972][ T27] audit: type=1326 audit(161.342:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5669 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc5f8f749 code=0x7ffc0000 [ 161.821383][ T5672] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #2: comm syz.0.428: corrupted inode contents [ 161.844424][ T5670] loop2: p3 size 66846464 extends beyond EOD, truncated [ 161.851782][ T5672] EXT4-fs error (device loop0): ext4_dirty_inode:6133: inode #2: comm syz.0.428: mark_inode_dirty error [ 161.867464][ T5672] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #2: comm syz.0.428: corrupted inode contents [ 161.874765][ T5670] loop2: p4 size 37048832 extends beyond EOD, [ 161.882382][ T27] audit: type=1326 audit(161.342:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5669 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fdcc5f8f749 code=0x7ffc0000 [ 161.883379][ T5663] bond1 (unregistering): Released all slaves [ 161.888602][ T27] audit: type=1326 audit(161.342:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5669 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc5f8f749 code=0x7ffc0000 [ 161.938742][ T5670] truncated [ 161.943268][ T5670] loop2: p5 size 196608 extends beyond EOD, truncated [ 161.969155][ T5672] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.428: mark_inode_dirty error [ 162.122870][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 162.178919][ T5678] netlink: 48 bytes leftover after parsing attributes in process `syz.2.430'. [ 162.228800][ T5680] netlink: 28 bytes leftover after parsing attributes in process `syz.1.431'. [ 162.386135][ T4435] udevd[4435]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 162.386220][ T4453] udevd[4453]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 162.399430][ T4370] udevd[4370]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 162.478106][ T4436] udevd[4436]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 162.638983][ T5692] loop4: detected capacity change from 0 to 256 [ 162.868800][ T5696] xt_hashlimit: max too large, truncated to 1048576 [ 164.445661][ T5708] loop1: detected capacity change from 0 to 512 [ 164.638822][ T5708] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 165.117400][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 165.382198][ T5718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.443'. [ 165.716598][ T5734] loop1: detected capacity change from 0 to 128 [ 165.739122][ T5734] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 165.753332][ T5734] FAT-fs (loop1): Filesystem has been set read-only [ 165.778771][ T5734] syz.1.449: attempt to access beyond end of device [ 165.778771][ T5734] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 165.850375][ T5734] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 165.873998][ T5734] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 165.897137][ T5734] syz.1.449: attempt to access beyond end of device [ 165.897137][ T5734] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 165.938893][ T5746] syz.2.454[5746] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.939014][ T5746] syz.2.454[5746] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.963775][ T5744] loop3: detected capacity change from 0 to 512 [ 165.998450][ T5744] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 166.009898][ T5744] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 166.029866][ T5744] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3836: comm syz.3.453: Allocating blocks 41-42 which overlap fs metadata [ 166.045432][ T5744] __quota_error: 143 callbacks suppressed [ 166.045457][ T5744] Quota error (device loop3): write_blk: dquota write failed [ 166.065210][ T5744] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 167.748589][ T5757] bridge0 speed is unknown, defaulting to 1000 [ 168.231743][ T5744] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3836: comm syz.3.453: Allocating blocks 41-42 which overlap fs metadata [ 168.335948][ T5744] Quota error (device loop3): write_blk: dquota write failed [ 168.417724][ T5744] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 168.486539][ T5762] loop1: detected capacity change from 0 to 164 [ 168.493272][ T5744] EXT4-fs error (device loop3): ext4_acquire_dquot:6809: comm syz.3.453: Failed to acquire dquot type 1 [ 168.516628][ T5744] EXT4-fs error (device loop3): mb_free_blocks:1810: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 168.550111][ T5762] syz.1.457: attempt to access beyond end of device [ 168.550111][ T5762] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 168.574458][ T5744] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #12: comm syz.3.453: corrupted inode contents [ 168.594595][ T5762] syz.1.457: attempt to access beyond end of device [ 168.594595][ T5762] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 168.624737][ T5767] loop2: detected capacity change from 0 to 256 [ 168.626399][ T5744] EXT4-fs error (device loop3): ext4_dirty_inode:6133: inode #12: comm syz.3.453: mark_inode_dirty error [ 168.673860][ T5767] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 168.692697][ T5744] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #12: comm syz.3.453: corrupted inode contents [ 168.746052][ T5768] Cannot find add_set index 0 as target [ 168.762280][ T5744] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz.3.453: mark_inode_dirty error [ 168.821834][ T5767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.459'. [ 168.831293][ T5770] loop0: detected capacity change from 0 to 128 [ 168.839085][ T5744] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #12: comm syz.3.453: corrupted inode contents [ 168.890551][ T5770] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 168.899140][ T5770] FAT-fs (loop0): Filesystem has been set read-only [ 168.916847][ T5744] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 168.946484][ T5744] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #12: comm syz.3.453: corrupted inode contents [ 168.991330][ T5744] EXT4-fs error (device loop3): ext4_truncate:4318: inode #12: comm syz.3.453: mark_inode_dirty error [ 169.019156][ T5744] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 169.038859][ T4386] bridge0 speed is unknown, defaulting to 1000 [ 169.066691][ T4386] ================================================================== [ 169.075088][ T4386] BUG: KASAN: use-after-free in siw_query_port+0x358/0x450 [ 169.082337][ T4386] Read of size 4 at addr ffff88814d5c80e0 by task kworker/0:8/4386 [ 169.090251][ T4386] [ 169.092623][ T4386] CPU: 0 PID: 4386 Comm: kworker/0:8 Not tainted syzkaller #0 [ 169.100107][ T4386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 169.110202][ T4386] Workqueue: infiniband ib_cache_event_task [ 169.116157][ T4386] Call Trace: [ 169.119472][ T4386] [ 