last executing test programs: 3.146392544s ago: executing program 3 (id=823): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)="18fcae977278aeffab01b11015896dd2979391ede335535b8440ca4f71a0665a", 0x20}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="7dcc2c9d4eaf588822e6a9cc8eec13d9754bb76c", 0x14}], 0x1}}], 0x2, 0x0) 3.045880744s ago: executing program 3 (id=824): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = io_uring_setup(0x30d3, &(0x7f0000000080)={0x0, 0x5c00, 0x400, 0x3, 0xe5}) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0xfffffffc}, 0x1c) listen(r1, 0x20000005) r2 = socket$inet6(0xa, 0x6, 0x0) accept4(r1, 0x0, 0x0, 0x800) close(r2) close_range(r0, 0xffffffffffffffff, 0x0) 2.923090668s ago: executing program 3 (id=825): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe70, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x0) 2.644449542s ago: executing program 3 (id=828): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 2.484116941s ago: executing program 1 (id=831): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='Q', 0x1, 0x200980) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 2.483813246s ago: executing program 2 (id=832): socket$can_j1939(0x1d, 0x2, 0x7) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$nci(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x2, 0x10000, 0x2, 0xffffffff}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) pselect6(0x40, &(0x7f00000005c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x10000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 2.482938648s ago: executing program 3 (id=833): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmmsg(r3, &(0x7f0000000900), 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f00000001c0)={0xd, 0x7, 0x9, 0x4, 0x2, 0x9, 0x7, 0x0, 0x5, 0x3, 0x6, 0x1, 0x4, 0x4}, 0xe) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x7fffff, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x30}}, 0x0) 2.156750663s ago: executing program 1 (id=837): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@mcast1}, {@in=@rand_addr=0x64010101, 0x2, 0x32}, @in6=@loopback, {0x0, 0x3, 0x0, 0x0, 0x1800000000000000}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x8}}]}, 0x1a0}}, 0x0) 1.872355025s ago: executing program 0 (id=840): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0xed00, 0x0, 0x0, 0x0, 0xfffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x24, 0x8, 0x0, 0x0, 0xb001}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe966}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.86352358s ago: executing program 1 (id=841): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) 1.843600633s ago: executing program 2 (id=842): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x5) r3 = socket(0x28, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newtaction={0x14, 0x30, 0x400, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x40004) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x8}, 0x8) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 1.638527001s ago: executing program 0 (id=843): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0xc41, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x24a000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mq_open(&(0x7f0000000100)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7-\xeb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00AWK\n\x8b!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3g:', 0x41, 0x80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x1943, 0x10100, 0x2002}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x60, 0x1, r4, 0x0, 0x0, 0x0, 0x61, 0x1, {0x1}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x7330, 0x0, 0x0, 0x0, 0x0) 1.638241816s ago: executing program 2 (id=844): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r2, &(0x7f0000000f80)={0xa, 0x0, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fffffff}, 0x1c) 1.446348452s ago: executing program 1 (id=847): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x200980) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 1.385886124s ago: executing program 4 (id=849): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000100003eeffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="0001000020010000300012800b0001006d61637365630000200002800c0004000400000100c28000050003000e"], 0x50}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000180)={0x7, 'gre0\x00', {0x401}, 0xfff}) 1.130515948s ago: executing program 0 (id=850): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000010c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = gettid() tkill(r2, 0x33) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x11, 0xc, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) socket$kcm(0x10, 0x2, 0x4) syz_read_part_table(0x1050, &(0x7f0000000000)="$eJzsz7sNwkAQBNA5G38IgBacUQEhZVAP/RDRHaGRfSA6AIL3ktOcZlfa8FtNdudkfKXjPaep7bohczKsX4+UNNmXbNc4Ld0xactSSffes6lPqTvnOrvO9CW5flqHpK+hz+X2rTMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4J89AwAA//9rDgef") r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) 1.103808775s ago: executing program 4 (id=851): open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x104, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaabbffffffffffff88a81000810039008848000000000000000000000000000000000000000000000f00156b9280626af32e408069eb"], 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.041061495s ago: executing program 2 (id=852): socket$can_j1939(0x1d, 0x2, 0x7) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x2, 0x10000, 0x2, 0xffffffff}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) pselect6(0x40, &(0x7f00000005c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x10000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 867.754258ms ago: executing program 2 (id=853): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x801, 0x8, 0xfffffffd, 0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c", @ANYRES16=r0], 0x20}}, 0x0) 829.459731ms ago: executing program 2 (id=854): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_clone(0x630c1100, 0x0, 0x97, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x43, &(0x7f0000000840)={{0x12, 0x1, 0x6d8dec5e7bf1b100, 0xa8, 0x3, 0xf, 0xd0, 0x1a8d, 0x100c, 0xa05f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x31, 0x1, 0x3, 0xfc, 0x959cc9da13db1048, 0x81, [{{0x9, 0x4, 0x1, 0xe, 0x0, 0xff, 0xc3, 0xc0, 0xd0, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "90d7"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x7, 0x3ff, 0x4}, {0x6, 0x24, 0x1a, 0xf10, 0x10}}]}}]}}]}}, 0x0) 646.647814ms ago: executing program 4 (id=855): socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) timer_settime(0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x101) 646.239426ms ago: executing program 1 (id=856): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8102) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f00000000c0)) 641.089209ms ago: executing program 0 (id=857): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x4}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 483.105992ms ago: executing program 4 (id=858): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, &(0x7f0000000240)=[{&(0x7f0000002140)=""/4088, 0xff8}], 0x4, 0x4, 0x0) 358.722163ms ago: executing program 0 (id=859): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = io_uring_setup(0x30d3, &(0x7f0000000080)={0x0, 0x5c00, 0x400, 0x3, 0xe5}) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0xfffffffc}, 0x1c) listen(r1, 0x20000005) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) accept4(r1, 0x0, 0x0, 0x800) close(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 345.481982ms ago: executing program 4 (id=860): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00'}, 0x10) msync(&(0x7f0000fce000/0x3000)=nil, 0x3000, 0x2) 318.01177ms ago: executing program 1 (id=861): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xffffffffffffff2f, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0x21}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x5, 0x0) listen(r3, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000500)={0x0, &(0x7f00000001c0)}, 0x8) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000003700010324bd7002fcdbdf25100000001fe37c903dbcc600000000000000075754956602a0cb0b"], 0x14}}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) write$uinput_user_dev(r5, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x4d, [0x10004, 0x6, 0x9, 0x8a4, 0x3, 0x2, 0x7fffffff, 0x80000001, 0x40d, 0x1, 0xfd, 0x3c6, 0x7, 0x7, 0xf70, 0x3c00, 0xe7, 0x4007, 0x401, 0x6, 0x4, 0x1, 0x8, 0xffff, 0xe, 0x40000e, 0xe, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x10006, 0xc, 0xfffffff7, 0x4, 0xe77, 0x7, 0x1, 0x1, 0x1, 0x0, 0x401, 0x9, 0xbdc7, 0x800000b, 0x1, 0x9, 0x6, 0x1, 0x6, 0x909, 0x5, 0x4d, 0x5, 0x65a, 0x0, 0x1, 0x1000, 0x3, 0x2, 0x6, 0x7ff, 0xb8547353], [0x4, 0xffffffff, 0x4, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x10001, 0xc, 0x36, 0x4, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x9, 0x99d, 0x8, 0x0, 0xd, 0x10001, 0xfffffffe, 0x6e38, 0x8000, 0xa, 0x6, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40000040, 0x101, 0x9, 0x5, 0x0, 0x0, 0x34f1, 0x1ff, 0x2, 0x1b2c5a97, 0x0, 0x9, 0x7, 0x2, 0x1, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x0, 0x2, 0x200006, 0x5, 0x5, 0x2, 0x80, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x4, 0x69d, 0x8, 0x10001, 0x0, 0x0, 0x40000008, 0x6, 0x4, 0x800, 0x7, 0x9, 0x10000, 0x0, 0x548dc87a, 0xfffffffe, 0x3, 0x0, 0x4, 0x7, 0x9, 0x2, 0x8, 0x7, 0x6, 0x2, 0x81, 0x8, 0x1, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0xb6, 0x40, 0x3, 0x2, 0x8, 0x6, 0x2, 0xffffff00, 0xda15, 0x82, 0x3, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0xd, 0x1, 0x60a, 0x5, 0x9, 0x80000001, 0x40002, 0xb, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0x1, 0x0, 0x2, 0x6, 0x20c, 0xfffffffd, 0xa18, 0x61c8, 0x6, 0x7ff, 0x101, 0xff, 0x7, 0x9, 0x5, 0x4, 0x101, 0x9, 0x3000000, 0x20e, 0x4000006, 0x7, 0xfffffffd, 0x9, 0x1, 0x4, 0x100009, 0x100, 0x8, 0x3c, 0x1000, 0x3, 0x3, 0x15, 0x8000, 0x7, 0x3, 0x8, 0x7, 0x8, 0x4, 0x6, 0xeff]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)={0xa8, r8, 0x1, 0x4, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x7c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20044895}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 194.065382ms ago: executing program 4 (id=862): writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b0001"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x4000084) 193.138433ms ago: executing program 0 (id=863): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1805"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0000b110000000000000000000000000000000000ff0200000000000000000000000000014f1c4e20"], 0xd6) 0s ago: executing program 3 (id=864): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)}], 0x1}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x4, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.37' (ED25519) to the list of known hosts. [ 65.636412][ T5814] cgroup: Unknown subsys name 'net' [ 65.768088][ T5814] cgroup: Unknown subsys name 'cpuset' [ 65.776524][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.157288][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.918628][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.926915][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.935189][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.942813][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.955070][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.962872][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.975264][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.984693][ T5152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.993164][ T5152] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.005105][ T5152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.014144][ T5152] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.024891][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.032168][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.045192][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.052721][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.060647][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.068007][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.075973][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.083179][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.091442][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.101323][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.114720][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.123327][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.130570][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.140598][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.430613][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.437152][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.701436][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 71.892921][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 71.909487][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 71.962872][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 71.990374][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 72.124469][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.131615][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.140043][ T5824] bridge_slave_0: entered allmulticast mode [ 72.147497][ T5824] bridge_slave_0: entered promiscuous mode [ 72.157692][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.164863][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.172015][ T5824] bridge_slave_1: entered allmulticast mode [ 72.179650][ T5824] bridge_slave_1: entered promiscuous mode [ 72.269260][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.283637][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.290901][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.298355][ T5833] bridge_slave_0: entered allmulticast mode [ 72.306097][ T5833] bridge_slave_0: entered promiscuous mode [ 72.328545][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.373297][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.380531][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.389963][ T5833] bridge_slave_1: entered allmulticast mode [ 72.397096][ T5833] bridge_slave_1: entered promiscuous mode [ 72.406382][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.413767][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.421094][ T5834] bridge_slave_0: entered allmulticast mode [ 72.428089][ T5834] bridge_slave_0: entered promiscuous mode [ 72.458228][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.465712][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.472994][ T5832] bridge_slave_0: entered allmulticast mode [ 72.480092][ T5832] bridge_slave_0: entered promiscuous mode [ 72.498975][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.508086][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.515471][ T5834] bridge_slave_1: entered allmulticast mode [ 72.522366][ T5834] bridge_slave_1: entered promiscuous mode [ 72.558624][ T5824] team0: Port device team_slave_0 added [ 72.565120][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.572305][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.579844][ T5832] bridge_slave_1: entered allmulticast mode [ 72.587347][ T5832] bridge_slave_1: entered promiscuous mode [ 72.618002][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.625217][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.632342][ T5828] bridge_slave_0: entered allmulticast mode [ 72.640353][ T5828] bridge_slave_0: entered promiscuous mode [ 72.649926][ T5824] team0: Port device team_slave_1 added [ 72.670226][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.682208][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.696411][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.709792][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.717154][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.724454][ T5828] bridge_slave_1: entered allmulticast mode [ 72.731343][ T5828] bridge_slave_1: entered promiscuous mode [ 72.763752][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.851674][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.877480][ T5834] team0: Port device team_slave_0 added [ 72.886732][ T5833] team0: Port device team_slave_0 added [ 72.895576][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.905829][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.912778][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.939015][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.957010][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.967622][ T5834] team0: Port device team_slave_1 added [ 72.975800][ T5833] team0: Port device team_slave_1 added [ 72.983336][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.994908][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.001858][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.028722][ T5831] Bluetooth: hci0: command tx timeout [ 73.034670][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.104774][ T5831] Bluetooth: hci1: command tx timeout [ 73.128878][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.135888][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.161837][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.185121][ T5831] Bluetooth: hci2: command tx timeout [ 73.190859][ T5831] Bluetooth: hci4: command tx timeout [ 73.196494][ T5152] Bluetooth: hci3: command tx timeout [ 73.206767][ T5828] team0: Port device team_slave_0 added [ 73.216575][ T5832] team0: Port device team_slave_0 added [ 73.223083][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.230060][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.256008][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.267740][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.275066][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.301518][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.325754][ T5828] team0: Port device team_slave_1 added [ 73.347284][ T5832] team0: Port device team_slave_1 added [ 73.360196][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.367491][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.394016][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.423711][ T5824] hsr_slave_0: entered promiscuous mode [ 73.430056][ T5824] hsr_slave_1: entered promiscuous mode [ 73.482491][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.489817][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.516060][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.528626][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.535645][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.561749][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.573394][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.580519][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.606814][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.619186][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.626247][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.652222][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.723586][ T5834] hsr_slave_0: entered promiscuous mode [ 73.730531][ T5834] hsr_slave_1: entered promiscuous mode [ 73.737714][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.746281][ T5834] Cannot create hsr debugfs directory [ 73.819739][ T5833] hsr_slave_0: entered promiscuous mode [ 73.826704][ T5833] hsr_slave_1: entered promiscuous mode [ 73.832690][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.840483][ T5833] Cannot create hsr debugfs directory [ 73.849934][ T5828] hsr_slave_0: entered promiscuous mode [ 73.856925][ T5828] hsr_slave_1: entered promiscuous mode [ 73.862929][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.870814][ T5828] Cannot create hsr debugfs directory [ 73.918379][ T5832] hsr_slave_0: entered promiscuous mode [ 73.924875][ T5832] hsr_slave_1: entered promiscuous mode [ 73.930859][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.939283][ T5832] Cannot create hsr debugfs directory [ 74.495195][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.509937][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.520301][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.539959][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.585312][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.599170][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.611897][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.622655][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.718011][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.748760][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.759214][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.785042][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.858148][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.873354][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.891235][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.920607][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.980101][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.033255][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.049235][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.064201][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.078614][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.093843][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.104575][ T5152] Bluetooth: hci0: command tx timeout [ 75.130256][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.137688][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.167836][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.185009][ T5152] Bluetooth: hci1: command tx timeout [ 75.206725][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.213986][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.255990][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.264593][ T5152] Bluetooth: hci3: command tx timeout [ 75.270032][ T5152] Bluetooth: hci4: command tx timeout [ 75.277816][ T5829] Bluetooth: hci2: command tx timeout [ 75.292590][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.299777][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.318597][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.325774][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.351455][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.377058][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.453549][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.460679][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.472822][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.479922][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.549773][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.636853][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.668042][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.695882][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.703042][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.732997][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.753018][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.760231][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.801871][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.809062][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.862754][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.870002][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.946843][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.963160][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.983227][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.080556][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.240423][ T5824] veth0_vlan: entered promiscuous mode [ 76.326990][ T5824] veth1_vlan: entered promiscuous mode [ 76.363690][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.510180][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.520315][ T5824] veth0_macvtap: entered promiscuous mode [ 76.531166][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.553734][ T5824] veth1_macvtap: entered promiscuous mode [ 76.620089][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.642209][ T5832] veth0_vlan: entered promiscuous mode [ 76.667300][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.677659][ T5828] veth0_vlan: entered promiscuous mode [ 76.688721][ T5834] veth0_vlan: entered promiscuous mode [ 76.703372][ T5824] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.712931][ T5824] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.722613][ T5824] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.731422][ T5824] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.751363][ T5828] veth1_vlan: entered promiscuous mode [ 76.763494][ T5832] veth1_vlan: entered promiscuous mode [ 76.787858][ T5834] veth1_vlan: entered promiscuous mode [ 76.847181][ T5833] veth0_vlan: entered promiscuous mode [ 76.863103][ T5833] veth1_vlan: entered promiscuous mode [ 76.928280][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.941049][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.965636][ T5828] veth0_macvtap: entered promiscuous mode [ 76.993852][ T5896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.994147][ T5828] veth1_macvtap: entered promiscuous mode [ 77.007655][ T5896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.013127][ T5834] veth0_macvtap: entered promiscuous mode [ 77.042929][ T5833] veth0_macvtap: entered promiscuous mode [ 77.060222][ T5832] veth0_macvtap: entered promiscuous mode [ 77.078201][ T5834] veth1_macvtap: entered promiscuous mode [ 77.092817][ T5832] veth1_macvtap: entered promiscuous mode [ 77.104063][ T5833] veth1_macvtap: entered promiscuous mode [ 77.120422][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.133392][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.145440][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.163045][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.174091][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.189307][ T5152] Bluetooth: hci0: command tx timeout [ 77.190782][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.205905][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.216564][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.228594][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.250396][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.261155][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.272268][ T5152] Bluetooth: hci1: command tx timeout [ 77.278051][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.288582][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.298435][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.309237][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.320784][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.332006][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.342602][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.354004][ T5152] Bluetooth: hci4: command tx timeout [ 77.359482][ T5831] Bluetooth: hci2: command tx timeout [ 77.365087][ T5152] Bluetooth: hci3: command tx timeout [ 77.384874][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.407980][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.422252][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.433297][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.448900][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.461025][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.479494][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.498146][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.512515][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.527691][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.538647][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.552637][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.569084][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.582945][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.601240][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.610914][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.623166][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.640757][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.649538][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.658663][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.667548][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.681472][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.746730][ T5915] input: syz1 as /devices/virtual/input/input5 [ 78.065826][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.075039][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.083783][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.144583][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.161196][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.171232][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.182143][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.193787][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.204386][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.214210][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.224983][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.239176][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.315576][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.335305][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.345743][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.356497][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.366634][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.377549][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.387996][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.399900][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.412900][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.532367][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.544169][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.571090][ T5832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.582202][ T5832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.596736][ T5832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.610211][ T5832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.703221][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.727868][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.762023][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.771953][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.855416][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.863275][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.963335][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.983017][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.037214][ T5896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.072516][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.094345][ T5896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.114409][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.240382][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.253825][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.273532][ T5831] Bluetooth: hci0: command tx timeout [ 79.344435][ T5831] Bluetooth: hci1: command tx timeout [ 79.425921][ T5831] Bluetooth: hci2: command tx timeout [ 79.431587][ T5152] Bluetooth: hci3: command tx timeout [ 79.437291][ T5831] Bluetooth: hci4: command tx timeout [ 79.588257][ T30] audit: type=1326 audit(1744834751.411:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2db8e169 code=0x7ffc0000 [ 79.658214][ T30] audit: type=1326 audit(1744834751.411:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2db8e169 code=0x7ffc0000 [ 79.689120][ T5944] loop0: detected capacity change from 0 to 164 [ 79.712506][ T5944] ======================================================= [ 79.712506][ T5944] WARNING: The mand mount option has been deprecated and [ 79.712506][ T5944] and is ignored by this kernel. Remove the mand [ 79.712506][ T5944] option from the mount to silence this warning. [ 79.712506][ T5944] ======================================================= [ 79.718859][ T30] audit: type=1326 audit(1744834751.441:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe2db8e169 code=0x7ffc0000 [ 79.796259][ T30] audit: type=1326 audit(1744834751.441:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2db8e169 code=0x7ffc0000 [ 79.820812][ T30] audit: type=1326 audit(1744834751.441:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2db8e169 code=0x7ffc0000 [ 79.845160][ T30] audit: type=1326 audit(1744834751.441:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe2db8e169 code=0x7ffc0000 [ 79.868452][ T30] audit: type=1326 audit(1744834751.441:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2db8e169 code=0x7ffc0000 [ 79.954624][ T5944] Unable to read rock-ridge attributes [ 79.990943][ T30] audit: type=1326 audit(1744834751.441:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2db8e169 code=0x7ffc0000 [ 80.061902][ T5944] Unable to read rock-ridge attributes [ 80.092900][ T30] audit: type=1326 audit(1744834751.441:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe2db8e169 code=0x7ffc0000 [ 80.184399][ T30] audit: type=1326 audit(1744834751.441:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2db8e169 code=0x7ffc0000 [ 80.383983][ T5959] macvlan1: entered promiscuous mode [ 80.433675][ T5959] ipvlan0: entered promiscuous mode [ 80.456063][ T5959] ipvlan0: left promiscuous mode [ 80.462431][ T5963] loop4: detected capacity change from 0 to 512 [ 80.507754][ T5959] macvlan1: left promiscuous mode [ 80.522825][ T5963] EXT4-fs: Ignoring removed i_version option [ 80.541253][ T5963] EXT4-fs: Ignoring removed nobh option [ 80.552945][ T5963] ext4: Unknown parameter 'fowner' [ 80.767027][ T5969] loop2: detected capacity change from 0 to 1024 [ 80.879715][ T5980] input: syz1 as /devices/virtual/input/input6 [ 80.901631][ T5969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.991292][ T5975] loop3: detected capacity change from 0 to 2048 [ 81.048546][ T5969] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.113150][ T5975] loop3: p1 < > p4 [ 81.131897][ T5981] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 81.179782][ T5975] loop3: p4 size 8388608 extends beyond EOD, truncated [ 81.209084][ T5981] EXT4-fs (loop2): Remounting filesystem read-only [ 81.221337][ T5984] loop0: detected capacity change from 0 to 512 [ 81.244047][ T12] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4829: inode #15: block 1: len 3: ext4_ext_map_blocks returned -30 [ 81.278988][ T5984] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 81.335268][ T5984] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 81.415720][ T5984] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 81.437379][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.454797][ T5984] EXT4-fs (loop0): 1 truncate cleaned up [ 81.472971][ T5984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.539879][ T5876] udevd[5876]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 81.594957][ T5875] udevd[5875]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 81.776276][ T5834] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.074582][ T6004] loop0: detected capacity change from 0 to 512 [ 82.126315][ T6004] EXT4-fs: Ignoring removed nobh option [ 82.198591][ T6004] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.32: invalid indirect mapped block 256 (level 2) [ 82.323142][ T6004] EXT4-fs (loop0): 2 truncates cleaned up [ 82.346093][ T6004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.573762][ T5834] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.467887][ T6016] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.688907][ T6023] loop3: detected capacity change from 0 to 164 [ 83.755812][ T6023] ISOFS: unable to read i-node block [ 83.759677][ T6016] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.761173][ T6023] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 83.974732][ T6031] loop0: detected capacity change from 0 to 128 [ 84.167953][ T6016] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.188631][ T6036] syz.0.44: attempt to access beyond end of device [ 84.188631][ T6036] loop0: rw=0, sector=121, nr_sectors = 8 limit=128 [ 84.203823][ T6038] loop4: detected capacity change from 0 to 1024 [ 84.269468][ T6038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.282435][ T6038] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.310053][ T1166] kworker/u8:7: attempt to access beyond end of device [ 84.310053][ T1166] loop0: rw=1, sector=129, nr_sectors = 912 limit=128 [ 84.427002][ T6016] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.579149][ T6051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.53'. [ 84.603163][ T1166] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 393: padding at end of block bitmap is not set [ 84.660633][ T1166] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 84.761185][ T1166] EXT4-fs (loop4): This should not happen!! Data will be lost [ 84.761185][ T1166] [ 85.059659][ T6016] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.150082][ T6016] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.244170][ T6058] loop3: detected capacity change from 0 to 512 [ 85.250510][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.277835][ T6016] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.325072][ T6058] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 85.341950][ T6016] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.384250][ T6058] EXT4-fs (loop3): 1 truncate cleaned up [ 85.405687][ T6065] input: syz1 as /devices/virtual/input/input7 [ 85.416655][ T6058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.440374][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 85.440389][ T30] audit: type=1326 audit(1744834757.261:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132c78e169 code=0x7ffc0000 [ 85.485404][ T6063] hub 2-0:1.0: USB hub found [ 85.555706][ T6063] hub 2-0:1.0: 1 port detected [ 85.665158][ T30] audit: type=1326 audit(1744834757.261:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f132c78e169 code=0x7ffc0000 [ 85.722005][ T30] audit: type=1326 audit(1744834757.311:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132c78e169 code=0x7ffc0000 [ 85.776356][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.805659][ T30] audit: type=1326 audit(1744834757.331:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f132c78e169 code=0x7ffc0000 [ 85.876191][ T30] audit: type=1326 audit(1744834757.431:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132c78e169 code=0x7ffc0000 [ 86.449477][ T6082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.61'. [ 86.471918][ T6082] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.955839][ T69] cfg80211: failed to load regulatory.db [ 87.035550][ T6084] netlink: 'syz.2.62': attribute type 4 has an invalid length. [ 87.081103][ T6084] netlink: 'syz.2.62': attribute type 4 has an invalid length. [ 87.326214][ T6084] syz.2.62 (6084) used greatest stack depth: 18368 bytes left [ 87.824542][ T30] audit: type=1326 audit(1744834759.631:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4938e169 code=0x7ffc0000 [ 87.884833][ T69] IPVS: starting estimator thread 0... [ 87.946481][ T30] audit: type=1326 audit(1744834759.631:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4938e169 code=0x7ffc0000 [ 88.195555][ T6093] IPVS: using max 27 ests per chain, 64800 per kthread [ 88.760205][ T30] audit: type=1326 audit(1744834759.671:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f4938e169 code=0x7ffc0000 [ 88.814855][ T30] audit: type=1326 audit(1744834759.671:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4938e169 code=0x7ffc0000 [ 88.934218][ T30] audit: type=1326 audit(1744834759.671:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4938e169 code=0x7ffc0000 [ 89.541846][ T6121] netlink: 124 bytes leftover after parsing attributes in process `syz.1.72'. [ 90.049665][ T6122] netlink: 'syz.4.74': attribute type 4 has an invalid length. [ 90.092967][ T6122] netlink: 'syz.4.74': attribute type 4 has an invalid length. [ 90.512895][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.76'. [ 91.153389][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 91.153405][ T30] audit: type=1326 audit(1744834762.971:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc658e169 code=0x7ffc0000 [ 91.285379][ T30] audit: type=1326 audit(1744834762.971:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc658e169 code=0x7ffc0000 [ 91.308291][ T30] audit: type=1326 audit(1744834762.981:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f2dc658e169 code=0x7ffc0000 [ 91.346112][ T30] audit: type=1326 audit(1744834762.981:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc658e169 code=0x7ffc0000 [ 91.484411][ T30] audit: type=1326 audit(1744834762.981:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc658e169 code=0x7ffc0000 [ 92.003607][ T5933] IPVS: starting estimator thread 0... [ 92.121512][ T6147] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.390534][ T6147] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.518131][ T6146] IPVS: using max 27 ests per chain, 64800 per kthread [ 92.870358][ T6157] netlink: 124 bytes leftover after parsing attributes in process `syz.3.87'. [ 93.282289][ T6147] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.046040][ T6159] netlink: 'syz.2.90': attribute type 4 has an invalid length. [ 94.069954][ T6159] netlink: 'syz.2.90': attribute type 4 has an invalid length. [ 94.425059][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.91'. [ 95.026574][ T6166] input: syz1 as /devices/virtual/input/input8 [ 95.085071][ T6147] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.483149][ T6147] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.576887][ T6147] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.858868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.090856][ T6147] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.211045][ T6147] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.227433][ T6183] sctp: failed to load transform for md5: -2 [ 97.494676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.503249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.575957][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.102'. [ 98.576617][ T6211] netlink: 'syz.2.104': attribute type 4 has an invalid length. [ 98.607883][ T6211] netlink: 'syz.2.104': attribute type 4 has an invalid length. [ 99.623419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.725751][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.218320][ T6230] loop4: detected capacity change from 0 to 764 [ 100.264266][ T6230] rock: directory entry would overflow storage [ 100.299801][ T6230] rock: sig=0x4654, size=5, remaining=4 [ 100.962895][ T6238] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.230620][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.116'. [ 101.738880][ T6246] input: syz1 as /devices/virtual/input/input9 [ 101.961677][ T6238] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.294098][ T6253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.119'. [ 102.296433][ T6238] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.613100][ T6238] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.026841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 104.036094][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.172863][ T6286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'. [ 104.334427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 104.538585][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.845838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.699262][ T6238] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.749699][ T6238] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.790396][ T6238] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.927972][ T6238] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.584770][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.136'. [ 107.124261][ T5933] IPVS: starting estimator thread 0... [ 107.146301][ T6279] infiniband syz!: set active [ 107.160260][ T6279] infiniband syz!: added team_slave_0 [ 107.171298][ T6279] syz!: rxe_create_cq: returned err = -12 [ 107.181520][ T6279] infiniband syz!: Couldn't create ib_mad CQ [ 107.188252][ T6279] infiniband syz!: Couldn't open port 1 [ 107.317639][ T6279] RDS/IB: syz!: added [ 107.322061][ T6279] smc: adding ib device syz! with port count 1 [ 107.334573][ T6310] IPVS: using max 29 ests per chain, 69600 per kthread [ 107.402112][ T6279] smc: ib device syz! port 1 has pnetid [ 107.428619][ T6316] input: syz1 as /devices/virtual/input/input10 [ 108.402498][ T6329] syz.0.144 uses obsolete (PF_INET,SOCK_PACKET) [ 108.606263][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'. [ 109.754217][ T6336] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.009568][ T6344] netlink: 'syz.4.146': attribute type 4 has an invalid length. [ 110.727810][ T6336] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.942506][ T6336] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.435057][ T6336] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.729458][ T6336] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.842524][ T6336] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.913753][ T6336] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.989348][ T6336] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.471521][ T6370] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 114.055145][ T6391] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.188087][ T6395] input: syz1 as /devices/virtual/input/input11 [ 114.293487][ T6391] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.748299][ T6391] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.942456][ T6391] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.472240][ T6391] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.723212][ T6391] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.812506][ T6391] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.853069][ T6391] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.899005][ T5877] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.945501][ T5877] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 116.985676][ T6418] netlink: 20 bytes leftover after parsing attributes in process `syz.0.171'. [ 117.212182][ T6428] loop3: detected capacity change from 0 to 1764 [ 117.868932][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'. [ 118.406256][ T6439] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.414787][ T6439] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.422961][ T6439] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.431236][ T6439] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.560842][ T6439] vxlan0: entered promiscuous mode [ 119.720930][ T6463] loop1: detected capacity change from 0 to 512 [ 119.790543][ T5879] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 119.811819][ T6463] EXT4-fs warning (device loop1): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 119.865169][ T5879] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 119.905845][ T6463] EXT4-fs warning (device loop1): dx_probe:851: Enable large directory feature to access it [ 119.926585][ T6463] EXT4-fs warning (device loop1): dx_probe:936: inode #2: comm syz.1.189: Corrupt directory, running e2fsck is recommended [ 119.952023][ T6463] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 119.971896][ T6463] EXT4-fs error (device loop1): ext4_iget_extra_inode:4692: inode #15: comm syz.1.189: corrupted in-inode xattr: invalid ea_ino [ 120.235852][ T6477] input: syz1 as /devices/virtual/input/input12 [ 120.357042][ T6463] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.189: couldn't read orphan inode 15 (err -117) [ 120.401014][ T6463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.620770][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.054810][ T6489] sd 0:0:1:0: device reset [ 121.078075][ T6489] process 'syz.1.198' launched '/dev/fd/8' with NULL argv: empty string added [ 121.096250][ T30] audit: type=1326 audit(1744834792.921:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2db8e169 code=0x7ffc0000 [ 121.101522][ T6489] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 121.179206][ T30] audit: type=1326 audit(1744834792.941:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7efe2db8e169 code=0x7ffc0000 [ 121.277872][ T30] audit: type=1326 audit(1744834792.941:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2db8e169 code=0x7ffc0000 [ 121.329741][ T30] audit: type=1326 audit(1744834792.941:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe2db8e169 code=0x7ffc0000 [ 121.465536][ T30] audit: type=1326 audit(1744834792.941:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2db8e169 code=0x7ffc0000 [ 121.506403][ T30] audit: type=1326 audit(1744834792.941:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efe2db8e169 code=0x7ffc0000 [ 121.648232][ T30] audit: type=1326 audit(1744834792.941:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2db8e169 code=0x7ffc0000 [ 121.857103][ T30] audit: type=1326 audit(1744834792.941:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7efe2db8e169 code=0x7ffc0000 [ 121.880133][ T30] audit: type=1326 audit(1744834792.941:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2db8e169 code=0x7ffc0000 [ 121.964385][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'. [ 122.474200][ T30] audit: type=1326 audit(1744834792.961:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2db8e169 code=0x7ffc0000 [ 123.324951][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.215'. [ 124.826377][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.225'. [ 125.527146][ T6568] sctp: [Deprecated]: syz.1.230 (pid 6568) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.527146][ T6568] Use struct sctp_sack_info instead [ 125.702298][ T6578] loop3: detected capacity change from 0 to 128 [ 125.810188][ T5879] IPVS: starting estimator thread 0... [ 125.818383][ T6578] EXT4-fs: Ignoring removed nobh option [ 126.584663][ T6576] IPVS: using max 35 ests per chain, 84000 per kthread [ 126.716121][ T6578] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.790234][ T6578] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 126.866232][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 126.866249][ T30] audit: type=1800 audit(1744834798.691:70): pid=6578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.233" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 126.972842][ T5828] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.422898][ T6606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.242'. [ 128.576459][ T6623] loop1: detected capacity change from 0 to 512 [ 128.639911][ T6623] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 128.761866][ T6623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.800218][ T6623] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.037933][ T6623] syz.1.250 (6623) used greatest stack depth: 18168 bytes left [ 129.158190][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.259047][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.256'. [ 130.330087][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.259'. [ 131.128549][ T6662] Zero length message leads to an empty skb [ 132.444482][ T6675] input: syz1 as /devices/virtual/input/input13 [ 132.630809][ T6680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.270'. [ 132.750613][ T6684] netlink: 200 bytes leftover after parsing attributes in process `syz.1.271'. [ 133.160996][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.205882][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.933211][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.273'. [ 135.955095][ T6713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.279'. [ 137.827348][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.287'. [ 139.220622][ T6750] loop9: detected capacity change from 0 to 7 [ 139.265198][ T6750] Buffer I/O error on dev loop9, logical block 0, async page read [ 139.342664][ T6750] Buffer I/O error on dev loop9, logical block 0, async page read [ 139.359365][ T6750] Buffer I/O error on dev loop9, logical block 0, async page read [ 139.368188][ T6750] Buffer I/O error on dev loop9, logical block 0, async page read [ 139.443254][ T6750] Buffer I/O error on dev loop9, logical block 0, async page read [ 139.474977][ T6750] Buffer I/O error on dev loop9, logical block 0, async page read [ 139.483562][ T6750] Buffer I/O error on dev loop9, logical block 0, async page read [ 139.491941][ T6750] ldm_validate_partition_table(): Disk read failed. [ 139.498668][ T6750] Buffer I/O error on dev loop9, logical block 0, async page read [ 139.506775][ T6750] Buffer I/O error on dev loop9, logical block 0, async page read [ 139.515043][ T6750] Buffer I/O error on dev loop9, logical block 0, async page read [ 139.523041][ T6750] Dev loop9: unable to read RDB block 0 [ 139.535185][ T6750] loop9: unable to read partition table [ 139.542716][ T6750] loop9: partition table beyond EOD, truncated [ 139.594164][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.297'. [ 139.667793][ T6750] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 139.667793][ T6750] UO=K) failed (rc=-5) [ 140.542402][ T6757] loop1: detected capacity change from 0 to 8192 [ 140.828955][ T6757] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 140.856440][ T6757] FAT-fs (loop1): Filesystem has been set read-only [ 141.378070][ T6747] input: syz1 as /devices/virtual/input/input14 [ 141.735496][ T6782] syz.2.306 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 142.287673][ T6797] netlink: 'syz.3.309': attribute type 4 has an invalid length. [ 143.761819][ T6814] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 143.768627][ T6814] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 143.839122][ T6814] vhci_hcd vhci_hcd.0: Device attached [ 143.867028][ T6815] vhci_hcd: connection closed [ 143.876493][ T6236] vhci_hcd: stop threads [ 143.905615][ T6236] vhci_hcd: release socket [ 143.929834][ T6236] vhci_hcd: disconnect device [ 144.007756][ T123] vhci_hcd: vhci_device speed not set [ 144.467372][ T5933] IPVS: starting estimator thread 0... [ 144.855785][ T6832] IPVS: using max 38 ests per chain, 91200 per kthread [ 144.945543][ T6838] netlink: 'syz.4.324': attribute type 4 has an invalid length. [ 146.171049][ T30] audit: type=1326 audit(1744834817.991:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2db8e169 code=0x7ffc0000 [ 146.304448][ T30] audit: type=1326 audit(1744834818.021:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2db8e169 code=0x7ffc0000 [ 146.396946][ T30] audit: type=1326 audit(1744834818.041:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe2db8e169 code=0x7ffc0000 [ 146.503264][ T30] audit: type=1326 audit(1744834818.041:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2db8e169 code=0x7ffc0000 [ 146.609641][ T30] audit: type=1326 audit(1744834818.041:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2db8e169 code=0x7ffc0000 [ 146.738739][ T6863] input: syz1 as /devices/virtual/input/input15 [ 147.014389][ T30] audit: type=1326 audit(1744834818.051:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe2db8e169 code=0x7ffc0000 [ 147.054413][ T30] audit: type=1326 audit(1744834818.061:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2db8e169 code=0x7ffc0000 [ 147.112859][ T30] audit: type=1326 audit(1744834818.071:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2db8e169 code=0x7ffc0000 [ 147.174709][ T30] audit: type=1326 audit(1744834818.071:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe2db8e169 code=0x7ffc0000 [ 147.438731][ T30] audit: type=1326 audit(1744834818.081:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2db8e169 code=0x7ffc0000 [ 147.872151][ T6882] netlink: 16 bytes leftover after parsing attributes in process `syz.3.340'. [ 149.903013][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.353'. [ 150.844510][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.362'. [ 152.782206][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 152.782297][ T30] audit: type=1326 audit(1744834824.591:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc658e169 code=0x7ffc0000 [ 152.813726][ T30] audit: type=1326 audit(1744834824.591:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f2dc658e169 code=0x7ffc0000 [ 152.836071][ T30] audit: type=1326 audit(1744834824.591:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc658e169 code=0x7ffc0000 [ 152.892231][ T30] audit: type=1326 audit(1744834824.591:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f2dc658e169 code=0x7ffc0000 [ 152.892274][ T30] audit: type=1326 audit(1744834824.591:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc658e169 code=0x7ffc0000 [ 153.085937][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 153.595575][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.373'. [ 155.091417][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.375'. [ 156.215460][ T30] audit: type=1326 audit(1744834828.041:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc658e169 code=0x7ffc0000 [ 156.290594][ T30] audit: type=1326 audit(1744834828.041:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc658e169 code=0x7ffc0000 [ 156.341925][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.381'. [ 156.392010][ T30] audit: type=1326 audit(1744834828.061:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dc658e169 code=0x7ffc0000 [ 