last executing test programs: 17.099745545s ago: executing program 2 (id=3443): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r2, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) 16.977774973s ago: executing program 2 (id=3444): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) lsetxattr$security_capability(&(0x7f0000000a40)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f00000003c0), 0x0, 0x0, 0x0) 5.074070638s ago: executing program 0 (id=3522): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x12, 0x3, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@udp=r4}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) 5.063395569s ago: executing program 2 (id=3445): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = inotify_init() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='find_free_extent\x00', r0, 0x0, 0xe}, 0x18) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000680)=""/139, 0x8b}], 0x1) getdents(r0, &(0x7f0000000000)=""/27, 0x1b) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x22, &(0x7f0000000380)={{}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='mm_page_alloc\x00', r3}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) 4.831227045s ago: executing program 0 (id=3524): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xfffe}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) 4.025917781s ago: executing program 1 (id=3526): fchdir(0xffffffffffffffff) 4.020352262s ago: executing program 0 (id=3527): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2008002) sendfile(r2, r3, 0x0, 0x80000001) 3.865405362s ago: executing program 1 (id=3530): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) 3.801461517s ago: executing program 3 (id=3531): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xd}}]}}, @TCA_RATE={0x6}]}, 0x4c}}, 0x0) 3.773071788s ago: executing program 4 (id=3532): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {}, 0x4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip6gre0\x00'}) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB=',rootmode=000000', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) 3.580330032s ago: executing program 3 (id=3533): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fdatasync(r2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendto$inet(r1, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) 3.31943016s ago: executing program 1 (id=3534): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x5) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000700)='9', 0x1}]) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x3) 2.724048281s ago: executing program 0 (id=3535): socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r3], 0x24}}, 0x0) 2.722458141s ago: executing program 4 (id=3536): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") 2.687596794s ago: executing program 3 (id=3537): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000003d40)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0b00000000008080000000000100000000000100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) sysinfo(&(0x7f0000000300)=""/133) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) execveat(r4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000480)=[&(0x7f0000000180)='sched_switch\x00', &(0x7f00000001c0)='GPL\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='sched_switch\x00'], &(0x7f0000000780)=[0x0, &(0x7f00000005c0)='wireguard\x00', &(0x7f0000000600)=']@\xb5,:,:-!\x00', &(0x7f0000000640)='GPL\x00', &(0x7f0000000680)='GPL\x00', &(0x7f0000000700)='!\x81\x00'], 0x800) lstat(&(0x7f0000001140)='./file0/file0\x00', &(0x7f0000001180)) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008140)="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", 0x2000, &(0x7f0000001300)={&(0x7f0000000280)={0x50, 0x0, 0x8, {0x7, 0x28, 0x6200, 0x40b400, 0x400, 0x8, 0x63, 0x3}}, &(0x7f0000000200)={0x18, 0xffffffffffffffda, 0xa0, {0x5}}, &(0x7f0000000300)={0x18, 0x0, 0x4, {0x10000}}, &(0x7f0000000400)={0x18, 0x0, 0x1, {0x2}}, &(0x7f00000004c0)={0x18, 0x0, 0xe, {0x4}}, &(0x7f00000005c0)={0x28, 0x0, 0x5, {{0x2, 0x2}}}, &(0x7f0000000780)={0x60, 0x0, 0x8, {{0x9, 0x0, 0xb875, 0xfff, 0x2, 0x3, 0x68a}}}, &(0x7f0000000600)={0x18, 0x0, 0x7, {0x7f}}, &(0x7f0000000800)={0x15, 0x0, 0x409, {'fuse\x00'}}, &(0x7f0000000840)={0x20, 0x0, 0x5, {0x0, 0xc}}, &(0x7f0000000b00)={0x78, 0x0, 0x854, {0x0, 0x5, 0x0, {0x6, 0x4, 0x1, 0xf438, 0x100000001, 0xffffffffffffff83, 0x80000000, 0x5, 0x80, 0x6000, 0xf, 0x0, 0x0, 0x3, 0x8}}}, &(0x7f0000000b80)={0x90, 0x0, 0xd7a6, {0x4, 0x2, 0x9874, 0xc94, 0x3, 0x0, {0x0, 0x2, 0x0, 0x0, 0x4, 0xfffffffffffffff9, 0x4, 0x0, 0x0, 0xa000, 0x0, 0x0, 0x0, 0x29, 0x3}}}, &(0x7f0000000c40)={0x88, 0xffffffffffffffda, 0x7, [{0x0, 0x2, 0x4, 0x9, 'GPL\x00'}, {0x0, 0xffffffffffffffff, 0x1, 0x1, '-'}, {0x3, 0x7}, {0x0, 0x1, 0x4, 0x0, 'GPL\x00'}]}, &(0x7f0000003e00)=ANY=[@ANYBLOB="b00000000000000005000000000000000000000000000000030000000000000000000000000000000000000000000000000000000104000000000000000000000000000000000000000000000000000000000000030000000306000000000000fffffffffffffffff9ffffff13040000727be30100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000001200)={0xa0, 0x0, 0x0, {{0x6, 0x0, 0xffffffff80000000, 0xfffffffffffffff0, 0x9, 0x1a79, {0x4, 0xd8, 0x8000000000000000, 0x9, 0x2, 0xe, 0x4, 0x99, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x8000, 0x10000}}, {0x0, 0x14}}}, &(0x7f00000012c0)={0x20, 0x0, 0x8, {0x1, 0x0, 0x6}}}) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r8) setgroups(0x2, &(0x7f0000000140)=[r8, r8]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003fc0)={{{@in=@private, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000540)=0xe8) sendmmsg$unix(r3, &(0x7f0000003c00)=[{{&(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001900)=[{&(0x7f0000000840)="e1304b6297fb18cc9f13e9392f304db6a5a28513782e6c8781c2f250a657e87626eb5dd0806c95e9ad36d2fd9439fb4b61dddbde49a8a50f2dd621d2f4639df5d4af4d3823b1935b9c25f33a63e2e02cded91e474b7b7fbe2c85be2b61e7f341ae4603afa47a2e67d6a1315ecf2374715a688e8ad53dd9d6183ac0a6dbc381a1be4f5ec0c7741922c08075c83b2697f4b74cd54bb0626bc7c0dfe2249de70453b57d6282c3277e0d2a9230f6cd603af3ba837010", 0xb4}, {&(0x7f0000000900)="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", 0x1000}], 