last executing test programs: 1m24.775782838s ago: executing program 1 (id=638): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='sched_switch\x00', r0}, 0x10) syz_usbip_server_init(0x5) 1m23.495103486s ago: executing program 1 (id=643): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "12000700"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) 1m22.555855982s ago: executing program 1 (id=645): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r1, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/248, 0xf8}], 0x1, 0x0, 0xc) 1m15.09338384s ago: executing program 1 (id=688): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x0, 0x12, r2, 0x0) 1m14.943653734s ago: executing program 1 (id=690): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = timerfd_create(0x8, 0x0) timerfd_settime(r4, 0x3, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000001000010400000000000b000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b00010065727370616e00002800028004001200080007007f00000108000100", @ANYRES32, @ANYBLOB="050013"], 0x58}}, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) r6 = gettid() ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r7, 0x5) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'veth1_to_hsr\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x58, r0, 0x333, 0x0, 0x0, {0x1c}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x58}}, 0x0) 55.436024722s ago: executing program 0 (id=756): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001380)=@newtaction={0xec0, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_pedit={0xea8, 0x1, 0x0, 0x0, {{0xa}, {0xe7c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x8, 0x3c, 0x7, 0x8, 0xfffffffe}, 0x2}, [{0x36, 0x2, 0x0, 0x0, 0xffffffff, 0x1}, {0x4, 0xf5d, 0x7, 0x5, 0x6c1, 0x1}, {0x5ce2, 0x7, 0xb, 0x9, 0x7fff, 0xfffffffb}, {0x2, 0xd, 0x5bc, 0x30, 0x6, 0x5}, {0x80000001, 0x1, 0x8, 0x2, 0x3, 0x53}, {0x3, 0x4, 0x70d, 0x4, 0x0, 0x8}, {0xf937, 0xff, 0x2, 0x4, 0xfffffc00, 0xe2}, {0x4, 0x100, 0x5c0, 0x0, 0x4, 0x6}, {0x3, 0x9, 0xc, 0x70b, 0xb6, 0x4}, {0xff, 0x10000, 0x0, 0x84, 0x0, 0x5}, {0xb, 0xfffffffb, 0x7, 0x3, 0x7, 0x1}, {0x7, 0x9, 0x9, 0x688e, 0xa65, 0x3}, {0x3e, 0x6, 0x100, 0xffffffff, 0x2ba}, {0x0, 0x9, 0x5, 0xf24, 0x1, 0x8}, {0x2, 0x40000000, 0x7, 0x7ff, 0x8, 0x1}, {0x5, 0x2, 0xfffffffe, 0x1, 0x5, 0x5d6e}, {0x1, 0x9, 0x5, 0xfff, 0x0, 0x7}, {0x8, 0x400, 0xfffffffa, 0x73f, 0x380, 0x86}, {0x7fff, 0x3, 0x1, 0x5, 0x9, 0x938f}, {0x8, 0xc76e, 0x8, 0xdf, 0x3, 0x8}, {0xa0, 0xfffffff5, 0x2, 0x0, 0x7, 0xffff}, {0x5, 0xffff0001, 0x7, 0xc, 0xa000000, 0x5}, {0x3, 0x5, 0x3, 0x2, 0xe, 0x2}, {0x101, 0x5faa, 0xcb75, 0x1, 0x3c, 0x2}, {0x3, 0x9, 0x7f, 0x7, 0xff, 0xa}, {0x300, 0x100, 0x0, 0x8, 0x1, 0x400}, {0x7, 0x0, 0x4, 0x0, 0xcbf, 0x6}, {0x0, 0x2, 0x1, 0x0, 0x2, 0xc}, {0x6, 0xfffffff8, 0x6, 0x7, 0x0, 0x10000}, {0x45, 0x1000, 0x444, 0x5, 0x2000, 0x8}, {0x2, 0xffff, 0xe, 0x6, 0xfff, 0x2}, {0x25000000, 0x5, 0x4, 0x0, 0xf429, 0x495}, {0x5, 0xfffffff5, 0x6f7, 0x4de, 0x7e}, {0xffff, 0x7, 0x9, 0x1, 0x1}, {0xa9, 0x2, 0xfff, 0x3ff, 0x1, 0x3}, {0x8000, 0xfffb, 0x3a0, 0x8, 0x7f, 0x7}, {0x5, 0x1, 0x6, 0x3, 0x8, 0x5}, {0xe, 0x62203f, 0x4, 0x7, 0x7, 0x7}, {0x1ff, 0xfff, 0x6, 0x3, 0x7, 0x35}, {0xe, 0x7, 0x1, 0x1, 0x1, 0x5}, {0x3, 0x0, 0x4, 0x9fddbfe, 0x2, 0x81}, {0x9, 0x81, 0x4, 0x0, 0x1, 0x60000}, {0x9, 0x80000000, 0x1a, 0xb8, 0x5, 0x7f}, {0x9, 0x0, 0xa, 0x5, 0x7b2c, 0xfffff575}, {0x0, 0x2, 0x7, 0xff, 0x1000, 0x101}, {0x10000, 0xb, 0x1371, 0x151e337b, 0x80000000}, {0x5, 0x3, 0x5, 0x6, 0x1, 0x45a}, {0xffffffff, 0x1000, 0x8000, 0x8, 0x6, 0x3}, {0x0, 0x1, 0x6, 0x98, 0x6, 0x8}, {0x4, 0x2, 0x3, 0xfffffff7, 0x0, 0x243a}, {0x2, 0xbc, 0x6, 0x6, 0x10, 0x1}, {0x9, 0x2, 0x7fffffff, 0x4, 0xff, 0x4}, {0x200, 0xa, 0x2, 0x6, 0x3, 0x1}, {0x8001, 0x80, 0x2, 0x1000, 0xa, 0x1}, {0x2, 0x4, 0x1, 0x9, 0x1, 0x2}, {0xff, 0x2, 0x5, 0x7f, 0x8000, 0xfffffff8}, {0xbd3, 0x100, 0x3940, 0x0, 0x10000, 0x3}, {0x3, 0x4, 0x401, 0x4, 0x50, 0x9}, {0x6, 0x5, 0xaf7f, 0x8, 0x2}, {0x8, 0xffffffff, 0x0, 0x9, 0xb1a, 0xf6fa}, {0x10, 0x10000, 0x3, 0x8, 0x8}, {0x935b, 0x6, 0x7, 0x7, 0x263, 0x24705661}, {0x800, 0x2b, 0x2ac, 0x4, 0xa, 0x10}, {0x0, 0x4, 0x1, 0x0, 0x3, 0xff}, {0x7, 0x6, 0x5, 0x10000001, 0x1, 0xffffffff}, {0x80000000, 0x0, 0x86d9, 0x8, 0x2, 0x7fff}, {0x7, 0x1, 0x0, 0x1e, 0x9, 0xd53}, {0x87, 0xffffffff, 0x1, 0x2, 0x44, 0x5}, {0x1ff, 0x8, 0xff, 0x6, 0xa, 0x8}, {0x3, 0x1, 0x6, 0x6, 0x400, 0x2}, {0x81, 0xc00000, 0x6, 0xc, 0x6, 0x3}, {0x6, 0x9, 0x5, 0x6, 0x2, 0x2}, {0x8f, 0x3, 0x3, 0x9, 0x6, 0x5}, {0x28, 0x2, 0x20000000, 0x80000001, 0x6, 0xee}, {0x5, 0xde, 0x1, 0x1c686, 0x5, 0x7f}, {0x3, 0xe8398bb3, 0xe3, 0x2, 0x1, 0x557e}, {0x80000001, 0x187b, 0x3, 0x6, 0x1b9, 0x10001}, {0x280000, 0x1ff, 0x6, 0x10001, 0x7, 0x6}, {0xfadd, 0x3, 0x5, 0x200, 0x4, 0x200}, {0x400, 0x22, 0x7, 0x1, 0x3, 0x3}, {0x5, 0x6, 0x8, 0x8, 0x6, 0xba8}, {0x5, 0x6, 0x1, 0x5, 0x5}, {0x80, 0x0, 0xfffffff7, 0x2, 0x5, 0x5}, {0x8, 0x3, 0x7, 0xcd4, 0x4, 0x5}, {0x100, 0x1ff, 0x1, 0x7, 0x5, 0x7}, {0x401, 0x6, 0x7, 0x4, 0xc231, 0xfffff001}, {0x5, 0xe, 0x10001, 0x4, 0xb5, 0xe2}, {0x1, 0x0, 0xdb, 0x2, 0x5, 0x4}, {0xf, 0x7, 0x7ff, 0x1, 0x5, 0x5}, {0x6, 0x7, 0xfffffffe, 0x80f8, 0x2, 0xc383}, {0x5, 0x6, 0xa, 0x6, 0xffff9495, 0x9}, {0x4, 0x9, 0x401, 0x8000, 0x4, 0x4b}, {0x3, 0x1, 0x3ff, 0x1ff, 0x9, 0xb6c}, {0x0, 0x8, 0x3, 0x3, 0x90, 0x40}, {0x8, 0x1, 0x0, 0x3, 0x1, 0x3fff8000}, {0x1, 0xec5, 0x1, 0xc609, 0x1, 0x7}, {0x0, 0x4, 0xe, 0xc, 0x9, 0x3}, {0x0, 0x6, 0x9, 0x1, 0x7, 0x6}, {0xfffffff8, 0x7, 0x0, 0xffffffdd, 0x5}, {0xfffffe01, 0x8, 0x1000, 0x1, 0xf, 0x1}, {0x0, 0x9, 0xfff, 0x5, 0x100, 0x4}, {0xffff8001, 0x240, 0x400, 0xfffffff8, 0x6, 0x7ff}, {0x6, 0x2976, 0x1ce, 0x1, 0x3, 0xb}, {0x1, 0x8, 0xe391, 0x9, 0x4, 0x752}, {0xb, 0x4, 0x6, 0x8e, 0xc, 0xff}, {0x5, 0x2, 0x8000, 0x0, 0x6, 0x10}, {0x6, 0xb, 0x8, 0x93, 0x9, 0x7}, {0x9, 0xfffffffb, 0x0, 0x5, 0x1, 0xeb6}, {0x9, 0xffff629c, 0x400, 0x0, 0x3359, 0x7}, {0x98, 0x3, 0xad, 0x3, 0x9, 0x6}, {0x75a2, 0x9, 0x7, 0x5, 0x8, 0xb5}, {0x8, 0x0, 0x1, 0x0, 0xfffffff8, 0x1}, {0x5eb19598, 0x8, 0x401, 0x7, 0x2, 0xe}, {0x1, 0x10, 0x5, 0xd4327e0, 0xffffffc0, 0x5}, {0x80000001, 0x401, 0xfffffff9, 0xffffc0c7, 0x100, 0x6}, {0x40, 0x93, 0x6, 0x8001, 0xdb, 0xac}, {0x7, 0x80000001, 0x2, 0x5, 0x1000, 0x6}, {0xfffffffe, 0x6, 0x7f, 0x0, 0x7, 0x9}, {0x8999, 0x4, 0x8b6, 0x68, 0x37c, 0x3ff}, {0x101, 0x2, 0x6, 0x7f, 0x9, 0x1}, {0xfffffff8, 0x3, 0x0, 0x890, 0xe5, 0x5}, {0x3, 0x10000, 0xff, 0xaa9d, 0x1}, {0x0, 0xeee, 0x1, 0x7fffffff, 0xb, 0x4}, {0x6, 0x6f9c, 0x5, 0x1, 0x2d}, {0x18a85d51, 0xae, 0x401, 0x9, 0x4, 0x800}, {0xd9, 0xffffffff, 0x2aa, 0x1, 0x4, 0x6e}, {0x8, 0x9, 0x1, 0x55, 0xfff, 0xfc}, {0x3, 0xfffffffa, 0x3ff, 0x0, 0x9, 0x2}], [{0x5}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0xca15d3d11ea0f1f1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {}, {}, {0x3}, {0x1, 0x1}, {0x8, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x4}, {0x1}, {0x4}, {0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0xb, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x7}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x5}, {0x2}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x58, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) 55.277867817s ago: executing program 0 (id=758): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000200)=@get={0x1, &(0x7f0000000180)=""/79, 0x8}) 55.277352987s ago: executing program 2 (id=759): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) io_pgetevents(0x0, 0x8, 0x0, 0x0, 0x0, 0x0) 54.282624518s ago: executing program 0 (id=761): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) 54.188655567s ago: executing program 2 (id=762): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000080850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 54.15211898s ago: executing program 2 (id=763): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r2, 0x20000005) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 53.994708065s ago: executing program 2 (id=765): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_gettime(0x0, &(0x7f0000000080)) 53.927977461s ago: executing program 2 (id=767): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000300)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x4, "66d67158edf2dfdf8fcc23f63d89c683f8c04d877e595fe494c6b82ecebac76b", "e8826f16db098413c1b2f0e01f858656", {"84fa029e29db6cce0ce7303c34582164", "7f72b589099713dc4718963b9706422b"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x0, 0x0) 52.985375428s ago: executing program 2 (id=769): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = timerfd_create(0x8, 0x0) timerfd_settime(r3, 0x3, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000001000010400000000000b000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b00010065727370616e00002800028004001200080007007f00000108000100", @ANYRES32, @ANYBLOB="050013"], 0x58}}, 0x0) r5 = gettid() ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r6, 0x5) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r7, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000a00000000000018010000d4d7702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r8}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_hsr\x00'}) 51.319487302s ago: executing program 0 (id=773): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x7ffffffffffffffd}, 0x18) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)="e9bed67a87ee4623d39c10780000000000000000", 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4000814) 51.265227927s ago: executing program 0 (id=775): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x13) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 51.087799653s ago: executing program 0 (id=777): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000440)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x3, 0x431, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x9d8, 0xe}}, './bus\x00'}) ioctl$KDADDIO(r2, 0x4b34, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000003e4a0c2927b89160d00000000f4df43544799d59b45bc11f26ea93d36000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(r5, &(0x7f0000008f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) io_uring_setup(0x79bb, &(0x7f0000000400)) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, &(0x7f0000000080), 0x10) listen(r7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r8 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16.237206709s ago: executing program 1 (id=715): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x7) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x2f, 0xf4, 0xab, 0x5, 0x2, @mcast2, @loopback, 0x80, 0x10, 0x4, 0x7fffffff}}) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000880)={0x0, 0x1, 0x3, 0x7, @vifc_lcl_ifindex=r1, @multicast2}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x80000006}, 0x1c, 0x0, 0x0, 0x0, 0x58}}], 0x1, 0x40000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="a80000003800090000000000000000000100000004000000900001"], 0xa8}}, 0x0) bind$can_raw(r4, &(0x7f00000001c0)={0x1d, r5}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) bind$can_raw(r4, &(0x7f0000000040)={0x1d, r7}, 0x10) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r11], 0x20}}, 0x0) 11.041533816s ago: executing program 3 (id=859): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) 9.818017028s ago: executing program 3 (id=868): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe79, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close(r0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000880)='./bus\x00', 0x40, &(0x7f00000000c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@nodelalloc}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000900)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 9.756532914s ago: executing program 4 (id=861): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 9.634786036s ago: executing program 4 (id=862): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syslog(0x2, &(0x7f0000000280)=""/150, 0x96) 8.799297072s ago: executing program 4 (id=863): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x4, 0xfa00, {r1, 0x3}}, 0x10) 8.641087727s ago: executing program 4 (id=864): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f6ff850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8a, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 6.301727011s ago: executing program 4 (id=865): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x18, 0x5a, 0x1, 0x0, 0x0, {0x16}, [@nested={0x4, 0x5}]}, 0x18}}, 0x0) 5.925520186s ago: executing program 4 (id=867): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) r6 = socket(0x10, 0x3, 0x6) r7 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x0) syz_emit_ethernet(0x7a, 0x0, 0x0) r9 = dup(0xffffffffffffffff) ioctl$TIOCL_SETSEL(r9, 0x541c, 0x0) 5.325132331s ago: executing program 3 (id=869): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 2.918563032s ago: executing program 3 (id=870): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000080), 0x1, 0x23b, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="08000000020000000b"], 0x60200) 187.901553ms ago: executing program 3 (id=871): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) faccessat(0xffffffffffffffff, 0x0, 0x10) 0s ago: executing program 3 (id=872): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0x4004662b, &(0x7f0000000180)={@id={0x2, 0x0, @auto="05d4f5079caf75d3cdcbceab9c468b45"}}) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000100), 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): _1: link becomes ready [ 48.502296][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.503740][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.505751][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.508141][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.510459][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.514221][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.515740][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.517646][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.519903][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.541381][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.543982][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.546269][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.559167][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.560743][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.567327][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.569147][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.583594][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.586087][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.588320][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.604619][ T4025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.610478][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.613261][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.615702][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.620280][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.637101][ T4035] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.639198][ T4035] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.649883][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.653244][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.654914][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.657106][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.660018][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.667401][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.669663][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.674829][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.677898][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.680012][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.686101][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.688600][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.702894][ T4036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.725961][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.728294][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.730457][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.733661][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.753985][ T4032] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.756777][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.763622][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.765324][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.767139][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.770896][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.773514][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.775713][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.794968][ T4025] device veth0_vlan entered promiscuous mode [ 48.800355][ T4029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.806946][ T4036] device veth0_vlan entered promiscuous mode [ 48.812683][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.814912][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.817176][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.830873][ T1533] Bluetooth: hci0: command 0x041b tx timeout [ 48.839545][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.848950][ T4025] device veth1_vlan entered promiscuous mode [ 48.855953][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.858012][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.860255][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.863516][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.866586][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.868655][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.876339][ T4036] device veth1_vlan entered promiscuous mode [ 48.902620][ T4025] device veth0_macvtap entered promiscuous mode [ 48.907165][ T4025] device veth1_macvtap entered promiscuous mode [ 48.920975][ T4075] Bluetooth: hci1: command 0x041b tx timeout [ 48.922812][ T4095] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.924843][ T4095] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.926941][ T4095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.929065][ T4095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.933718][ T4095] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.936383][ T4095] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.938014][ T4095] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.939700][ T4095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.948368][ T4095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.952357][ T4095] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.959099][ T4036] device veth0_macvtap entered promiscuous mode [ 48.965889][ T4036] device veth1_macvtap entered promiscuous mode [ 48.978385][ T4035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.991944][ T4075] Bluetooth: hci3: command 0x041b tx timeout [ 48.994567][ T4075] Bluetooth: hci4: command 0x041b tx timeout [ 48.995908][ T4075] Bluetooth: hci2: command 0x041b tx timeout [ 49.008427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.011462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.013525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.016562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.033549][ T4036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.035351][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.037623][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.041494][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.043789][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.046876][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.054968][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.062386][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.064628][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.067742][ T4036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.081791][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.083991][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.086177][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.088297][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.090436][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.095585][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.103777][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.106012][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.110470][ T4025] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.114564][ T4025] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.116416][ T4025] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.118137][ T4025] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.129434][ T4036] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.132838][ T4036] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.134593][ T4036] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.136241][ T4036] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.142158][ T4035] device veth0_vlan entered promiscuous mode [ 49.148143][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.150223][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.176541][ T4095] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.178257][ T4095] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.217526][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.219931][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.222663][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.224874][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.227109][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.229177][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.232601][ T4035] device veth1_vlan entered promiscuous mode [ 49.237811][ T4032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.250451][ T4029] device veth0_vlan entered promiscuous mode [ 49.265684][ T4029] device veth1_vlan entered promiscuous mode [ 49.315662][ T4095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.317367][ T4095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.330732][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.333648][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.335647][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.337662][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.339679][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.346048][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.348488][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.350888][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.353052][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.355834][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.358348][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.379676][ T4035] device veth0_macvtap entered promiscuous mode [ 49.390089][ T4035] device veth1_macvtap entered promiscuous mode [ 49.412889][ T4029] device veth0_macvtap entered promiscuous mode [ 49.427913][ T1704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.431241][ T1704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.437560][ T293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.439171][ T293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.444373][ T4029] device veth1_macvtap entered promiscuous mode [ 49.454103][ T4032] device veth0_vlan entered promiscuous mode [ 49.462708][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.465055][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.467229][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.469357][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.473599][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.475766][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.477783][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.480010][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.483611][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.485752][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.496156][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.498210][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.508197][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.510343][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.515329][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.524643][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.526823][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.528721][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.532473][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.535767][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.537978][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.540349][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.544536][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.547061][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.564877][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.567073][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.568994][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.591789][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.593959][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.596039][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.599546][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.606832][ T293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.608528][ T4035] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.608578][ T4035] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.608602][ T4035] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.614705][ T293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.618419][ T4035] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.622594][ T4032] device veth1_vlan entered promiscuous mode [ 49.634077][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.636432][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.638516][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.639350][ T4104] loop1: detected capacity change from 0 to 512 [ 49.641718][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.644497][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.646738][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.648672][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.653258][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.655477][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.657635][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.666952][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.687670][ T4095] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.690066][ T4095] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.694006][ T4095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.719697][ T4104] ======================================================= [ 49.719697][ T4104] WARNING: The mand mount option has been deprecated and [ 49.719697][ T4104] and is ignored by this kernel. Remove the mand [ 49.719697][ T4104] option from the mount to silence this warning. [ 49.719697][ T4104] ======================================================= [ 49.730110][ T4029] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.732892][ T4029] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.734760][ T4029] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.736547][ T4029] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.761507][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.763878][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.772116][ T4032] device veth0_macvtap entered promiscuous mode [ 49.780744][ T4032] device veth1_macvtap entered promiscuous mode [ 49.821721][ T4104] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,nouid32,minixdf,,errors=continue. Quota mode: writeback. [ 49.834522][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.836676][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.838606][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.843360][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.844747][ T4104] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 49.845404][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.849587][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.851596][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.854023][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.857702][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.934866][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.937328][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.939375][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.943823][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.947590][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.949810][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.954208][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.956539][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.958732][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.962413][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.964658][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.966948][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.973308][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.985219][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.987596][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.994539][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.996528][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.999121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.012793][ T4032] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.015895][ T4032] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.017731][ T4032] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.019913][ T4032] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.062581][ T1704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.064450][ T1704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.072621][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.168553][ T293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.170392][ T293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.175731][ T1704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.176793][ T4114] Invalid ELF header magic: != ELF [ 50.178060][ T1704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.182328][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.188365][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.238772][ T1704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.241782][ T1704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.257908][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.278173][ T1704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.279988][ T1704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.285238][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.342395][ T4118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7'. [ 50.457693][ T4122] loop4: detected capacity change from 0 to 512 [ 50.541507][ T4122] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2765: inode #11: comm syz.4.5: corrupted xattr block 95 [ 50.545228][ T4122] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2815: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 50.555528][ T4122] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.5: bg 0: block 7: invalid block bitmap [ 50.570650][ T4122] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 50.576791][ T4122] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2931: inode #11: comm syz.4.5: corrupted xattr block 95 [ 50.587910][ T4122] EXT4-fs warning (device loop4): ext4_evict_inode:302: xattr delete (err -117) [ 50.600228][ T4122] EXT4-fs (loop4): 1 orphan inode deleted [ 50.606065][ T4122] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 50.911519][ T4075] Bluetooth: hci0: command 0x040f tx timeout [ 50.991641][ T4075] Bluetooth: hci1: command 0x040f tx timeout [ 51.081522][ T4075] Bluetooth: hci2: command 0x040f tx timeout [ 51.083011][ T4075] Bluetooth: hci4: command 0x040f tx timeout [ 51.084283][ T4075] Bluetooth: hci3: command 0x040f tx timeout [ 51.098301][ T4138] loop2: detected capacity change from 0 to 1024 [ 51.169508][ T4139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 51.171585][ T4139] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 51.202290][ T4138] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 51.425983][ T4146] syz.4.14 uses obsolete (PF_INET,SOCK_PACKET) [ 51.706781][ T4104] Process accounting resumed [ 51.773330][ T4158] 9pnet: Insufficient options for proto=fd [ 51.857331][ T4164] atomic_op 00000000e53812ba conn xmit_atomic 0000000000000000 [ 51.984360][ T4166] loop1: detected capacity change from 0 to 128 [ 52.046355][ T4166] attempt to access beyond end of device [ 52.046355][ T4166] loop1: rw=2049, want=1041, limit=128 [ 52.070966][ T4165] attempt to access beyond end of device [ 52.070966][ T4165] loop1: rw=524288, want=369, limit=128 [ 52.139118][ T4171] loop4: detected capacity change from 0 to 512 [ 52.189680][ T4171] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 52.354837][ T4182] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 52.479000][ T4186] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.569088][ T4192] netlink: 'syz.2.31': attribute type 2 has an invalid length. [ 52.571508][ T4192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.31'. [ 52.606914][ T4188] xt_recent: hitcount (456) is larger than allowed maximum (255) [ 52.624617][ T4195] mmap: syz.4.34 (4195) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 52.727195][ T4198] loop1: detected capacity change from 0 to 512 [ 52.773820][ T4202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.38'. [ 52.811781][ T4198] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 52.814421][ T4198] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 52.846831][ T4198] EXT4-fs (loop1): 1 truncate cleaned up [ 52.848073][ T4198] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 53.001436][ T3320] Bluetooth: hci0: command 0x0419 tx timeout [ 53.072817][ T3320] Bluetooth: hci1: command 0x0419 tx timeout [ 53.127962][ T26] audit: type=1326 audit(53.080:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4215 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 53.139376][ T26] audit: type=1326 audit(53.080:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4215 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 53.142022][ T4219] loop3: detected capacity change from 0 to 512 [ 53.144569][ T26] audit: type=1326 audit(53.090:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4215 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 53.149724][ T26] audit: type=1326 audit(53.090:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4215 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 53.155098][ T3320] Bluetooth: hci3: command 0x0419 tx timeout [ 53.161062][ T3320] Bluetooth: hci4: command 0x0419 tx timeout [ 53.161955][ T26] audit: type=1326 audit(53.090:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4215 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 53.162492][ T3320] Bluetooth: hci2: command 0x0419 tx timeout [ 53.166822][ T26] audit: type=1326 audit(53.090:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4215 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 53.183202][ T26] audit: type=1326 audit(53.090:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4215 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 53.189618][ T26] audit: type=1326 audit(53.090:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4215 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 53.198984][ T4219] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 53.201069][ T26] audit: type=1326 audit(53.090:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4215 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 53.201130][ T4219] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 53.205559][ T26] audit: type=1326 audit(53.090:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4215 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 53.225029][ T4219] EXT4-fs (loop3): 1 truncate cleaned up [ 53.227119][ T4219] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,resuid=0x0000000000000000,inode_readahead_blks=0x0000000000010000,noload,nomblk_io_submit,max_batch_time=0x0000000000000002,,errors=continue. Quota mode: none. [ 54.504373][ T4186] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.562521][ T4186] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.617383][ T4186] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.762791][ T4186] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.770707][ T4186] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.776254][ T4186] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.788502][ T4186] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.019709][ T4259] xt_CT: You must specify a L4 protocol and not use inversions on it [ 55.280124][ T4265] loop0: detected capacity change from 0 to 128 [ 55.316646][ T4267] loop3: detected capacity change from 0 to 512 [ 55.373809][ T4267] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 55.375671][ T4267] EXT4-fs (loop3): Ignoring removed nobh option [ 55.377317][ T4267] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.419784][ T4267] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.62: corrupted in-inode xattr [ 55.443072][ T4267] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.62: couldn't read orphan inode 15 (err -117) [ 55.463083][ T4267] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,mblk_io_submit,user_xattr,nobh,block_validity,quota,,errors=continue. Quota mode: writeback. [ 55.544329][ T4276] loop1: detected capacity change from 0 to 128 [ 55.634810][ T4276] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 55.978464][ T4290] loop3: detected capacity change from 0 to 512 [ 56.040647][ T4290] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 56.043130][ T4290] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 56.076695][ T4290] EXT4-fs (loop3): 1 truncate cleaned up [ 56.077966][ T4290] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,resuid=0x0000000000000000,inode_readahead_blks=0x0000000000010000,noload,nomblk_io_submit,max_batch_time=0x0000000000000002,,errors=continue. Quota mode: none. [ 56.129932][ T4309] loop1: detected capacity change from 0 to 512 [ 56.186212][ T4309] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 56.187866][ T4309] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 56.238318][ T4309] EXT4-fs (loop1): 1 truncate cleaned up [ 56.239704][ T4309] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,resuid=0x0000000000000000,inode_readahead_blks=0x0000000000010000,noload,nomblk_io_submit,max_batch_time=0x0000000000000002,,errors=continue. Quota mode: none. [ 56.404909][ T4319] vhci_hcd: default hub control req: 0006 v0005 i0002 l0 [ 56.620240][ T4332] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.708663][ T4332] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.753424][ T4337] netlink: 'syz.0.80': attribute type 2 has an invalid length. [ 56.756230][ T4337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.80'. [ 56.792165][ T4337] xt_recent: hitcount (456) is larger than allowed maximum (255) [ 56.833069][ T4332] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.908361][ T4332] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.079958][ T4332] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.093651][ T4332] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.108692][ T4332] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.114582][ T4332] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.248122][ T4358] netlink: 16 bytes leftover after parsing attributes in process `syz.0.86'. [ 57.345228][ T4360] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 57.358121][ T4360] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 57.370199][ T4360] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 57.385957][ T4360] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 57.387953][ T4360] device geneve2 entered promiscuous mode [ 57.420338][ T4358] netlink: 16 bytes leftover after parsing attributes in process `syz.0.86'. [ 57.490828][ T4366] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 57.522299][ T4369] netlink: 48 bytes leftover after parsing attributes in process `syz.1.90'. [ 57.609901][ T4358] netlink: 16 bytes leftover after parsing attributes in process `syz.0.86'. [ 57.675717][ T4377] capability: warning: `syz.2.93' uses deprecated v2 capabilities in a way that may be insecure [ 57.963628][ T4387] IPVS: length: 202 != 8 [ 58.136169][ T4394] device batadv0 entered promiscuous mode [ 58.171779][ T4394] device batadv_slave_0 entered promiscuous mode [ 58.173332][ T4394] device batadv_slave_0 left promiscuous mode [ 58.174969][ T4394] device batadv0 left promiscuous mode [ 58.663343][ T4406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.105'. [ 58.679715][ T4406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.105'. [ 59.030076][ T4422] netlink: 256 bytes leftover after parsing attributes in process `syz.4.112'. [ 59.032811][ T4422] nbd: must specify a device to reconfigure [ 60.107533][ T26] kauditd_printk_skb: 170 callbacks suppressed [ 60.107546][ T26] audit: type=1326 audit(60.060:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 60.120839][ T26] audit: type=1326 audit(60.080:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 60.132129][ T26] audit: type=1326 audit(60.080:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 60.161792][ T26] audit: type=1326 audit(60.080:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 60.166047][ T26] audit: type=1326 audit(60.080:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 60.193699][ T26] audit: type=1326 audit(60.100:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 60.198113][ T26] audit: type=1326 audit(60.100:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 60.233994][ T26] audit: type=1326 audit(60.100:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 60.238383][ T26] audit: type=1326 audit(60.110:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 60.267383][ T26] audit: type=1326 audit(60.110:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 60.466531][ T4463] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.127' sets config #0 [ 60.864770][ T4484] loop2: detected capacity change from 0 to 128 [ 60.919240][ T4484] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.933895][ T4484] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 60.948483][ T4493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'. [ 60.954042][ T4496] loop0: detected capacity change from 0 to 128 [ 60.965396][ T4493] device bond1 entered promiscuous mode [ 60.966818][ T4493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.968488][ T4494] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 60.970073][ T4494] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 60.999434][ T4494] vhci_hcd vhci_hcd.0: Device attached [ 61.018712][ T4495] vhci_hcd: connection closed [ 61.037183][ T4095] vhci_hcd: stop threads [ 61.039582][ T4095] vhci_hcd: release socket [ 61.041157][ T4095] vhci_hcd: disconnect device [ 61.041544][ T4496] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.557549][ T4521] loop3: detected capacity change from 0 to 512 [ 62.273065][ T4521] EXT4-fs (loop3): orphan cleanup on readonly fs [ 62.281086][ T4521] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.146: bg 0: block 248: padding at end of block bitmap is not set [ 62.330929][ T4521] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.146: Failed to acquire dquot type 1 [ 62.389707][ T4521] EXT4-fs (loop3): 1 truncate cleaned up [ 62.427568][ T4521] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 62.572500][ T4551] loop2: detected capacity change from 0 to 512 [ 62.661946][ T4551] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 62.691111][ T4551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.154'. [ 62.693375][ T4551] device bridge_slave_1 left promiscuous mode [ 62.695894][ T4551] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.746876][ T4551] device bridge_slave_0 left promiscuous mode [ 62.748449][ T4551] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.756997][ T4560] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 62.993103][ T4564] netlink: 277 bytes leftover after parsing attributes in process `syz.1.159'. [ 63.326760][ T4577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.164'. [ 63.339719][ T4579] loop0: detected capacity change from 0 to 512 [ 63.346389][ T4577] batman_adv: Cannot find parent device [ 63.360255][ T4579] EXT4-fs (loop0): Unrecognized mount option "permit_directio" or missing value [ 63.819115][ T4586] loop2: detected capacity change from 0 to 512 [ 63.833009][ T4588] loop0: detected capacity change from 0 to 128 [ 63.879162][ T4586] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 63.900964][ T4588] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,discard,,errors=continue. Quota mode: none. [ 63.909171][ T4586] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 63.915026][ T4586] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 63.943252][ T4586] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 63.945127][ T4586] [EXT4 