169.122431][ T4386] dump_stack_lvl+0x168/0x22e [ 169.127148][ T4386] ? __lock_acquire+0x7c50/0x7c50 [ 169.132219][ T4386] ? show_regs_print_info+0x12/0x12 [ 169.137451][ T4386] ? load_image+0x3b0/0x3b0 [ 169.141996][ T4386] ? __virt_addr_valid+0x465/0x540 [ 169.147145][ T4386] ? siw_query_port+0x358/0x450 [ 169.152026][ T4386] print_report+0xa8/0x210 [ 169.156479][ T4386] kasan_report+0x10b/0x140 [ 169.161024][ T4386] ? siw_query_port+0x358/0x450 [ 169.165996][ T4386] siw_query_port+0x358/0x450 [ 169.170703][ T4386] ib_cache_update+0x1bb/0x980 [ 169.175509][ T4386] ? ib_cache_setup_one+0x5d0/0x5d0 [ 169.180751][ T4386] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 169.186778][ T4386] ? read_lock_is_recursive+0x10/0x10 [ 169.192186][ T4386] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 169.198145][ T4386] ? _raw_spin_unlock+0x40/0x40 [ 169.203043][ T4386] ib_cache_event_task+0xd4/0x1c0 [ 169.208107][ T4386] ? process_one_work+0x7a1/0x1160 [ 169.213256][ T4386] process_one_work+0x898/0x1160 [ 169.218234][ T4386] ? worker_detach_from_pool+0x240/0x240 [ 169.223908][ T4386] ? _raw_spin_lock_irq+0xab/0xe0 [ 169.228964][ T4386] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 169.234358][ T4386] ? kthread_data+0x4b/0xc0 [ 169.238880][ T4386] worker_thread+0xaa2/0x1250 [ 169.243581][ T4386] ? __kthread_parkme+0x162/0x1c0 [ 169.248622][ T4386] kthread+0x29d/0x330 [ 169.252709][ T4386] ? worker_clr_flags+0x1a0/0x1a0 [ 169.257742][ T4386] ? kthread_blkcg+0xd0/0xd0 [ 169.262348][ T4386] ret_from_fork+0x1f/0x30 [ 169.266785][ T4386] [ 169.269816][ T4386] [ 169.272144][ T4386] Allocated by task 4276: [ 169.276475][ T4386] kasan_set_track+0x4b/0x70 [ 169.281077][ T4386] __kasan_kmalloc+0x8e/0xa0 [ 169.285679][ T4386] __kmalloc_node+0xb0/0x240 [ 169.290283][ T4386] kvmalloc_node+0x6c/0x180 [ 169.294799][ T4386] alloc_netdev_mqs+0x84/0xf00 [ 169.299572][ T4386] rtnl_create_link+0x2fb/0xb80 [ 169.304430][ T4386] rtnl_newlink+0x13ca/0x1ff0 [ 169.309117][ T4386] rtnetlink_rcv_msg+0x79b/0xed0 [ 169.314063][ T4386] netlink_rcv_skb+0x1de/0x420 [ 169.318833][ T4386] netlink_unicast+0x74d/0x8d0 [ 169.323600][ T4386] netlink_sendmsg+0x89e/0xbc0 [ 169.328365][ T4386] __sys_sendto+0x44f/0x5c0 [ 169.332878][ T4386] __x64_sys_sendto+0xda/0xf0 [ 169.337564][ T4386] do_syscall_64+0x4c/0xa0 [ 169.341986][ T4386] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.347883][ T4386] [ 169.350215][ T4386] Freed by task 5767: [ 169.354196][ T4386] kasan_set_track+0x4b/0x70 [ 169.358798][ T4386] kasan_save_free_info+0x2d/0x50 [ 169.363842][ T4386] ____kasan_slab_free+0x126/0x1e0 [ 169.368961][ T4386] slab_free_freelist_hook+0x131/0x1a0 [ 169.374448][ T4386] __kmem_cache_free+0xb6/0x1f0 [ 169.379307][ T4386] device_release+0x92/0x1c0 [ 169.383928][ T4386] kobject_put+0x21d/0x460 [ 169.388366][ T4386] netdev_run_todo+0xc8f/0xd80 [ 169.393144][ T4386] rtnetlink_rcv_msg+0xa23/0xed0 [ 169.398099][ T4386] netlink_rcv_skb+0x1de/0x420 [ 169.403007][ T4386] netlink_unicast+0x74d/0x8d0 [ 169.407789][ T4386] netlink_sendmsg+0x89e/0xbc0 [ 169.412579][ T4386] ____sys_sendmsg+0x59b/0x970 [ 169.417449][ T4386] ___sys_sendmsg+0x21c/0x290 [ 169.422137][ T4386] __se_sys_sendmsg+0x19e/0x270 [ 169.427000][ T4386] do_syscall_64+0x4c/0xa0 [ 169.431426][ T4386] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.437330][ T4386] [ 169.439654][ T4386] Last potentially related work creation: [ 