156.477500][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'. [ 156.495128][ T30] audit: type=1326 audit(1744834828.061:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc658e169 code=0x7ffc0000 [ 156.551688][ T6998] loop1: detected capacity change from 0 to 1024 [ 156.579534][ T30] audit: type=1326 audit(1744834828.061:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc658e169 code=0x7ffc0000 [ 156.632234][ T6998] EXT4-fs: Ignoring removed nobh option [ 156.701182][ T6998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.745450][ T6998] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4115: comm syz.1.383: Allocating blocks 385-513 which overlap fs metadata [ 156.815741][ T6998] EXT4-fs (loop1): pa ffff88807727c1d0: logic 16, phys. 129, len 24 [ 156.823999][ T6998] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 156.860587][ T6998] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 156.902144][ T6998] EXT4-fs (loop1): This should not happen!! Data will be lost [ 156.902144][ T6998] [ 156.955952][ T6998] EXT4-fs (loop1): Total free blocks count 0 [ 156.979441][ T6998] EXT4-fs (loop1): Free/Dirty block details [ 156.999062][ T6998] EXT4-fs (loop1): free_blocks=128 [ 157.014135][ T6998] EXT4-fs (loop1): dirty_blocks=0 [ 157.021596][ T7008] netlink: 'syz.0.385': attribute type 10 has an invalid length. [ 157.031828][ T6998] EXT4-fs (loop1): Block reservation details [ 157.039575][ T7008] netlink: 40 bytes leftover after parsing attributes in process `syz.0.385'. [ 157.050743][ T6998] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 157.058575][ T7008] dummy0: entered promiscuous mode [ 157.068371][ T7008] bridge0: port 3(dummy0) entered blocking state [ 157.080241][ T7008] bridge0: port 3(dummy0) entered disabled state [ 157.096940][ T7008] dummy0: entered allmulticast mode [ 157.122061][ T7008] bridge0: port 3(dummy0) entered blocking state [ 157.129602][ T7008] bridge0: port 3(dummy0) entered forwarding state [ 157.575104][ T7015] geneve0: entered allmulticast mode [ 157.709957][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.389'. [ 158.427331][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'. [ 158.572957][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.392'. [ 160.126788][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.406'. [ 160.421971][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.407'. [ 162.249029][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'. [ 162.323231][ T7088] input: syz1 as /devices/virtual/input/input16 [ 162.760966][ T7102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.421'. [ 164.543046][ T7127] netlink: 'syz.2.431': attribute type 20 has an invalid length. [ 164.596579][ T7130] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.779270][ T7130] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.848975][ T7142] syzkaller0: entered promiscuous mode [ 164.882184][ T7142] syzkaller0: entered allmulticast mode [ 164.933112][ T7130] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.121339][ T7130] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.315403][ T7130] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.442862][ T7130] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.486939][ T7130] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.563499][ T7130] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.454721][ T7162] netlink: 'syz.1.444': attribute type 20 has an invalid length. [ 167.283619][ T7191] netlink: 'syz.4.457': attribute type 20 has an invalid length. [ 167.388926][ T7192] input: syz1 as /devices/virtual/input/input17 [ 169.222963][ T7213] netlink: 20 bytes leftover after parsing attributes in process `syz.0.465'. [ 169.699215][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.467'. [ 172.922080][ T7262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.482'. [ 173.859829][ T7265] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.032235][ T7265] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.186436][ T7265] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.309559][ T7265] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.957170][ T7283] netlink: 36 bytes leftover after parsing attributes in process `syz.3.490'. [ 176.012070][ T7299] input: syz1 as /devices/virtual/input/input18 [ 176.308482][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.499'. [ 176.510426][ T7313] bridge0: entered promiscuous mode [ 176.524502][ T7313] macvlan2: entered promiscuous mode [ 176.542626][ T7313] bridge0: port 3(macvlan2) entered blocking state [ 176.572708][ T7313] bridge0: port 3(macvlan2) entered disabled state [ 176.588949][ T7313] macvlan2: entered allmulticast mode [ 176.594549][ T7313] bridge0: entered allmulticast mode [ 176.819360][ T7313] macvlan2: left allmulticast mode [ 176.824704][ T7313] bridge0: left allmulticast mode [ 176.830936][ T7313] bridge0: left promiscuous mode [ 177.044819][ T7322] bridge0: entered promiscuous mode [ 177.051757][ T7322] bridge0: port 3(macsec1) entered blocking state [ 177.075670][ T7322] bridge0: port 3(macsec1) entered disabled state [ 177.116131][ T7322] macsec1: entered allmulticast mode [ 177.159802][ T7322] bridge0: entered allmulticast mode [ 177.201928][ T7322] macsec1: left allmulticast mode [ 177.222423][ T7322] bridge0: left allmulticast mode [ 177.232754][ T7322] bridge0: left promiscuous mode [ 177.289539][ T7323] netlink: 'syz.4.503': attribute type 1 has an invalid length. [ 177.311856][ T7323] netlink: 'syz.4.503': attribute type 2 has an invalid length. [ 177.543517][ T7334] loop3: detected capacity change from 0 to 764 [ 177.790640][ T7339] netlink: 24 bytes leftover after parsing attributes in process `syz.3.510'. [ 177.930010][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 177.930028][ T30] audit: type=1326 audit(1744834850.746:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4938e169 code=0x7ffc0000 [ 178.177970][ T30] audit: type=1326 audit(1744834850.746:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4938e169 code=0x7ffc0000 [ 178.271538][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.513'. [ 178.785099][ T30] audit: type=1326 audit(1744834850.746:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f7f4938e169 code=0x7ffc0000 [ 178.808192][ T30] audit: type=1326 audit(1744834850.746:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4938e169 code=0x7ffc0000 [ 178.830480][ T30] audit: type=1326 audit(1744834850.746:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4938e169 code=0x7ffc0000 [ 179.861986][ T7357] loop2: detected capacity change from 0 to 256 [ 179.949715][ T30] audit: type=1804 audit(1744834852.776:107): pid=7357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.517" name="/newroot/104/file1/file0" dev="loop2" ino=5 res=1 errno=0 [ 180.075387][ T7337] input: syz1 as /devices/virtual/input/input19 [ 180.350407][ T7368] loop1: detected capacity change from 0 to 128 [ 180.497622][ T7371] loop3: detected capacity change from 0 to 512 [ 180.561783][ T7371] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 180.622638][ T7371] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 180.665441][ T7371] EXT4-fs (loop3): mount failed [ 180.895435][ T7376] loop1: detected capacity change from 0 to 8192 [ 180.982467][ T7384] netlink: 24 bytes leftover after parsing attributes in process `syz.4.526'. [ 181.074366][ T30] audit: type=1326 audit(1744834853.716:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7379 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132c78e169 code=0x7ffc0000 [ 181.097773][ T30] audit: type=1326 audit(1744834853.716:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7379 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132c78e169 code=0x7ffc0000 [ 181.120907][ T30] audit: type=1326 audit(1744834853.736:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7379 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f132c78e169 code=0x7ffc0000 [ 181.211236][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.525'. [ 182.130273][ T7403] netlink: 76 bytes leftover after parsing attributes in process `syz.3.533'. [ 182.313046][ T7407] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 182.319614][ T7407] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 182.348113][ T7407] vhci_hcd vhci_hcd.0: Device attached [ 182.370418][ T7408] vhci_hcd: connection closed [ 182.372119][ T12] vhci_hcd: stop threads [ 182.385930][ T12] vhci_hcd: release socket [ 182.390389][ T12] vhci_hcd: disconnect device [ 183.660430][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 183.660446][ T30] audit: type=1326 audit(1744834856.486:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.2.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4938e169 code=0x7ffc0000 [ 183.795021][ T30] audit: type=1326 audit(1744834856.496:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.2.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f7f4938e169 code=0x7ffc0000 [ 183.869042][ T30] audit: type=1326 audit(1744834856.496:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.2.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4938e169 code=0x7ffc0000 [ 183.894811][ T30] audit: type=1326 audit(1744834856.496:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.2.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7f4938e169 code=0x7ffc0000 [ 183.918240][ T30] audit: type=1326 audit(1744834856.496:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.2.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4938e169 code=0x7ffc0000 [ 183.919835][ T7441] netlink: 'syz.3.547': attribute type 11 has an invalid length. [ 183.940765][ T30] audit: type=1326 audit(1744834856.496:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.2.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7f4938cad0 code=0x7ffc0000 [ 184.086699][ T30] audit: type=1326 audit(1744834856.696:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.2.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4938e169 code=0x7ffc0000 [ 184.143058][ T30] audit: type=1326 audit(1744834856.696:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.2.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4938e169 code=0x7ffc0000 [ 184.577720][ T7452] mmap: syz.3.550 (7452) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 184.733695][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.550'. [ 184.740249][ T7457] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.743648][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.550'. [ 184.767044][ T7457] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.908282][ T7457] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.956160][ T7457] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.054121][ T7457] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.064783][ T7457] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.192055][ T7457] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.208032][ T7457] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.355881][ T7457] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.409370][ T7457] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.469410][ T7457] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.506743][ T7457] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.596933][ T7457] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.623031][ T7457] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.738085][ T7457] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.748683][ T7457] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.345516][ T30] audit: type=1326 audit(1744834859.146:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4938e169 code=0x7ffc0000 [ 186.474365][ T30] audit: type=1326 audit(1744834859.226:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4938e169 code=0x7ffc0000 [ 187.089219][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.570'. [ 187.811775][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.575'. [ 187.854689][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.578'. [ 187.856613][ T7533] Invalid ELF header magic: != ELF [ 187.869971][ T7534] netlink: 24 bytes leftover after parsing attributes in process `syz.1.576'. [ 189.481015][ T7561] syzkaller1: entered promiscuous mode [ 189.514462][ T7561] syzkaller1: entered allmulticast mode [ 189.722561][ T7563] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.730898][ T7563] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.813223][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.589'. [ 190.448088][ T7563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.544696][ T7563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.778705][ T7575] hub 1-0:1.0: USB hub found [ 190.792962][ T7575] hub 1-0:1.0: 1 port detected [ 190.855042][ T30] audit: type=1326 audit(1744834863.676:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.0.