FS bs=4096, gc=2, bpg=33, ipg=32, mo=e040e01c, mo2=0000] [ 63.946795][ T4586] EXT4-fs (loop2): failed to initialize system zone (-117) [ 63.948807][ T4586] EXT4-fs (loop2): mount failed [ 64.631250][ T4615] loop2: detected capacity change from 0 to 512 [ 64.685209][ T4016] hid (null): unknown global tag 0xc [ 64.689796][ T4016] hid-generic 000F:FFFF:0388.0001: unknown main item tag 0xd [ 64.703174][ T4016] hid-generic 000F:FFFF:0388.0001: unknown main item tag 0x4 [ 64.708288][ T4016] hid-generic 000F:FFFF:0388.0001: unknown main item tag 0x1 [ 64.715829][ T4016] hid-generic 000F:FFFF:0388.0001: unknown global tag 0xc [ 64.720347][ T4016] hid-generic 000F:FFFF:0388.0001: item 0 4 1 12 parsing failed [ 64.722558][ T4622] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 64.723924][ T4622] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 64.730398][ T4016] hid-generic: probe of 000F:FFFF:0388.0001 failed with error -22 [ 64.733703][ T4622] vhci_hcd vhci_hcd.0: Device attached [ 64.747437][ T4623] vhci_hcd: connection closed [ 64.747652][ T148] vhci_hcd: stop threads [ 64.749499][ T148] vhci_hcd: release socket [ 64.750390][ T148] vhci_hcd: disconnect device [ 65.233574][ T4633] 9pnet: Insufficient options for proto=fd [ 65.800358][ T4647] loop2: detected capacity change from 0 to 512 [ 65.973186][ T26] kauditd_printk_skb: 43 callbacks suppressed [ 65.973199][ T26] audit: type=1326 audit(65.930:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4653 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 66.005057][ T26] audit: type=1326 audit(65.960:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4653 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 66.012914][ T26] audit: type=1326 audit(65.970:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4653 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 66.030280][ T26] audit: type=1326 audit(65.970:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4653 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 66.082229][ T26] audit: type=1326 audit(65.970:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4653 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 66.103142][ T26] audit: type=1326 audit(65.970:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4653 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 66.121424][ T26] audit: type=1326 audit(65.970:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4653 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 66.125569][ T26] audit: type=1326 audit(65.980:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4653 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 66.130140][ T26] audit: type=1326 audit(65.980:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4653 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 66.134878][ T26] audit: type=1326 audit(65.980:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4653 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 66.211850][ T4647] EXT4-fs (loop2): Test dummy encryption mode enabled [ 66.219336][ T4647] EXT4-fs error (device loop2): ext4_fill_super:4840: inode #2: comm syz.2.190: casefold flag without casefold feature [ 66.238500][ T4647] EXT4-fs (loop2): get root inode failed [ 66.239778][ T4647] EXT4-fs (loop2): mount failed [ 66.275500][ T4669] loop1: detected capacity change from 0 to 512 [ 66.380674][ T4676] process 'syz.3.201' launched './file1' with NULL argv: empty string added [ 66.403353][ T4675] loop0: detected capacity change from 0 to 512 [ 66.443523][ T4675] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 66.445278][ T4675] EXT4-fs (loop0): error: journal path ./bus is not a block device [ 66.481015][ T4669] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 66.600156][ T4689] loop2: detected capacity change from 0 to 512 [ 66.809698][ T4689] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 66.812895][ T4689] EXT4-fs (loop2): orphan cleanup on readonly fs [ 66.814800][ T4689] EXT4-fs warning (device loop2): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 66.817946][ T4689] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 66.842969][ T4689] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.204: bg 0: block 40: padding at end of block bitmap is not set [ 66.877210][ T4689] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 66.904875][ T4689] EXT4-fs (loop2): 1 truncate cleaned up [ 66.917066][ T4689] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 67.551366][ T4729] ieee802154 phy0 wpan0: encryption failed: -22 [ 67.835246][ T4747] loop1: detected capacity change from 0 to 512 [ 67.847850][ T4743] loop4: detected capacity change from 0 to 2048 [ 67.859800][ T4747] EXT4-fs (loop1): Ignoring removed bh option [ 67.861366][ T4747] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 67.862865][ T4747] EXT4-fs (loop1): Unrecognized mount option "=" or missing value [ 67.991233][ T4743] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.583654][ T4772] loop1: detected capacity change from 0 to 2048 [ 68.684012][ T4772] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 68.720001][ T4772] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,dioread_nolock,data_err=abort,errors=remount-ro,. Quota mode: writeback. [ 68.774175][ T4772] EXT4-fs error (device loop1): ext4_find_extent:929: inode #2: comm syz.1.236: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 68.799073][ T4772] EXT4-fs (loop1): Remounting filesystem read-only [ 69.321370][ T4813] netlink: 'syz.1.253': attribute type 6 has an invalid length. [ 69.398554][ T4818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.254'. [ 69.486133][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 69.634801][ T21] cfg80211: failed to load regulatory.db [ 69.638514][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.639906][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.849998][ T4843] loop0: detected capacity change from 0 to 512 [ 69.898924][ T4843] EXT4-fs (loop0): Ignoring removed orlov option [ 69.966010][ T4843] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 70.472888][ T4869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.278'. [ 70.747530][ T4883] netlink: 'syz.4.283': attribute type 27 has an invalid length. [ 71.142740][ T26] kauditd_printk_skb: 104 callbacks suppressed [ 71.142752][ T26] audit: type=1326 audit(71.100:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.1.284" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e5cf728 code=0x7ffc0000 [ 71.159603][ T26] audit: type=1326 audit(71.110:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.1.284" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8e5cf728 code=0x7ffc0000 [ 71.166102][ T26] audit: type=1326 audit(71.120:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.1.284" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e5cf728 code=0x7ffc0000 [ 71.191617][ T26] audit: type=1326 audit(71.120:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.1.284" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8e5cf728 code=0x7ffc0000 [ 71.207176][ T26] audit: type=1326 audit(71.130:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.1.284" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e5cf728 code=0x7ffc0000 [ 71.239821][ T26] audit: type=1326 audit(71.130:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.1.284" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8e5cf728 code=0x7ffc0000 [ 71.256265][ T26] audit: type=1326 audit(71.130:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.1.284" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e5cf728 code=0x7ffc0000 [ 71.270655][ T26] audit: type=1326 audit(71.130:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.1.284" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=60 compat=0 ip=0xffff8e5cf728 code=0x7ffc0000 [ 71.275565][ T26] audit: type=1326 audit(71.130:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.1.284" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e5cf728 code=0x7ffc0000 [ 71.724968][ T4883] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.726652][ T4883] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.364429][ T26] audit: type=1326 audit(72.320:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 72.408661][ T4909] loop0: detected capacity change from 0 to 512 [ 72.434420][ T4909] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 72.436673][ T4909] EXT4-fs (loop0): orphan cleanup on readonly fs [ 72.449206][ T4909] EXT4-fs warning (device loop0): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 72.453527][ T4909] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 72.456890][ T4909] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.292: bg 0: block 40: padding at end of block bitmap is not set [ 72.466509][ T4909] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 72.469290][ T4909] EXT4-fs (loop0): 1 truncate cleaned up [ 72.472235][ T4909] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.568048][ T4883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.611198][ T4883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.331249][ T4883] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.333126][ T4883] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.334875][ T4883] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.336627][ T4883] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.771292][ T4894] IPv6: Can't replace route, no match found [ 73.778664][ T4896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.286'. [ 73.780817][ T4896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.286'. [ 73.980367][ T4935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.078574][ T4935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.167410][ T4935] bond0 (unregistering): Released all slaves [ 74.570096][ T4956] netlink: 20 bytes leftover after parsing attributes in process `syz.3.311'. [ 74.635832][ T4958] usb usb1: usbfs: process 4958 (syz.1.312) did not claim interface 0 before use [ 75.047193][ T4973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.319'. [ 75.443339][ T4984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.324'. [ 75.445365][ T4984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.446972][ T4984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.489153][ T4984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.491675][ T4984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.724782][ T5035] loop1: detected capacity change from 0 to 1024 [ 76.747543][ T5035] EXT4-fs (loop1): Ignoring removed nobh option [ 76.748843][ T5035] EXT4-fs (loop1): Ignoring removed orlov option [ 76.793152][ T5035] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,abort,block_validity,init_itable=0x0000000000000006,block_validity,max_dir_size_kb=0x00000000000007b4,nobh,block_validity,orlov,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 76.873417][ T5035] EXT4-fs error (device loop1): ext4_remount:5854: comm syz.1.348: Abort forced by user [ 76.886181][ T5035] EXT4-fs (loop1): Remounting filesystem read-only [ 77.016414][ T5046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.352'. [ 77.018383][ T5046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'. [ 77.102313][ T5044] netlink: 36 bytes leftover after parsing attributes in process `syz.2.347'. [ 77.133436][ T5050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.353'. [ 78.608996][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 78.609009][ T26] audit: type=1326 audit(78.560:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5086 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9429728 code=0x7ffc0000 [ 78.618727][ T26] audit: type=1326 audit(78.570:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5086 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb9429728 code=0x7ffc0000 [ 78.636323][ T26] audit: type=1326 audit(78.570:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5086 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9429728 code=0x7ffc0000 [ 78.653474][ T26] audit: type=1326 audit(78.580:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5086 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb9429728 code=0x7ffc0000 [ 78.682166][ T26] audit: type=1326 audit(78.580:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5086 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9429728 code=0x7ffc0000 [ 78.704400][ T26] audit: type=1326 audit(78.580:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5086 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb9429728 code=0x7ffc0000 [ 78.722419][ T26] audit: type=1326 audit(78.580:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5086 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9429728 code=0x7ffc0000 [ 78.737785][ T26] audit: type=1326 audit(78.580:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5086 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb9429728 code=0x7ffc0000 [ 78.756834][ T26] audit: type=1326 audit(78.580:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5086 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9429728 code=0x7ffc0000 [ 78.775986][ T26] audit: type=1326 audit(78.580:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5086 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb9429728 code=0x7ffc0000 [ 78.833434][ T5093] loop3: detected capacity change from 0 to 512 [ 78.923555][ T5095] loop2: detected capacity change from 0 to 512 [ 78.925228][ T5093] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.973209][ T5095] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 78.974987][ T5095] EXT4-fs (loop2): DAX unsupported by block device. [ 79.189660][ T5100] loop3: detected capacity change from 0 to 512 [ 79.198690][ T5100] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 79.203827][ T5100] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002] [ 79.206174][ T5100] EXT4-fs (loop3): orphan cleanup on readonly fs [ 80.102688][ T5100] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.368: bg 0: block 361: padding at end of block bitmap is not set [ 80.125032][ T5100] EXT4-fs (loop3): Remounting filesystem read-only [ 80.130989][ T5100] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 80.141659][ T5100] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.368: attempt to clear invalid blocks 33619980 len 1 [ 80.176281][ T5100] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.368: invalid indirect mapped block 1811939328 (level 0) [ 80.180673][ T5100] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.368: invalid indirect mapped block 2185560079 (level 1) [ 80.190152][ T5100] EXT4-fs (loop3): 1 truncate cleaned up [ 80.198466][ T5100] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000000000000. Quota mode: none. [ 80.616641][ T5121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.375'. [ 81.139501][ T5138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.382'. [ 81.148078][ T5138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.382'. [ 81.484709][ T5159] Zero length message leads to an empty skb [ 81.601467][ T5162] Invalid ELF header magic: != ELF [ 82.554624][ T5178] loop3: detected capacity change from 0 to 512 [ 82.554711][ T5181] netlink: 48 bytes leftover after parsing attributes in process `syz.2.398'. [ 82.585713][ T5178] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 82.657973][ T5178] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.397: invalid indirect mapped block 10 (level 1) [ 82.681629][ T5178] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.397: invalid indirect mapped block 8 (level 1) [ 82.717963][ T5178] EXT4-fs (loop3): 1 truncate cleaned up [ 82.719182][ T5178] EXT4-fs (loop3): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 82.854444][ T5194] netlink: 256 bytes leftover after parsing attributes in process `syz.0.402'. [ 82.867991][ T5194] nbd: must specify a device to reconfigure [ 83.195500][ T5201] netlink: 'syz.1.405': attribute type 10 has an invalid length. [ 83.258314][ T5201] team0: Port device netdevsim0 added [ 83.274738][ T5204] netlink: 'syz.1.405': attribute type 10 has an invalid length. [ 83.362447][ T5204] team0: Port device netdevsim0 removed [ 83.366756][ T5204] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 83.669267][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 83.669282][ T26] audit: type=1326 audit(83.620:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5218 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e5cf728 code=0x7ffc0000 [ 83.676053][ T26] audit: type=1326 audit(83.630:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5218 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8e5cdcc4 code=0x7ffc0000 [ 83.706713][ T26] audit: type=1326 audit(83.630:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5218 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e5cf728 code=0x7ffc0000 [ 83.738780][ T26] audit: type=1326 audit(83.630:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5218 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=67 compat=0 ip=0xffff8e5cf728 code=0x7ffc0000 [ 83.765303][ T26] audit: type=1326 audit(83.630:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5218 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e5cf728 code=0x7ffc0000 [ 84.131676][ T26] audit: type=1326 audit(84.090:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5229 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 84.150710][ T26] audit: type=1326 audit(84.100:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5229 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 84.161627][ T26] audit: type=1326 audit(84.110:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5229 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 84.186746][ T26] audit: type=1326 audit(84.110:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5229 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 84.207769][ T26] audit: type=1326 audit(84.110:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5229 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 86.179483][ T5258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'. [ 86.187144][ T5258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'. [ 86.842190][ T5285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.440'. [ 87.739084][ T5285] device ip6gretap0 entered promiscuous mode [ 87.752927][ T5291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.440'. [ 87.756557][ T5291] device ip6gretap0 left promiscuous mode [ 88.291892][ T5314] Cannot find set identified by id 0 to match [ 88.392153][ T5317] netlink: 'syz.2.452': attribute type 10 has an invalid length. [ 88.441933][ T5317] team0: Device hsr_slave_0 failed to register rx_handler [ 88.908999][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 88.909012][ T26] audit: type=1326 audit(88.860:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5340 comm="syz.1.459" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e5cf728 code=0x7ffc0000 [ 88.918707][ T26] audit: type=1326 audit(88.870:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5340 comm="syz.1.459" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e5cf728 code=0x7ffc0000 [ 88.964182][ T26] audit: type=1326 audit(88.870:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5340 comm="syz.1.459" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffff8e5cf728 code=0x7ffc0000 [ 88.965050][ T4075] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 88.976340][ T4075] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 88.994548][ T26] audit: type=1326 audit(88.870:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5340 comm="syz.1.459" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e5cf728 code=0x7ffc0000 [ 89.018185][ T26] audit: type=1326 audit(88.880:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5340 comm="syz.1.459" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e5cf728 code=0x7ffc0000 [ 89.063125][ T26] audit: type=1326 audit(89.020:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e5cf728 code=0x7ffc0000 [ 89.065032][ T26] audit: type=1326 audit(89.020:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e5cf728 code=0x7ffc0000 [ 89.066424][ T26] audit: type=1326 audit(89.020:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8e5cf728 code=0x7ffc0000 [ 89.069626][ T26] audit: type=1326 audit(89.020:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e5cf728 code=0x7ffc0000 [ 89.069799][ T26] audit: type=1326 audit(89.020:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e5cf728 code=0x7ffc0000 [ 90.541754][ T5381] loop1: detected capacity change from 0 to 512 [ 90.578017][ T5381] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 90.579682][ T5381] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 90.601611][ T5381] EXT4-fs (loop1): 1 truncate cleaned up [ 90.602959][ T5381] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,resuid=0x0000000000000000,inode_readahead_blks=0x0000000000010000,noload,nomblk_io_submit,max_batch_time=0x0000000000000002,,errors=continue. Quota mode: none. [ 90.811317][ T5394] device bond1 entered promiscuous mode [ 90.822128][ T5394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.874959][ T5394] bond1 (unregistering): Released all slaves [ 91.297775][ T5416] loop4: detected capacity change from 0 to 512 [ 91.310385][ T5416] EXT4-fs (loop4): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 91.322632][ T5416] EXT4-fs (loop4): DAX unsupported by block device. [ 92.695352][ T5432] netlink: 60 bytes leftover after parsing attributes in process `syz.0.486'. [ 93.025416][ T5441] loop4: detected capacity change from 0 to 2048 [ 93.120819][ T5441] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 93.154221][ T5449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.492'. [ 93.195690][ T5449] device ip6gretap0 entered promiscuous mode [ 93.216142][ T5456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.492'. [ 93.221511][ T5456] device ip6gretap0 left promiscuous mode [ 93.229819][ T5441] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,abort,mblk_io_submit,nouid32,barrier=0x0000000000000002,grpjquota=,max_dir_size_kb=0x0000000000000401,. Quota mode: none. [ 94.088909][ T26] kauditd_printk_skb: 143 callbacks suppressed [ 94.088922][ T26] audit: type=1326 audit(94.040:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 94.100463][ T26] audit: type=1326 audit(94.050:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 94.130724][ T26] audit: type=1326 audit(94.060:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 94.148151][ T26] audit: type=1326 audit(94.060:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 94.171784][ T26] audit: type=1326 audit(94.060:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 94.176027][ T26] audit: type=1326 audit(94.070:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 94.215485][ T26] audit: type=1326 audit(94.070:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 94.240189][ T26] audit: type=1326 audit(94.070:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 94.264899][ T26] audit: type=1326 audit(94.080:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 94.269308][ T26] audit: type=1326 audit(94.080:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 94.347340][ T5502] netlink: 40 bytes leftover after parsing attributes in process `syz.4.504'. [ 95.585137][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.587402][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.591618][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.596649][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.599513][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.605895][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.611004][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.615224][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.619120][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.624294][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.628303][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.632924][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.636542][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.640081][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.645990][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.648812][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.662545][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.666503][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.669381][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.674581][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.677390][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.690483][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.694653][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.698190][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.703388][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.706192][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.710312][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.715449][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.718243][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.723063][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.725927][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.730356][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.746921][ T13] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 95.957185][ T13] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 95.958832][ T13] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 95.966755][ T13] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 95.969090][ T13] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 95.976260][ T13] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 95.978307][ T13] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 95.980130][ T13] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 95.983718][ T13] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 95.985430][ T13] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 95.987405][ T13] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 95.989103][ T13] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 95.992013][ T13] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 95.995106][ T13] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 95.996753][ T13] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 95.998649][ T13] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 96.000244][ T13] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 96.005022][ T13] hid-generic 0000:3000000:0000.0004: hidraw1: HID v0.00 Device [sy] on syz0 [ 96.739115][ T5611] loop2: detected capacity change from 0 to 1024 [ 96.823426][ T5611] EXT4-fs (loop2): Ignoring removed nobh option [ 96.824719][ T5611] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 96.910820][ T5611] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,data_err=abort,resuid=0x0000000000000000,usrquota,norecovery,nobh,block_validity,noinit_itable,nomblk_io_submit,block_validity,nogrpid,,errors=continue. Quota mode: writeback. [ 96.945801][ T5611] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: writeback. [ 98.313509][ T5646] netlink: 116 bytes leftover after parsing attributes in process `syz.2.542'. [ 98.855831][ T5657] netlink: 72 bytes leftover after parsing attributes in process `syz.4.547'. [ 99.004143][ T5662] loop2: detected capacity change from 0 to 128 [ 100.014525][ T26] kauditd_printk_skb: 95 callbacks suppressed [ 100.014538][ T26] audit: type=1326 audit(99.970:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5674 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 100.022208][ T26] audit: type=1326 audit(99.980:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5674 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 100.039592][ T5678] loop1: detected capacity change from 0 to 512 [ 100.043998][ T26] audit: type=1326 audit(99.980:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5674 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=164 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 100.062542][ T26] audit: type=1326 audit(99.980:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5674 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 100.081965][ T26] audit: type=1326 audit(99.980:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5674 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 100.150736][ T5686] devtmpfs: Unknown parameter 'dic' [ 100.395683][ T5693] netlink: 'syz.0.562': attribute type 10 has an invalid length. [ 100.398435][ T5693] netlink: 'syz.0.562': attribute type 10 has an invalid length. [ 101.119056][ T5707] device pim6reg1 entered promiscuous mode [ 101.898069][ T5662] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.992327][ T5728] netlink: 16 bytes leftover after parsing attributes in process `syz.0.576'. [ 102.356452][ T5678] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 102.369444][ T5678] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 103.598344][ T5757] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 103.610249][ T5756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.589'. [ 103.612667][ T5756] bond0: option resend_igmp: invalid value (7540) [ 103.613959][ T5756] bond0: option resend_igmp: allowed values 0 - 255 [ 103.889162][ T26] audit: type=1326 audit(103.840:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5767 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 103.904245][ T26] audit: type=1326 audit(103.850:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5767 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 103.915779][ T26] audit: type=1326 audit(103.860:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5767 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 103.938005][ T26] audit: type=1326 audit(103.860:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5767 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 103.967291][ T26] audit: type=1326 audit(103.860:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5767 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 104.117505][ T9] tipc: Subscription rejected, illegal request [ 104.197377][ T5782] loop4: detected capacity change from 0 to 512 [ 104.324278][ T5787] netlink: 28 bytes leftover after parsing attributes in process `syz.0.600'. [ 104.327351][ T5787] netlink: 28 bytes leftover after parsing attributes in process `syz.0.600'. [ 104.428948][ T5789] loop2: detected capacity change from 0 to 128 [ 104.698721][ T5172] attempt to access beyond end of device [ 104.698721][ T5172] loop2: rw=1, want=905, limit=128 [ 105.469947][ T5782] EXT4-fs (loop4): quotafile must be on filesystem root [ 105.587782][ T5808] netlink: 20 bytes leftover after parsing attributes in process `syz.0.608'. [ 105.977161][ T5817] EXT4-fs (nvme0n1p2): resizing filesystem from 262144 to 262144 blocks [ 107.253053][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 107.253066][ T26] audit: type=1326 audit(107.210:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5826 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e5cf728 code=0x7ffc0000 [ 107.260402][ T26] audit: type=1326 audit(107.210:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5826 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=104 compat=0 ip=0xffff8e5cf728 code=0x7ffc0000 [ 107.270982][ T5829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.615'. [ 107.272988][ T5829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.615'. [ 107.290620][ T26] audit: type=1326 audit(107.210:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5826 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e5cf728 code=0x7ffc0000 [ 107.298580][ T26] audit: type=1326 audit(107.210:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5826 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e5cf728 code=0x7ffc0000 [ 107.333251][ T26] audit: type=1326 audit(107.290:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5825 comm="syz.0.615" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa75b728 code=0x0 [ 107.365651][ T5832] bond0: (slave gre0): Error: Device can not be enslaved while up [ 107.791253][ T26] audit: type=1326 audit(107.750:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5844 comm="syz.3.623" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 107.796757][ T26] audit: type=1326 audit(107.750:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5844 comm="syz.3.623" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=155 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 107.820703][ T26] audit: type=1326 audit(107.760:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5844 comm="syz.3.623" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 107.828359][ T26] audit: type=1326 audit(107.760:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5844 comm="syz.3.623" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 107.864220][ T26] audit: type=1326 audit(107.760:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5844 comm="syz.3.623" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 110.162331][ T5881] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 110.163759][ T5881] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 110.165570][ T5881] vhci_hcd vhci_hcd.0: Device attached [ 110.196403][ T5882] vhci_hcd: connection closed [ 110.197746][ T4926] vhci_hcd: stop threads [ 110.199713][ T4926] vhci_hcd: release socket [ 110.201278][ T4926] vhci_hcd: disconnect device [ 113.300442][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 113.300455][ T26] audit: type=1326 audit(113.250:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 113.313749][ T26] audit: type=1326 audit(113.270:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 113.324734][ T26] audit: type=1326 audit(113.270:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=45 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 113.346379][ T26] audit: type=1326 audit(113.270:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 113.361203][ T26] audit: type=1326 audit(113.300:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 113.365473][ T26] audit: type=1326 audit(113.300:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 113.369674][ T26] audit: type=1326 audit(113.300:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 113.411341][ T26] audit: type=1326 audit(113.310:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 113.421057][ T26] audit: type=1326 audit(113.310:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 113.440586][ T26] audit: type=1326 audit(113.310:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 116.420528][ C1] sched: RT throttling activated [ 116.829351][ T5973] loop3: detected capacity change from 0 to 512 [ 117.203907][ T5973] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 118.177387][ T5973] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002] [ 118.180263][ T5973] System zones: 1-12 [ 118.202748][ T5998] netlink: 16 bytes leftover after parsing attributes in process `syz.2.679'. [ 118.204558][ T5998] netlink: 24 bytes leftover after parsing attributes in process `syz.2.679'. [ 118.209371][ T5973] EXT4-fs (loop3): 1 truncate cleaned up [ 118.211058][ T5973] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=ignore,grpid,max_batch_time=0x0000000000000003,debug,quota,quota,,errors=continue. Quota mode: writeback. [ 119.146671][ T5973] netlink: 'syz.3.670': attribute type 4 has an invalid length. [ 119.380074][ T6014] netlink: 36 bytes leftover after parsing attributes in process `syz.4.684'. [ 119.447772][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 119.447784][ T26] audit: type=1326 audit(119.400:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.4.685" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 119.455021][ T26] audit: type=1326 audit(119.410:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.4.685" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 119.459354][ T26] audit: type=1326 audit(119.410:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.4.685" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 119.474549][ T26] audit: type=1326 audit(119.410:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.4.685" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=44 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 119.490446][ T26] audit: type=1326 audit(119.410:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.4.685" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 119.609669][ T6021] ptrace attach of "./syz-executor exec"[4036] was attempted by "./syz-executor exec"[6021] [ 120.107653][ T6030] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.128355][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.690'. [ 120.132958][ T6032] batman_adv: Cannot find parent device [ 122.875612][ T6063] netlink: 'syz.0.701': attribute type 1 has an invalid length. [ 123.690763][ T6030] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.767773][ T6095] devtmpfs: Too few inodes for current use [ 128.218518][ T6030] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.272347][ T6101] bridge0: port 3(vlan2) entered blocking state [ 128.302876][ T6101] bridge0: port 3(vlan2) entered disabled state [ 130.297097][ T6030] bond0: (slave netdevsim0): Releasing backup interface [ 130.324753][ T6030] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.643604][ T6123] chnl_net:caif_netlink_parms(): no params data found [ 130.698278][ T6123] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.699993][ T6123] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.705994][ T6123] device bridge_slave_0 entered promiscuous mode [ 130.714665][ T6123] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.716402][ T6123] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.719304][ T6123] device bridge_slave_1 entered promiscuous mode [ 130.765741][ T6123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.770258][ T6123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.819672][ T6123] team0: Port device team_slave_0 added [ 130.822946][ T6123] team0: Port device team_slave_1 added [ 130.861520][ T6123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.863206][ T6123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.868399][ T6123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.876659][ T6123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.878185][ T6123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.884021][ T6123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.887360][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.889157][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.014952][ T26] audit: type=1326 audit(130.970:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.0.719" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 131.023972][ T26] audit: type=1326 audit(130.980:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.0.719" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=20 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 131.030033][ T26] audit: type=1326 audit(130.980:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.0.719" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 131.044857][ T26] audit: type=1326 audit(130.980:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.0.719" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 131.060584][ T26] audit: type=1326 audit(130.980:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.0.719" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 131.065378][ T26] audit: type=1326 audit(130.980:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.0.719" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 131.069659][ T26] audit: type=1326 audit(130.980:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.0.719" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 131.078394][ T26] audit: type=1326 audit(130.990:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.0.719" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=441 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 131.083445][ T26] audit: type=1326 audit(130.990:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.0.719" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 131.101087][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.128568][ T6123] device hsr_slave_0 entered promiscuous mode [ 131.161225][ T6123] device hsr_slave_1 entered promiscuous mode [ 131.867599][ T26] audit: type=1326 audit(131.820:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.0.721" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 131.881000][ T6123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.882554][ T6123] Cannot create hsr debugfs directory [ 132.590614][ T4070] Bluetooth: hci5: command 0x0409 tx timeout [ 133.207402][ T6030] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.234834][ T6030] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.240101][ T6030] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.272307][ T6030] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.299335][ T6123] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.335459][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.736'. [ 133.337316][ T6158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.736'. [ 133.429319][ T6158] device bond1 entered promiscuous mode [ 133.437895][ T6158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.197436][ T4070] Bluetooth: hci5: command 0x041b tx timeout [ 136.663466][ T26] kauditd_printk_skb: 47 callbacks suppressed [ 136.663479][ T26] audit: type=1326 audit(136.620:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6191 comm="syz.0.740" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 136.910821][ T26] audit: type=1326 audit(136.630:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6191 comm="syz.0.740" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 137.222192][ T26] audit: type=1326 audit(136.630:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6191 comm="syz.0.740" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=30 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 137.444641][ T26] audit: type=1326 audit(137.110:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6191 comm="syz.0.740" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 137.449073][ T26] audit: type=1326 audit(137.110:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6191 comm="syz.0.740" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa75b728 code=0x7ffc0000 [ 138.804383][ T4072] Bluetooth: hci5: command 0x040f tx timeout [ 138.976710][ T6221] loop4: detected capacity change from 0 to 512 [ 140.851037][ T4070] Bluetooth: hci5: command 0x0419 tx timeout [ 140.859017][ T26] audit: type=1326 audit(140.780:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9429728 code=0x7ffc0000 [ 140.863915][ T26] audit: type=1326 audit(140.810:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=113 compat=0 ip=0xffffb9429728 code=0x7ffc0000 [ 140.868509][ T26] audit: type=1326 audit(140.810:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9429728 code=0x7ffc0000 [ 141.453284][ T6221] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 141.535022][ T6221] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002] [ 141.538554][ T6221] System zones: 1-12 [ 141.548021][ T6123] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.577900][ T6221] EXT4-fs (loop4): 1 truncate cleaned up [ 141.579055][ T6221] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,grpid,max_batch_time=0x0000000000000003,debug,quota,quota,,errors=continue. Quota mode: writeback. [ 141.661076][ T6221] netlink: 'syz.4.749': attribute type 4 has an invalid length. [ 141.881131][ T6264] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.897717][ T6264] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 141.936348][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.769'. [ 141.941778][ T6265] batman_adv: Cannot find parent device [ 143.422567][ T6246] Falling back ldisc for ttyS3. [ 144.028930][ T6289] bridge0: port 3(vlan2) entered blocking state [ 144.038976][ T6289] bridge0: port 3(vlan2) entered disabled state [ 144.308536][ T6304] loop3: detected capacity change from 0 to 512 [ 144.420409][ T6304] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 144.506495][ T6304] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002] [ 144.508972][ T6304] System zones: 1-12 [ 144.519837][ T6304] EXT4-fs (loop3): 1 truncate cleaned up [ 144.521935][ T6304] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=ignore,grpid,max_batch_time=0x0000000000000003,debug,quota,quota,,errors=continue. Quota mode: writeback. [ 144.617195][ T6304] netlink: 'syz.3.780': attribute type 4 has an invalid length. [ 144.738557][ C0] vcan0: j1939_tp_rxtimer: 0x00000000915c0bae: rx timeout, send abort [ 145.016516][ T6123] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.045134][ T6264] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.047689][ T6264] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 145.256711][ C0] vcan0: j1939_tp_rxtimer: 0x00000000915c0bae: abort rx timeout. Force session deactivation [ 146.270313][ T6319] loop4: detected capacity change from 0 to 4096 [ 148.969680][ T6123] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.005002][ T6264] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.007093][ T6264] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 149.194367][ T6319] EXT4-fs: error -4 creating inode table initialization thread [ 149.198809][ T6319] EXT4-fs (loop4): mount failed [ 149.515044][ T6349] bridge0: port 3(vlan2) entered blocking state [ 149.516506][ T6349] bridge0: port 3(vlan2) entered disabled state [ 151.479514][ T6264] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.542233][ T6264] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 151.548506][ T6370] netlink: 160 bytes leftover after parsing attributes in process `syz.4.792'. [ 151.552269][ T6370] gre0 speed is unknown, defaulting to 1000 [ 151.568636][ T6370] gre0 speed is unknown, defaulting to 1000 [ 151.587266][ T6370] gre0 speed is unknown, defaulting to 1000 [ 151.683524][ T6371] loop4: detected capacity change from 0 to 512 [ 151.779308][ T6371] EXT4-fs (loop4): Ignoring removed oldalloc option [ 151.821571][ T4038] gre0 speed is unknown, defaulting to 1000 [ 151.830178][ T6370] infiniband syz2: set down [ 151.833305][ T6370] infiniband syz2: added gre0 [ 151.868316][ T6371] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.792: Parent and EA inode have the same ino 15 [ 151.896062][ T6371] EXT4-fs (loop4): Remounting filesystem read-only [ 151.897489][ T6371] EXT4-fs error (device loop4): ext4_evict_inode:293: comm syz.4.792: couldn't truncate inode 15 (err -30) [ 151.934281][ T6370] RDS/IB: syz2: added [ 151.936299][ T6370] smc: adding ib device syz2 with port count 1 [ 151.937739][ T6370] smc: ib device syz2 port 1 has pnetid [ 151.945468][ T6371] EXT4-fs (loop4): 1 orphan inode deleted [ 151.946848][ T6371] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 151.980583][ T13] gre0 speed is unknown, defaulting to 1000 [ 152.010106][ T6370] gre0 speed is unknown, defaulting to 1000 [ 152.205508][ T6370] gre0 speed is unknown, defaulting to 1000 [ 152.342499][ T6370] gre0 speed is unknown, defaulting to 1000 [ 152.472126][ T6370] gre0 speed is unknown, defaulting to 1000 [ 152.695487][ T6370] gre0 speed is unknown, defaulting to 1000 [ 152.884535][ T6376] gre0 speed is unknown, defaulting to 1000 [ 153.026879][ T6370] gre0 speed is unknown, defaulting to 1000 [ 153.195508][ T6376] chnl_net:caif_netlink_parms(): no params data found [ 153.223383][ T6370] gre0 speed is unknown, defaulting to 1000 [ 153.425084][ T6370] gre0 speed is unknown, defaulting to 1000 [ 153.430680][ T6376] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.432163][ T6376] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.481743][ T6376] device bridge_slave_0 entered promiscuous mode [ 153.486804][ T6376] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.488386][ T6376] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.491220][ T6376] device bridge_slave_1 entered promiscuous mode [ 153.555285][ T6376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.559536][ T6376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.620647][ T6370] gre0 speed is unknown, defaulting to 1000 [ 153.626115][ T6376] team0: Port device team_slave_0 added [ 153.637034][ T6376] team0: Port device team_slave_1 added [ 153.682329][ T6376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.695202][ T6376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.706331][ T6376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.710141][ T6376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.721313][ T6376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.726295][ T6376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.902499][ T6376] device hsr_slave_0 entered promiscuous mode [ 153.951623][ T6376] device hsr_slave_1 entered promiscuous mode [ 154.037624][ T6376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.039358][ T6376] Cannot create hsr debugfs directory [ 154.324603][ T6384] gre0 speed is unknown, defaulting to 1000 [ 154.646556][ T6264] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 154.648349][ T6264] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 154.673083][ T6264] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 154.674830][ T6264] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 154.716555][ T6264] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 154.718190][ T6264] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 154.738636][ T6264] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 154.740330][ T6264] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 154.773339][ T6384] chnl_net:caif_netlink_parms(): no params data found [ 154.861632][ T4071] Bluetooth: hci0: command 0x0409 tx timeout [ 154.872556][ T6376] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 154.874670][ T6376] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 155.553346][ T6384] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.569989][ T6384] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.572389][ T6384] device bridge_slave_0 entered promiscuous mode [ 155.591040][ T6384] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.592710][ T6384] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.595022][ T6384] device bridge_slave_1 entered promiscuous mode [ 155.766160][ T6384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.788569][ T6384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.839462][ T6384] team0: Port device team_slave_0 added [ 155.855583][ T6384] team0: Port device team_slave_1 added [ 156.075516][ T6384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.077068][ T6384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.103921][ T6384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.112393][ T6384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.113951][ T6384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.119470][ T6384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.307311][ T4073] Bluetooth: hci6: command 0x0409 tx timeout [ 156.333805][ T6405] netlink: 20 bytes leftover after parsing attributes in process `syz.4.795'. [ 156.505713][ T6407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.799'. [ 156.919597][ T4884] Bluetooth: hci0: command 0x041b tx timeout [ 157.449538][ T6384] device hsr_slave_0 entered promiscuous mode [ 158.157884][ T6415] loop3: detected capacity change from 0 to 512 [ 158.359857][ T4884] Bluetooth: hci6: command 0x041b tx timeout [ 158.661541][ T6384] device hsr_slave_1 entered promiscuous mode [ 158.997524][ T4016] Bluetooth: hci0: command 0x040f tx timeout [ 159.373890][ T6415] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 159.375760][ T6415] System zones: 0-2, 18-18, 34-34 [ 159.429494][ T6415] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.802: bg 0: block 248: padding at end of block bitmap is not set [ 159.453391][ T6415] Quota error (device loop3): write_blk: dquota write failed [ 159.455335][ T6415] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 159.459675][ T6415] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.802: Failed to acquire dquot type 1 [ 159.503418][ T6415] EXT4-fs (loop3): 1 truncate cleaned up [ 159.504667][ T6415] EXT4-fs (loop3): mounted filesystem without journal. Opts: sb=0x0000000000000001,noload,,errors=continue. Quota mode: writeback. [ 159.668259][ T6384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.669839][ T6384] Cannot create hsr debugfs directory [ 159.744071][ T6376] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 159.746098][ T6376] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 159.771559][ T6409] netlink: 'syz.4.800': attribute type 10 has an invalid length. [ 159.778562][ T6409] team0: Port device netdevsim0 added [ 159.780598][ T6410] netlink: 'syz.4.800': attribute type 10 has an invalid length. [ 159.818078][ T6410] team0: Port device netdevsim0 removed [ 159.822530][ T6410] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 160.495950][ T4071] Bluetooth: hci6: command 0x040f tx timeout [ 161.552823][ T6427] Bluetooth: hci0: command 0x0419 tx timeout [ 161.627271][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.807'. [ 161.650365][ T6434] batman_adv: Cannot find parent device [ 162.132940][ T6437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.803'. [ 162.522058][ T21] Bluetooth: hci6: command 0x0419 tx timeout [ 162.863250][ T6376] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 162.865301][ T6376] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 163.595606][ T26] audit: type=1326 audit(163.550:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.3.811" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 163.601189][ T26] audit: type=1326 audit(163.560:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.3.811" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=85 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 163.614291][ T26] audit: type=1326 audit(163.560:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.3.811" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 163.636365][ T26] audit: type=1326 audit(163.560:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.3.811" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=86 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 163.650574][ T26] audit: type=1326 audit(163.560:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.3.811" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 163.948279][ T6451] loop3: detected capacity change from 0 to 1024 [ 163.990747][ T6451] EXT4-fs (loop3): Ignoring removed oldalloc option [ 163.992220][ T6451] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 164.130479][ T6451] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,noauto_da_alloc,dioread_lock,norecovery,dioread_nolock,lazytime,nodelalloc,oldalloc,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 165.505787][ T6376] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 165.507758][ T6376] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 168.865124][ T6433] bond0: (slave netdevsim0): Releasing backup interface [ 169.017265][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 169.018603][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 170.726896][ T6457] loop4: detected capacity change from 0 to 512 [ 171.017025][ T6461] loop3: detected capacity change from 0 to 512 [ 171.153707][ T6123] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 171.238237][ T6461] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue. Quota mode: writeback. [ 171.635508][ T26] audit: type=1326 audit(171.590:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.3.817" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 171.647048][ T26] audit: type=1326 audit(171.600:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.3.817" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=53 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 171.653899][ T26] audit: type=1326 audit(171.610:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.3.817" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1752728 code=0x7ffc0000 [ 171.906257][ T6457] EXT4-fs (loop4): Ignoring removed oldalloc option [ 172.009088][ T6457] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.815: Parent and EA inode have the same ino 15 [ 172.055434][ T6457] EXT4-fs (loop4): Remounting filesystem read-only [ 172.056823][ T6457] EXT4-fs error (device loop4): ext4_evict_inode:293: comm syz.4.815: couldn't truncate inode 15 (err -30) [ 172.098357][ T6457] EXT4-fs (loop4): 1 orphan inode deleted [ 172.099662][ T6457] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 172.383961][ T6123] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 173.495909][ T6384] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.511090][ T6457] netlink: 132 bytes leftover after parsing attributes in process `syz.4.815'. [ 173.521402][ T6123] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 173.672308][ T6123] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 175.065758][ T6480] netlink: 'syz.3.821': attribute type 3 has an invalid length. [ 175.476125][ T6495] loop3: detected capacity change from 0 to 512 [ 175.643197][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.829'. [ 175.792660][ T6495] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback. [ 176.774261][ T6384] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.010878][ T6123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.037258][ T6123] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.045539][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.047965][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.057528][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.059991][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.062526][ T1704] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.064099][ T1704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.066282][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.090288][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.094206][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.116283][ T5074] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.117815][ T5074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.136988][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.139681][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.181495][ T6516] netlink: 'syz.4.836': attribute type 27 has an invalid length. [ 177.205540][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.211001][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.222356][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.237036][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.239505][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.242143][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.248141][ T6123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.270975][ T6123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.274932][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.277241][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.279438][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.574044][ T6123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.576611][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.578064][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.689136][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 177.693109][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.709732][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 177.712254][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.717735][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.721506][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.761286][ T6123] device veth0_vlan entered promiscuous mode [ 177.778265][ T6123] device veth1_vlan entered promiscuous mode [ 177.847568][ T6123] device veth0_macvtap entered promiscuous mode [ 177.849671][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 177.870067][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 177.872825][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.891186][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.903633][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 