0x2, &(0x7f0000003ac0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="000000001c00000000000d000100000001000000", @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r9, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r3], 0x80, 0x4000000}}, {{&(0x7f0000003b40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003bc0), 0x0, 0x0, 0x0, 0x4000}}], 0x2, 0x24000804) syz_open_dev$tty20(0xc, 0x4, 0x1) 2.112113623s ago: executing program 0 (id=3538): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x545c, 0x0) 2.111619494s ago: executing program 2 (id=3539): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2282, 0x0) write$P9_RLERRORu(r2, 0x0, 0x18) 1.559401052s ago: executing program 4 (id=3540): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) fchdir(0xffffffffffffffff) 1.559037492s ago: executing program 2 (id=3541): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x1}, 0x4}}, 0x10, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 1.557786492s ago: executing program 3 (id=3542): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f00000001c0)=[{}], 0x1, 0x0) 1.483708717s ago: executing program 3 (id=3543): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.388019494s ago: executing program 3 (id=3544): openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22080, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r2], 0x0) 1.387515144s ago: executing program 4 (id=3545): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2008002) sendfile(r2, r3, 0x0, 0x80000001) 1.29439114s ago: executing program 1 (id=3546): syz_emit_ethernet(0x7e, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x0, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x5e210003}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@private}, {@broadcast}, {@dev}, {@private}, {@empty, 0x1}, {@broadcast}]}]}}}}}}}, 0x0) 1.227107745s ago: executing program 1 (id=3547): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {}, 0x4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip6gre0\x00'}) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB=',rootmode=000000', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) 281.38308ms ago: executing program 0 (id=3548): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x701, 0x3, 0x258, 0x108, 0xb, 0x108, 0x1c0, 0x0, 0x1c0, 0x1c8, 0x1c8, 0x1c0, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'veth1_to_batadv\x00', '\x00', {}, {}, 0x32}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@esp={{0x30}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100"], 0x64}}, 0x0) 242.070703ms ago: executing program 2 (id=3549): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 192.670997ms ago: executing program 4 (id=3550): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 191.550217ms ago: executing program 1 (id=3551): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) 0s ago: executing program 4 (id=3552): socket(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000440)=@gcm_128={{0x304}, "e453f079df21d540", "1ec2d524d78682576ec2d9e13dad1018", "993161e3", "be0692db0b429ee8"}, 0x28) write$binfmt_script(r3, &(0x7f0000001300), 0x8f) mount(&(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x208020, 0x0) kernel console output (not intermixed with test programs): 2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff18a17def9 code=0x7ffc0000 [ 759.500111][ T26] audit: type=1326 audit(1726398184.210:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12578 comm="syz.4.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18a17def9 code=0x7ffc0000 [ 759.554838][ T26] audit: type=1326 audit(1726398184.210:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12578 comm="syz.4.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18a17def9 code=0x7ffc0000 [ 759.599264][ T26] audit: type=1326 audit(1726398184.210:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12578 comm="syz.4.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff18a17def9 code=0x7ffc0000 [ 759.628962][ T26] audit: type=1326 audit(1726398184.210:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12578 comm="syz.4.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18a17def9 code=0x7ffc0000 [ 759.652373][ T26] audit: type=1326 audit(1726398184.210:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12578 comm="syz.4.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18a17def9 code=0x7ffc0000 [ 759.674901][ T26] audit: type=1326 audit(1726398184.210:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12578 comm="syz.4.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff18a17def9 code=0x7ffc0000 [ 759.697460][ T26] audit: type=1326 audit(1726398184.290:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12584 comm="syz.0.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 759.720135][ T26] audit: type=1326 audit(1726398184.290:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12584 comm="syz.0.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 760.076112][ T3699] team0 (unregistering): Port device team_slave_1 removed [ 760.118811][ T3699] team0 (unregistering): Port device team_slave_0 removed [ 760.160987][ T3699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 760.207044][ T3699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 760.402135][ T3703] smc: removing ib device syz1 [ 760.867893][ T3699] bond0 (unregistering): Released all slaves [ 761.037693][T12299] device veth1_vlan entered promiscuous mode [ 761.140107][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 761.163111][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 761.194014][T12299] device veth0_macvtap entered promiscuous mode [ 761.238194][T12299] device veth1_macvtap entered promiscuous mode [ 761.314880][T12299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.332732][T12299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.344095][T12299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.355086][T12299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.367252][T12299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 761.397097][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 761.437677][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 761.497008][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 761.525507][T12600] loop4: detected capacity change from 0 to 256 [ 761.527556][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 