169.445369][ T4386] kasan_save_stack+0x3a/0x60 [ 169.450077][ T4386] __kasan_record_aux_stack+0xb2/0xc0 [ 169.455495][ T4386] insert_work+0x54/0x3c0 [ 169.459842][ T4386] __queue_work+0xba3/0xfb0 [ 169.464367][ T4386] queue_work_on+0x11d/0x1d0 [ 169.468973][ T4386] rhashtable_remove_fast+0xd5e/0xe40 [ 169.474359][ T4386] br_multicast_dev_del+0x170/0x5f0 [ 169.479573][ T4386] br_dev_uninit+0x1a/0x70 [ 169.483996][ T4386] unregister_netdevice_many+0x12ab/0x1840 [ 169.489812][ T4386] rtnl_dellink+0x3e5/0x730 [ 169.494325][ T4386] rtnetlink_rcv_msg+0x79b/0xed0 [ 169.499302][ T4386] netlink_rcv_skb+0x1de/0x420 [ 169.504077][ T4386] netlink_unicast+0x74d/0x8d0 [ 169.508852][ T4386] netlink_sendmsg+0x89e/0xbc0 [ 169.513624][ T4386] ____sys_sendmsg+0x59b/0x970 [ 169.518398][ T4386] ___sys_sendmsg+0x21c/0x290 [ 169.523108][ T4386] __se_sys_sendmsg+0x19e/0x270 [ 169.527966][ T4386] do_syscall_64+0x4c/0xa0 [ 169.532394][ T4386] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.538291][ T4386] [ 169.540620][ T4386] Second to last potentially related work creation: [ 169.547203][ T4386] kasan_save_stack+0x3a/0x60 [ 169.551895][ T4386] __kasan_record_aux_stack+0xb2/0xc0 [ 169.557289][ T4386] insert_work+0x54/0x3c0 [ 169.561629][ T4386] __queue_work+0xba3/0xfb0 [ 169.566143][ T4386] queue_work_on+0x11d/0x1d0 [ 169.570749][ T4386] br_multicast_dev_del+0x35c/0x5f0 [ 169.575996][ T4386] br_dev_uninit+0x1a/0x70 [ 169.580418][ T4386] unregister_netdevice_many+0x12ab/0x1840 [ 169.586231][ T4386] rtnl_dellink+0x3e5/0x730 [ 169.590745][ T4386] rtnetlink_rcv_msg+0x79b/0xed0 [ 169.595693][ T4386] netlink_rcv_skb+0x1de/0x420 [ 169.600468][ T4386] netlink_unicast+0x74d/0x8d0 [ 169.605244][ T4386] netlink_sendmsg+0x89e/0xbc0 [ 169.610021][ T4386] ____sys_sendmsg+0x59b/0x970 [ 169.614796][ T4386] ___sys_sendmsg+0x21c/0x290 [ 169.619575][ T4386] __se_sys_sendmsg+0x19e/0x270 [ 169.624432][ T4386] do_syscall_64+0x4c/0xa0 [ 169.628855][ T4386] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.634751][ T4386] [ 169.637099][ T4386] The buggy address belongs to the object at ffff88814d5c8000 [ 169.637099][ T4386] which belongs to the cache kmalloc-cg-8k of size 8192 [ 169.651434][ T4386] The buggy address is located 224 bytes inside of [ 169.651434][ T4386] 8192-byte region [ffff88814d5c8000, ffff88814d5ca000) [ 169.664808][ T4386] [ 169.667139][ T4386] The buggy address belongs to the physical page: [ 169.673578][ T4386] page:ffffea0005357200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14d5c8 [ 169.683831][ T4386] head:ffffea0005357200 order:3 compound_mapcount:0 compound_pincount:0 [ 169.692246][ T4386] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 169.700337][ T4386] raw: 057ff00000010200 0000000000000000 dead000000000122 ffff88801744c3c0 [ 169.708936][ T4386] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 169.717521][ T4386] page dumped because: kasan: bad access detected [ 169.723943][ T4386] page_owner tracks the page as allocated [ 169.729681][ T4386] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 1, tgid 1 (swapper/0), ts 21393516823, free_ts 0 [ 169.750826][ T4386] post_alloc_hook+0x173/0x1a0 [ 169.755617][ T4386] get_page_from_freelist+0x1a26/0x1ac0 [ 169.761349][ T4386] __alloc_pages+0x1df/0x4e0 [ 169.765952][ T4386] alloc_page_interleave+0x24/0x1e0 [ 169.771182][ T4386] alloc_slab_page+0x5d/0x160 [ 169.775873][ T4386] new_slab+0x87/0x2c0 [ 