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4338e169 code=0x7ffc0000 [ 190.910288][ T30] audit: type=1326 audit(1744834863.686:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.0.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4338e169 code=0x7ffc0000 [ 190.932953][ C0] vkms_vblank_simulate: vblank timer overrun [ 190.973842][ T30] audit: type=1326 audit(1744834863.686:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.0.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f3a4338e169 code=0x7ffc0000 [ 191.064147][ T30] audit: type=1326 audit(1744834863.686:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.0.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4338e169 code=0x7ffc0000 [ 191.121222][ T30] audit: type=1326 audit(1744834863.686:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.0.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4338e169 code=0x7ffc0000 [ 191.561865][ T7604] 9pnet_fd: Insufficient options for proto=fd [ 192.154269][ T7609] input: syz1 as /devices/virtual/input/input20 [ 193.909488][ T7633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.614'. [ 194.312488][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.742738][ T7639] 9pnet_fd: Insufficient options for proto=fd [ 194.890759][ T7641] netlink: 104 bytes leftover after parsing attributes in process `syz.0.617'. [ 194.934378][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.621'. [ 194.989332][ T7647] bond1: entered promiscuous mode [ 194.994634][ T7647] bond1: entered allmulticast mode [ 195.000910][ T7647] 8021q: adding VLAN 0 to HW filter on device bond1 [ 195.462084][ T7670] 9pnet_fd: Insufficient options for proto=fd [ 196.386818][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 196.386883][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 196.393702][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 196.465865][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 196.473952][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 196.615993][ T7690] input: syz1 as /devices/virtual/input/input21 [ 197.414662][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.638'. [ 198.340486][ T7724] 9pnet_fd: Insufficient options for proto=fd [ 198.547715][ T30] audit: type=1326 audit(1744834871.376:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7730 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc658e169 code=0x7ffc0000 [ 198.598626][ T30] audit: type=1326 audit(1744834871.376:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7730 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2dc658e169 code=0x7ffc0000 [ 198.643451][ T30] audit: type=1326 audit(1744834871.376:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7730 comm="syz.1.648" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2dc658e169 code=0x0 [ 198.705750][ T7729] loop4: detected capacity change from 0 to 512 [ 198.763193][ T7729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 198.780557][ T7729] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.199150][ T7746] netlink: 'syz.3.651': attribute type 10 has an invalid length. [ 199.219128][ T7746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.257975][ T7746] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 199.267929][ T123] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 199.324791][ T7746] syz.3.651 (7746) used greatest stack depth: 18008 bytes left [ 199.430688][ T123] usb 5-1: Using ep0 maxpacket: 32 [ 199.448584][ T123] usb 5-1: unable to get BOS descriptor or descriptor too short [ 199.467600][ T123] usb 5-1: config 16 has an invalid interface number: 177 but max is 0 [ 199.484713][ T123] usb 5-1: config 16 has no interface number 0 [ 199.617928][ T123] usb 5-1: config 16 interface 177 has no altsetting 0 [ 199.630514][ T123] usb 5-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d7.89 [ 199.640868][ T123] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.648965][ T123] usb 5-1: Product: syz [ 199.653243][ T123] usb 5-1: Manufacturer: syz [ 199.657933][ T123] usb 5-1: SerialNumber: syz [ 199.675778][ T7756] loop1: detected capacity change from 0 to 512 [ 199.768855][ T7761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.654'. [ 200.479096][ T7756] EXT4-fs (loop1): 1 orphan inode deleted [ 200.485925][ T63] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 200.517945][ T7756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.576418][ T63] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 200.631334][ T7756] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.815828][ T30] audit: type=1800 audit(1744834873.646:153): pid=7756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.653" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 201.129689][ T7776] netlink: 'syz.0.655': attribute type 4 has an invalid length. [ 201.489552][ T30] audit: type=1800 audit(1744834873.646:154): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.653" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 202.009181][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.031877][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 202.161283][ T123] usb 5-1: USB disconnect, device number 2 [ 202.317140][ T7804] loop4: detected capacity change from 0 to 1024 [ 202.339021][ T7804] EXT4-fs: inline encryption not supported [ 202.349556][ T7803] loop2: detected capacity change from 0 to 2048 [ 202.359228][ T7804] EXT4-fs: Ignoring removed bh option [ 202.401108][ T7803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.416618][ T7804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.426026][ T7812] 9pnet_fd: Insufficient options for proto=fd [ 202.436554][ T7803] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.612582][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.679157][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.786065][ T7817] loop4: detected capacity change from 0 to 1764 [ 203.127534][ T7830] loop1: detected capacity change from 0 to 256 [ 203.460291][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.673'. [ 204.232597][ T7847] loop1: detected capacity change from 0 to 512 [ 204.390816][ T7860] 9pnet_fd: Insufficient options for proto=fd [ 205.998253][ T7893] syz!: rxe_newlink: already configured on team_slave_0 [ 206.109425][ T7895] 9pnet_fd: Insufficient options for proto=fd [ 206.336793][ T7901] capability: warning: `syz.1.701' uses deprecated v2 capabilities in a way that may be insecure [ 206.445354][ T7899] netlink: 'syz.0.702': attribute type 10 has an invalid length. [ 206.475013][ T7899] macvlan1: entered allmulticast mode [ 206.487011][ T7899] veth1_vlan: entered allmulticast mode [ 206.507741][ T7899] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 207.468773][ T7927] loop2: detected capacity change from 0 to 512 [ 207.504275][ T7927] EXT4-fs: Ignoring removed oldalloc option [ 207.611527][ T7930] 9pnet_fd: Insufficient options for proto=fd [ 207.622545][ T7928] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 207.669713][ T7927] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.709: Parent and EA inode have the same ino 15 [ 207.809259][ T7927] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.709: Parent and EA inode have the same ino 15 [ 207.842472][ T7927] EXT4-fs (loop2): 1 orphan inode deleted [ 207.876162][ T7927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.963928][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.090045][ T7944] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 208.090045][ T7944] program syz.1.715 not setting count and/or reply_len properly [ 208.122263][ T7947] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 209.309831][ T7969] pim6reg: entered allmulticast mode [ 209.365933][ T7971] 9pnet_fd: Insufficient options for proto=fd [ 209.385294][ T7969] pim6reg: left allmulticast mode [ 209.707522][ T7980] loop2: detected capacity change from 0 to 512 [ 209.729605][ T7980] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 209.804123][ T7980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.826400][ T7980] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.163115][ T7993] input: syz1 as /devices/virtual/input/input22 [ 211.018489][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.243889][ T7999] smc: net device bond0 applied user defined pnetid SYZ2 [ 211.253552][ T7999] smc: net device bond0 erased user defined pnetid SYZ2 [ 211.302977][ T8012] netlink: 24 bytes leftover after parsing attributes in process `syz.2.737'. [ 211.534081][ T30] audit: type=1326 audit(1744834884.356:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132c78e169 code=0x7ffc0000 [ 211.577613][ T8022] xt_CT: No such helper "netbios-ns" [ 211.594705][ T30] audit: type=1326 audit(1744834884.396:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132c78e169 code=0x7ffc0000 [ 211.633345][ T8031] loop4: detected capacity change from 0 to 128 [ 211.654600][ T30] audit: type=1326 audit(1744834884.396:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f132c78e169 code=0x7ffc0000 [ 211.838565][ T30] audit: type=1326 audit(1744834884.396:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132c78e169 code=0x7ffc0000 [ 211.864597][ T30] audit: type=1326 audit(1744834884.396:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f132c78cad0 code=0x7ffc0000 [ 211.888086][ T30] audit: type=1326 audit(1744834884.396:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f132c78f997 code=0x7ffc0000 [ 211.925122][ T30] audit: type=1326 audit(1744834884.396:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f132c78e169 code=0x7ffc0000 [ 212.037235][ T30] audit: type=1326 audit(1744834884.396:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f132c78f997 code=0x7ffc0000 [ 212.126017][ T30] audit: type=1326 audit(1744834884.396:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f132c78cdca code=0x7ffc0000 [ 212.162665][ T30] audit: type=1326 audit(1744834884.406:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132c78e169 code=0x7ffc0000 [ 212.300698][ T8052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.756'. [ 213.074028][ T8082] loop1: detected capacity change from 0 to 1024 [ 213.090448][ T8082] EXT4-fs: Ignoring removed nobh option [ 213.119957][ T8082] EXT4-fs: Ignoring removed bh option [ 213.178346][ T8082] EXT4-fs: Mount option(s) incompatible with ext3 [ 213.334571][ T8092] netlink: 300 bytes leftover after parsing attributes in process `syz.4.771'. [ 213.974440][ T8081] infiniband syz0: set active [ 213.980058][ T8081] infiniband syz0: added bond0 [ 213.995029][ T8081] syz0: rxe_create_cq: returned err = -12 [ 214.000880][ T8081] infiniband syz0: Couldn't create ib_mad CQ [ 214.008124][ T8081] infiniband syz0: Couldn't open port 1 [ 214.725953][ T8081] RDS/IB: syz0: added [ 214.730032][ T8081] smc: adding ib device syz0 with port count 1 [ 214.739425][ T8081] smc: ib device syz0 port 1 has pnetid [ 214.861578][ T8130] netlink: 24 bytes leftover after parsing attributes in process `syz.2.786'. [ 215.709325][ T8155] loop2: detected capacity change from 0 to 512 [ 215.761837][ T8155] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 215.838147][ T8155] EXT4-fs (loop2): orphan cleanup on readonly fs [ 215.954685][ T8155] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.792: Failed to acquire dquot type 1 [ 215.955363][ T8160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.796'. [ 216.074769][ T8155] EXT4-fs (loop2): 1 truncate cleaned up [ 216.135524][ T8164] loop3: detected capacity change from 0 to 1024 [ 216.177822][ T8155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 216.249497][ T8164] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.797: Failed to acquire dquot type 0 [ 216.314767][ T8164] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 216.480520][ T8164] EXT4-fs error (device loop3): ext4_do_update_inode:5182: inode #13: comm syz.3.797: corrupted inode contents [ 216.556622][ T8164] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #13: comm syz.3.797: mark_inode_dirty error [ 216.645394][ T8164] EXT4-fs error (device loop3): ext4_do_update_inode:5182: inode #13: comm syz.3.797: corrupted inode contents [ 216.709629][ T8164] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.797: mark_inode_dirty error [ 216.772450][ T8164] EXT4-fs error (device loop3): ext4_do_update_inode:5182: inode #13: comm syz.3.797: corrupted inode contents [ 216.797735][ T8164] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 216.849697][ T8164] EXT4-fs error (device loop3): ext4_do_update_inode:5182: inode #13: comm syz.3.797: corrupted inode contents [ 216.904674][ T8164] EXT4-fs error (device loop3): ext4_truncate:4254: inode #13: comm syz.3.797: mark_inode_dirty error [ 216.936222][ T8164] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 216.959273][ T8164] EXT4-fs (loop3): 1 truncate cleaned up [ 216.977169][ T8164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.130774][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.238278][ T8192] netlink: 20 bytes leftover after parsing attributes in process `syz.3.808'. [ 217.786717][ T8209] loop4: detected capacity change from 0 to 512 [ 217.811415][ T8209] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 217.942180][ T8209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.974732][ T8209] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.106301][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.401289][ T8225] netlink: 'syz.4.818': attribute type 7 has an invalid length. [ 220.844372][ T30] kauditd_printk_skb: 424 callbacks suppressed [ 220.844391][ T30] audit: type=1107 audit(1744834893.656:585): pid=8243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 220.943207][ T8245] 9pnet: Could not find request transport: fd0x0000000000000003 [ 221.098961][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.129443][ T8258] loop1: detected capacity change from 0 to 512 [ 221.148389][ T8258] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 221.323611][ T8258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.363933][ T8258] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.447336][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.209553][ T8303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.849'. [ 222.421665][ T8306] loop1: detected capacity change from 0 to 512 [ 222.467266][ T8306] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 222.577007][ T8306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.589781][ T8306] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.708715][ T8318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.853'. [ 222.816142][ T8311] @: renamed from vlan0 (while UP) [ 222.920386][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.025500][ T8324] netlink: 'syz.0.857': attribute type 11 has an invalid length. [ 223.784416][ T5933] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 223.815755][ T8338] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.838295][ T8340] ------------[ cut here ]------------ [ 223.843968][ T8340] WARNING: CPU: 0 PID: 8340 at net/ipv4/udp_offload.c:123 udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 223.854922][ T8340] Modules linked in: [ 223.858959][ T8340] CPU: 0 UID: 0 PID: 8340 Comm: syz.0.863 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 223.870455][ T8340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 223.880564][ T8340] RIP: 0010:udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 223.887007][ T8340] Code: 00 00 e8 b6 b3 2c f7 48 c1 e5 04 48 8d b5 60 c0 c8 9a ba 10 00 00 00 4c 89 ff e8 2e ee 96 f7 e9 ce 00 00 00 e8 94 b3 2c f7 90 <0f> 0b 90 e9 de fd ff ff bf 01 00 00 00 89 ee e8 bf b7 2c f7 85 ed [ 223.906896][ T8340] RSP: 0018:ffffc90003ff7c48 EFLAGS: 00010293 [ 223.912966][ T8340] RAX: ffffffff8a96c80c RBX: 0000000000000002 RCX: ffff88802c639e00 [ 223.920973][ T8340] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000007 [ 223.928975][ T8340] RBP: 0000000000000001 R08: ffffffff8a96c4ee R09: 1ffffffff20c0836 [ 223.937574][ T8340] R10: dffffc0000000000 R11: fffffbfff20c0837 R12: ffffffff86dd4910 [ 223.946003][ T8340] R13: dffffc0000000000 R14: ffff888012045b80 R15: 0000000000000000 [ 223.953984][ T8340] FS: 000055558a961500(0000) GS:ffff888124f80000(0000) knlGS:0000000000000000 [ 223.962937][ T8340] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.969531][ T8340] CR2: 000000110c261ba9 CR3: 000000007bb34000 CR4: 00000000003526f0 [ 223.977633][ T8340] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 223.985748][ T8340] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 223.993721][ T8340] Call Trace: [ 223.997064][ T8340] [ 224.000025][ T8340] udpv6_destroy_sock+0x212/0x270 [ 224.005128][ T8340] ? __pfx_udpv6_destroy_sock+0x10/0x10 [ 224.010691][ T8340] sk_common_release+0x71/0x2e0 [ 224.015645][ T8340] inet_release+0x17d/0x200 [ 224.020173][ T8340] sock_close+0xbc/0x240 [ 224.024474][ T8340] ? __pfx_sock_close+0x10/0x10 [ 224.029427][ T8340] __fput+0x3e9/0x9f0 [ 224.033417][ T8340] task_work_run+0x251/0x310 [ 224.038035][ T8340] ? _raw_spin_unlock+0x28/0x50 [ 224.043436][ T8340] ? __pfx_task_work_run+0x10/0x10 [ 224.049024][ T8340] ? syscall_exit_to_user_mode+0xa3/0x340 [ 224.054789][ T8340] syscall_exit_to_user_mode+0x13f/0x340 [ 224.060417][ T8340] do_syscall_64+0x100/0x230 [ 224.065026][ T8340] ? clear_bhb_loop+0x45/0xa0 [ 224.069702][ T8340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.075641][ T8340] RIP: 0033:0x7f3a4338e169 [ 224.080052][ T8340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.099719][ T8340] RSP: 002b:00007ffdfba821e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 224.108194][ T8340] RAX: 0000000000000000 RBX: 0000000000036918 RCX: 00007f3a4338e169 [ 224.116198][ T8340] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 224.124179][ T8340] RBP: 00007f3a435b7ba0 R08: 0000000000000001 R09: 0000000afba824df [ 224.132216][ T8340] R10: 00007f3a43200000 R11: 0000000000000246 R12: 00007f3a435b5fac [ 224.140240][ T8340] R13: 00007f3a435b5fa0 R14: ffffffffffffffff R15: 00007ffdfba82300 [ 224.148884][ T8340] [ 224.151915][ T8340] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 224.159190][ T8340] CPU: 0 UID: 0 PID: 8340 Comm: syz.0.863 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 224.170541][ T8340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 224.180580][ T8340] Call Trace: [ 224.183845][ T8340] [ 224.186766][ T8340] dump_stack_lvl+0x241/0x360 [ 224.191436][ T8340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.196625][ T8340] ? __pfx__printk+0x10/0x10 [ 224.201210][ T8340] ? vscnprintf+0x5d/0x90 [ 224.205537][ T8340] panic+0x349/0x880 [ 224.209434][ T8340] ? __warn+0x174/0x4d0 [ 224.213598][ T8340] ? __pfx_panic+0x10/0x10 [ 224.218037][ T8340] __warn+0x344/0x4d0 [ 224.222032][ T8340] ? udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 224.227829][ T8340] report_bug+0x2b3/0x500 [ 224.232145][ T8340] ? udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 224.237947][ T8340] ? udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 224.243760][ T8340] ? udp_tunnel_update_gro_rcv+0x28f/0x4c0 [ 224.249570][ T8340] handle_bug+0x89/0x170 [ 224.253801][ T8340] exc_invalid_op+0x1a/0x50 [ 224.258293][ T8340] asm_exc_invalid_op+0x1a/0x20 [ 224.263132][ T8340] RIP: 0010:udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 224.269533][ T8340] Code: 00 00 e8 b6 b3 2c f7 48 c1 e5 04 48 8d b5 60 c0 c8 9a ba 10 00 00 00 4c 89 ff e8 2e ee 96 f7 e9 ce 00 00 00 e8 94 b3 2c f7 90 <0f> 0b 90 e9 de fd ff ff bf 01 00 00 00 89 ee e8 bf b7 2c f7 85 ed [ 224.289128][ T8340] RSP: 0018:ffffc90003ff7c48 EFLAGS: 00010293 [ 224.295187][ T8340] RAX: ffffffff8a96c80c RBX: 0000000000000002 RCX: ffff88802c639e00 [ 224.303143][ T8340] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000007 [ 224.311110][ T8340] RBP: 0000000000000001 R08: ffffffff8a96c4ee R09: 1ffffffff20c0836 [ 224.319072][ T8340] R10: dffffc0000000000 R11: fffffbfff20c0837 R12: ffffffff86dd4910 [ 224.327028][ T8340] R13: dffffc0000000000 R14: ffff888012045b80 R15: 0000000000000000 [ 224.334993][ T8340] ? __pfx_vxlan_gro_receive+0x10/0x10 [ 224.340453][ T8340] ? udp_tunnel_update_gro_rcv+0xce/0x4c0 [ 224.346172][ T8340] ? udp_tunnel_update_gro_rcv+0x3ec/0x4c0 [ 224.351997][ T8340] ? udp_tunnel_update_gro_rcv+0x3ec/0x4c0 [ 224.357803][ T8340] udpv6_destroy_sock+0x212/0x270 [ 224.362834][ T8340] ? __pfx_udpv6_destroy_sock+0x10/0x10 [ 224.368367][ T8340] sk_common_release+0x71/0x2e0 [ 224.373210][ T8340] inet_release+0x17d/0x200 [ 224.377707][ T8340] sock_close+0xbc/0x240 [ 224.381942][ T8340] ? __pfx_sock_close+0x10/0x10 [ 224.386789][ T8340] __fput+0x3e9/0x9f0 [ 224.390762][ T8340] task_work_run+0x251/0x310 [ 224.395343][ T8340] ? _raw_spin_unlock+0x28/0x50 [ 224.400181][ T8340] ? __pfx_task_work_run+0x10/0x10 [ 224.405284][ T8340] ? syscall_exit_to_user_mode+0xa3/0x340 [ 224.411020][ T8340] syscall_exit_to_user_mode+0x13f/0x340 [ 224.416650][ T8340] do_syscall_64+0x100/0x230 [ 224.421230][ T8340] ? clear_bhb_loop+0x45/0xa0 [ 224.425894][ T8340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.431771][ T8340] RIP: 0033:0x7f3a4338e169 [ 224.436171][ T8340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.455766][ T8340] RSP: 002b:00007ffdfba821e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 224.464169][ T8340] RAX: 0000000000000000 RBX: 0000000000036918 RCX: 00007f3a4338e169 [ 224.472127][ T8340] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 224.480082][ T8340] RBP: 00007f3a435b7ba0 R08: 0000000000000001 R09: 0000000afba824df [ 224.488056][ T8340] R10: 00007f3a43200000 R11: 0000000000000246 R12: 00007f3a435b5fac [ 224.496027][ T8340] R13: 00007f3a435b5fa0 R14: ffffffffffffffff R15: 00007ffdfba82300 [ 224.504028][ T8340] [ 224.507194][ T8340] Kernel Offset: disabled [ 224.511509][ T8340] Rebooting in 86400 seconds..