177.931704][ T6123] device veth1_macvtap entered promiscuous mode [ 177.961368][ T6123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.963668][ T6123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.965584][ T6123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.967655][ T6123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.969549][ T6123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.028411][ T6123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.041761][ T6123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.070016][ T6536] loop3: detected capacity change from 0 to 512 [ 178.093368][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 178.095526][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 178.097759][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.100232][ T6123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.102981][ T6123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.104994][ T6123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.107091][ T6123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.109084][ T6123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.134593][ T26] audit: type=1326 audit(178.080:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6537 comm="syz.4.841" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 178.141556][ T6123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.144696][ T6123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.147554][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.151371][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.167222][ T26] audit: type=1326 audit(178.120:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6537 comm="syz.4.841" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 178.171860][ T26] audit: type=1326 audit(178.120:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6537 comm="syz.4.841" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 178.176093][ T26] audit: type=1326 audit(178.120:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6537 comm="syz.4.841" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 178.184114][ T6123] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.185945][ T6123] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.187625][ T6123] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.189390][ T6123] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.208344][ T26] audit: type=1326 audit(178.120:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6537 comm="syz.4.841" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 178.222071][ T26] audit: type=1326 audit(178.120:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6537 comm="syz.4.841" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 178.226317][ T26] audit: type=1326 audit(178.120:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6537 comm="syz.4.841" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 178.259639][ T26] audit: type=1326 audit(178.120:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6537 comm="syz.4.841" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 178.329936][ T26] audit: type=1326 audit(178.120:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6537 comm="syz.4.841" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 178.349679][ T26] audit: type=1326 audit(178.120:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6537 comm="syz.4.841" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7f032728 code=0x7ffc0000 [ 178.378247][ T6543] loop4: detected capacity change from 0 to 512 [ 178.397429][ T5375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.399305][ T5375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.415508][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 178.483314][ T5074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.485350][ T5074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.490042][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 178.621229][ T6545] loop1: detected capacity change from 0 to 512 [ 178.923900][ T6536] EXT4-fs (loop3): orphan cleanup on readonly fs [ 178.932180][ T6536] EXT4-fs warning (device loop3): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 178.936723][ T6536] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 178.976163][ T6536] EXT4-fs (loop3): 1 truncate cleaned up [ 178.977351][ T6536] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 179.261930][ T6548] netlink: 'syz.3.844': attribute type 5 has an invalid length. [ 179.856028][ T6384] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.032683][ T6543] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 180.035428][ T6543] System zones: 0-2, 18-18, 34-34 [ 180.131250][ T6545] EXT4-fs (loop1): orphan cleanup on readonly fs [ 180.132982][ T6543] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.843: bg 0: block 248: padding at end of block bitmap is not set [ 180.197585][ T6543] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz.4.843: Failed to acquire dquot type 1 [ 180.209483][ T6545] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.715: bg 0: block 248: padding at end of block bitmap is not set [ 180.244366][ T6545] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.715: Failed to acquire dquot type 1 [ 180.260845][ T6543] EXT4-fs (loop4): 1 truncate cleaned up [ 180.262073][ T6543] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,noload,,errors=continue. Quota mode: writeback. [ 180.324897][ T6545] EXT4-fs (loop1): 1 truncate cleaned up [ 180.336577][ T6545] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 180.406909][ T6545] netlink: 'syz.1.715': attribute type 1 has an invalid length. [ 182.137264][ T6563] raw_sendmsg: syz.3.849 forgot to set AF_INET. Fix it! [ 183.437950][ T6589] device bridge0 entered promiscuous mode [ 183.704655][ T6591] netlink: 20 bytes leftover after parsing attributes in process `syz.3.858'. [ 184.006958][ T6384] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.070165][ T6596] loop3: detected capacity change from 0 to 512 [ 188.260626][ T6596] EXT4-fs warning (device loop3): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop3. [ 191.077268][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 192.076959][ T6624] loop3: detected capacity change from 0 to 128 [ 192.515741][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.166322][ T4073] Bluetooth: hci3: command 0x041b tx timeout [ 194.551824][ T6624] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 194.840312][ T6630] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 194.942463][ T6630] [ 194.944996][ T6630] ====================================================== [ 194.946410][ T6630] WARNING: possible circular locking dependency detected [ 194.947800][ T6630] 5.15.167-syzkaller #0 Not tainted [ 194.948799][ T6630] ------------------------------------------------------ [ 194.950166][ T6630] syz.3.872/6630 is trying to acquire lock: [ 194.951365][ T6630] ffff0000cf5483f0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_bmap+0x58/0x36c [ 194.953395][ T6630] [ 194.953395][ T6630] but task is already holding lock: [ 194.955036][ T6630] ffff0000d49d63f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x28c/0xaa0 [ 194.957433][ T6630] [ 194.957433][ T6630] which lock already depends on the new lock. [ 194.957433][ T6630] [ 194.959723][ T6630] [ 194.959723][ T6630] the existing dependency chain (in reverse order) is: [ 194.961806][ T6630] [ 194.961806][ T6630] -> #3 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 194.963860][ T6630] __mutex_lock_common+0x194/0x2154 [ 194.965149][ T6630] mutex_lock_io_nested+0xcc/0x12c [ 194.966388][ T6630] jbd2_journal_flush+0x210/0xaa0 [ 194.967562][ T6630] ext4_ioctl+0x2458/0x61bc [ 194.968680][ T6630] __arm64_sys_ioctl+0x14c/0x1c8 [ 194.969926][ T6630] invoke_syscall+0x98/0x2b8 [ 194.971065][ T6630] el0_svc_common+0x138/0x258 [ 194.972155][ T6630] do_el0_svc+0x58/0x14c [ 194.973193][ T6630] el0_svc+0x7c/0x1f0 [ 194.974098][ T6630] el0t_64_sync_handler+0x84/0xe4 [ 194.975407][ T6630] el0t_64_sync+0x1a0/0x1a4 [ 194.976558][ T6630] [ 194.976558][ T6630] -> #2 (&journal->j_barrier){+.+.}-{3:3}: [ 194.978314][ T6630] __mutex_lock_common+0x194/0x2154 [ 194.979622][ T6630] mutex_lock_nested+0xa4/0xf8 [ 194.980716][ T6630] jbd2_journal_lock_updates+0x264/0x328 [ 194.982231][ T6630] ext4_change_inode_journal_flag+0x15c/0x648 [ 194.983746][ T6630] ext4_fileattr_set+0xb6c/0x12d0 [ 194.985180][ T6630] vfs_fileattr_set+0x70c/0xad4 [ 194.986330][ T6630] do_vfs_ioctl+0x1634/0x2a38 [ 194.987544][ T6630] __arm64_sys_ioctl+0xe4/0x1c8 [ 194.988635][ T6630] invoke_syscall+0x98/0x2b8 [ 194.989706][ T6630] el0_svc_common+0x138/0x258 [ 194.990937][ T6630] do_el0_svc+0x58/0x14c [ 194.991904][ T6630] el0_svc+0x7c/0x1f0 [ 194.992937][ T6630] el0t_64_sync_handler+0x84/0xe4 [ 194.994191][ T6630] el0t_64_sync+0x1a0/0x1a4 [ 194.995286][ T6630] [ 194.995286][ T6630] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 194.997300][ T6630] percpu_down_write+0xd8/0x3b0 [ 194.998583][ T6630] ext4_ind_migrate+0x170/0x58c [ 194.999716][ T6630] ext4_fileattr_set+0xbe0/0x12d0 [ 195.001146][ T6630] vfs_fileattr_set+0x70c/0xad4 [ 195.002286][ T6630] do_vfs_ioctl+0x1634/0x2a38 [ 195.003483][ T6630] __arm64_sys_ioctl+0xe4/0x1c8 [ 195.004752][ T6630] invoke_syscall+0x98/0x2b8 [ 195.005819][ T6630] el0_svc_common+0x138/0x258 [ 195.007014][ T6630] do_el0_svc+0x58/0x14c [ 195.008059][ T6630] el0_svc+0x7c/0x1f0 [ 195.009140][ T6630] el0t_64_sync_handler+0x84/0xe4 [ 195.010395][ T6630] el0t_64_sync+0x1a0/0x1a4 [ 195.011577][ T6630] [ 195.011577][ T6630] -> #0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}: [ 195.013744][ T6630] __lock_acquire+0x32d4/0x7638 [ 195.015060][ T6630] lock_acquire+0x240/0x77c [ 195.016061][ T6630] down_read+0xc0/0x398 [ 195.017106][ T6630] ext4_bmap+0x58/0x36c [ 195.018233][ T6630] bmap+0xa8/0xe8 [ 195.019150][ T6630] jbd2_journal_flush+0x63c/0xaa0 [ 195.020390][ T6630] ext4_ioctl+0x3454/0x61bc [ 195.021535][ T6630] __arm64_sys_ioctl+0x14c/0x1c8 [ 195.022657][ T6630] invoke_syscall+0x98/0x2b8 [ 195.023962][ T6630] el0_svc_common+0x138/0x258 [ 195.025258][ T6630] do_el0_svc+0x58/0x14c [ 195.026277][ T6630] el0_svc+0x7c/0x1f0 [ 195.027262][ T6630] el0t_64_sync_handler+0x84/0xe4 [ 195.028481][ T6630] el0t_64_sync+0x1a0/0x1a4 [ 195.029568][ T6630] [ 195.029568][ T6630] other info that might help us debug this: [ 195.029568][ T6630] [ 195.031752][ T6630] Chain exists of: [ 195.031752][ T6630] &sb->s_type->i_mutex_key#9 --> &journal->j_barrier --> &journal->j_checkpoint_mutex [ 195.031752][ T6630] [ 195.035237][ T6630] Possible unsafe locking scenario: [ 195.035237][ T6630] [ 195.036918][ T6630] CPU0 CPU1 [ 195.038088][ T6630] ---- ---- [ 195.039170][ T6630] lock(&journal->j_checkpoint_mutex); [ 195.040438][ T6630] lock(&journal->j_barrier); [ 195.042049][ T6630] lock(&journal->j_checkpoint_mutex); [ 195.043814][ T6630] lock(&sb->s_type->i_mutex_key#9); [ 195.044982][ T6630] [ 195.044982][ T6630] *** DEADLOCK *** [ 195.044982][ T6630] [ 195.046749][ T6630] 2 locks held by syz.3.872/6630: [ 195.047950][ T6630] #0: ffff0000d49d6170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x264/0x328 [ 195.050291][ T6630] #1: ffff0000d49d63f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x28c/0xaa0 [ 195.053019][ T6630] [ 195.053019][ T6630] stack backtrace: [ 195.054248][ T6630] CPU: 0 PID: 6630 Comm: syz.3.872 Not tainted 5.15.167-syzkaller #0 [ 195.055928][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 195.058113][ T6630] Call trace: [ 195.058864][ T6630] dump_backtrace+0x0/0x530 [ 195.059934][ T6630] show_stack+0x2c/0x3c [ 195.060973][ T6630] dump_stack_lvl+0x108/0x170 [ 195.061988][ T6630] dump_stack+0x1c/0x58 [ 195.062850][ T6630] print_circular_bug+0x150/0x1b8 [ 195.063982][ T6630] check_noncircular+0x2cc/0x378 [ 195.065147][ T6630] __lock_acquire+0x32d4/0x7638 [ 195.066232][ T6630] lock_acquire+0x240/0x77c [ 195.067209][ T6630] down_read+0xc0/0x398 [ 195.068114][ T6630] ext4_bmap+0x58/0x36c [ 195.069007][ T6630] bmap+0xa8/0xe8 [ 195.069881][ T6630] jbd2_journal_flush+0x63c/0xaa0 [ 195.070976][ T6630] ext4_ioctl+0x3454/0x61bc [ 195.071969][ T6630] __arm64_sys_ioctl+0x14c/0x1c8 [ 195.073164][ T6630] invoke_syscall+0x98/0x2b8 [ 195.074172][ T6630] el0_svc_common+0x138/0x258 [ 195.075266][ T6630] do_el0_svc+0x58/0x14c [ 195.076187][ T6630] el0_svc+0x7c/0x1f0 [ 195.077094][ T6630] el0t_64_sync_handler+0x84/0xe4 [ 195.078163][ T6630] el0t_64_sync+0x1a0/0x1a4 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 195.235544][ T4073] Bluetooth: hci3: command 0x040f tx timeout [ 197.315196][ T4073] Bluetooth: hci3: command 0x0419 tx timeout [ 198.633100][ T6611] device bridge0 entered promiscuous mode [ 201.869241][ T408] device hsr_slave_0 left promiscuous mode [ 201.930832][ T408] device hsr_slave_1 left promiscuous mode [ 202.020708][ T408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.022438][ T408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.024500][ T408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.026142][ T408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.030733][ T408] device hsr_slave_0 left promiscuous mode [ 202.080708][ T408] device hsr_slave_1 left promiscuous mode [ 202.170692][ T408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.172381][ T408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.174377][ T408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.175931][ T408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.177785][ T408] device bridge_slave_1 left promiscuous mode [ 202.179458][ T408] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.231587][ T408] device bridge_slave_0 left promiscuous mode [ 202.233115][ T408] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.420807][ T408] device veth1_macvtap left promiscuous mode [ 202.422061][ T408] device veth0_macvtap left promiscuous mode [ 202.423313][ T408] device veth1_vlan left promiscuous mode [ 202.424507][ T408] device veth0_vlan left promiscuous mode [ 202.500801][ T408] device veth1_macvtap left promiscuous mode [ 202.502128][ T408] device veth0_macvtap left promiscuous mode [ 202.503414][ T408] device veth1_vlan left promiscuous mode [ 202.504601][ T408] device veth0_vlan left promiscuous mode [ 202.778952][ T408] team0 (unregistering): Port device team_slave_1 removed [ 202.785407][ T408] team0 (unregistering): Port device team_slave_0 removed [ 202.794736][ T408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.838634][ T408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.945285][ T408] bond0 (unregistering): Released all slaves [ 202.957202][ T408] bond1 (unregistering): Released all slaves [ 203.028587][ T408] team0 (unregistering): Port device team_slave_1 removed [ 203.035061][ T408] team0 (unregistering): Port device team_slave_0 removed [ 203.042626][ T408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.077124][ T408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.196524][ T408] bond0 (unregistering): Released all slaves