169.779953][ T4386] ___slab_alloc+0xbc6/0x1230 [ 169.784635][ T4386] __kmem_cache_alloc_node+0x1a0/0x260 [ 169.790101][ T4386] __kmalloc_node+0xa0/0x240 [ 169.794710][ T4386] bpf_map_area_alloc+0x47/0xe0 [ 169.799569][ T4386] array_map_alloc+0x27c/0x6f0 [ 169.804341][ T4386] map_create+0x534/0x1000 [ 169.808771][ T4386] __sys_bpf+0x2f3/0x6d0 [ 169.813025][ T4386] kern_sys_bpf+0x132/0x660 [ 169.817538][ T4386] load+0x23e/0xc2c [ 169.821358][ T4386] do_one_initcall+0x214/0x7a0 [ 169.826135][ T4386] page_owner free stack trace missing [ 169.831509][ T4386] [ 169.833836][ T4386] Memory state around the buggy address: [ 169.839484][ T4386] ffff88814d5c7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 169.847550][ T4386] ffff88814d5c8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.855636][ T4386] >ffff88814d5c8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.863707][ T4386] ^ [ 169.870903][ T4386] ffff88814d5c8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.878977][ T4386] ffff88814d5c8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.887040][ T4386] ================================================================== [ 169.916437][ T4386] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 169.923711][ T4386] CPU: 0 PID: 4386 Comm: kworker/0:8 Not tainted syzkaller #0 [ 169.931203][ T4386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 169.941303][ T4386] Workqueue: infiniband ib_cache_event_task [ 169.947242][ T4386] Call Trace: [ 169.950541][ T4386] [ 169.953504][ T4386] dump_stack_lvl+0x168/0x22e [ 169.958220][ T4386] ? memcpy+0x3c/0x60 [ 169.962241][ T4386] ? show_regs_print_info+0x12/0x12 [ 169.967465][ T4386] ? load_image+0x3b0/0x3b0 [ 169.972111][ T4386] panic+0x2c9/0x710 [ 169.976047][ T4386] ? bpf_jit_dump+0xd0/0xd0 [ 169.980582][ T4386] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 169.986514][ T4386] ? _raw_spin_unlock+0x40/0x40 [ 169.991420][ T4386] ? print_memory_metadata+0x314/0x400 [ 169.996910][ T4386] check_panic_on_warn+0x80/0xa0 [ 170.001877][ T4386] ? siw_query_port+0x358/0x450 [ 170.006759][ T4386] end_report+0x66/0x110 [ 170.011037][ T4386] kasan_report+0x118/0x140 [ 170.015576][ T4386] ? siw_query_port+0x358/0x450 [ 170.020456][ T4386] siw_query_port+0x358/0x450 [ 170.025163][ T4386] ib_cache_update+0x1bb/0x980 [ 170.029962][ T4386] ? ib_cache_setup_one+0x5d0/0x5d0 [ 170.035189][ T4386] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 170.041204][ T4386] ? read_lock_is_recursive+0x10/0x10 [ 170.046696][ T4386] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 170.052625][ T4386] ? _raw_spin_unlock+0x40/0x40 [ 170.057514][ T4386] ib_cache_event_task+0xd4/0x1c0 [ 170.062569][ T4386] ? process_one_work+0x7a1/0x1160 [ 170.067978][ T4386] process_one_work+0x898/0x1160 [ 170.072947][ T4386] ? worker_detach_from_pool+0x240/0x240 [ 170.078617][ T4386] ? _raw_spin_lock_irq+0xab/0xe0 [ 170.083698][ T4386] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 170.089114][ T4386] ? kthread_data+0x4b/0xc0 [ 170.093665][ T4386] worker_thread+0xaa2/0x1250 [ 170.098477][ T4386] ? __kthread_parkme+0x162/0x1c0 [ 170.103550][ T4386] kthread+0x29d/0x330 [ 170.107659][ T4386] ? worker_clr_flags+0x1a0/0x1a0 [ 170.112715][ T4386] ? kthread_blkcg+0xd0/0xd0 [ 170.117348][ T4386] ret_from_fork+0x1f/0x30 [ 170.121815][ T4386] [ 170.125165][ T4386] Kernel Offset: disabled [ 170.129499][ T4386] Rebooting in 86400 seconds..