761.643037][T12601] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 762.328629][T12299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.360892][T12299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.390569][T12299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.417011][T12299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.450733][T12299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.483948][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 762.496618][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 762.529360][T12299] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.538098][T12299] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.574868][T12299] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.602643][T12299] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.801303][ T4426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.850340][ T4426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.887697][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 763.797452][ T9880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.834992][ T9880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.902799][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 766.249613][T12662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2771'. [ 766.369250][T12661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2771'. [ 766.435194][T12661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2771'. [ 766.642345][T12664] bridge0: port 3(macvlan2) entered blocking state [ 766.649910][T12664] bridge0: port 3(macvlan2) entered disabled state [ 766.673613][T12664] device macvlan2 entered promiscuous mode [ 766.730437][T12675] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 767.477991][T12687] bridge0: port 4(vlan2) entered blocking state [ 767.497955][T12687] bridge0: port 4(vlan2) entered disabled state [ 767.698077][T12695] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2783'. [ 768.806025][T12708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2790'. [ 768.884227][T12710] tipc: Started in network mode [ 768.889520][T12710] tipc: Node identity ac14140f, cluster identity 4711 [ 768.909861][T12710] tipc: New replicast peer: 255.255.255.255 [ 768.921175][T12710] tipc: Enabled bearer , priority 10 [ 769.063211][T12715] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 769.428911][T12730] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2798'. [ 769.869361][T12743] loop3: detected capacity change from 0 to 128 [ 769.943680][T12744] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 769.964270][T12472] tipc: Node number set to 2886997007 [ 770.738033][T12750] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2806'. [ 770.903816][T12756] loop4: detected capacity change from 0 to 128 [ 770.987793][T12758] loop3: detected capacity change from 0 to 1024 [ 770.990239][T12759] syz.4.2810: attempt to access beyond end of device [ 770.990239][T12759] loop4: rw=2049, sector=145, nr_sectors = 288 limit=128 [ 771.002338][T12758] EXT4-fs: Ignoring removed orlov option [ 771.020297][T12758] EXT4-fs: Ignoring removed nomblk_io_submit option [ 771.077918][T12758] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 771.100128][T12753] syz.4.2810: attempt to access beyond end of device [ 771.100128][T12753] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 771.147102][T12765] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2812'. [ 771.205455][T12756] syz.4.2810: attempt to access beyond end of device [ 771.205455][T12756] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 771.280811][T12756] syz.4.2810: attempt to access beyond end of device [ 771.280811][T12756] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 771.319562][T12756] syz.4.2810: attempt to access beyond end of device [ 771.319562][T12756] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 771.324522][T12299] EXT4-fs (loop3): unmounting filesystem. [ 771.350770][T12756] syz.4.2810: attempt to access beyond end of device [ 771.350770][T12756] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 771.579288][T12783] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2821'. [ 771.755098][T12790] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 772.586131][T12796] tipc: Enabled bearer , priority 10 [ 772.771202][T12801] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 773.028330][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 773.028370][ T26] audit: type=1326 audit(1726398197.800:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12794 comm="syz.1.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26f37def9 code=0x7ffc0000 [ 773.238505][T12802] tipc: Resetting bearer [ 773.330028][ T26] audit: type=1326 audit(1726398197.940:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12794 comm="syz.1.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26f37def9 code=0x7ffc0000 [ 773.442070][T12802] tipc: Disabling bearer [ 773.462483][ T26] audit: type=1326 audit(1726398198.010:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12794 comm="syz.1.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff26f37def9 code=0x7ffc0000 [ 773.533841][T12816] loop4: detected capacity change from 0 to 512 [ 773.592157][ T26] audit: type=1326 audit(1726398198.010:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12794 comm="syz.1.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26f37def9 code=0x7ffc0000 [ 773.616875][ T26] audit: type=1326 audit(1726398198.010:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12794 comm="syz.1.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26f37def9 code=0x7ffc0000 [ 773.708014][T12816] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 773.730654][T12816] ext4 filesystem being mounted at /564/file0 supports timestamps until 2038 (0x7fffffff) [ 773.763273][ T26] audit: type=1326 audit(1726398198.190:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.4.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18a17def9 code=0x7ffc0000 [ 774.582903][ T26] audit: type=1326 audit(1726398198.200:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.4.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff18a17def9 code=0x7ffc0000 [ 774.626680][ T26] audit: type=1326 audit(1726398198.200:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.4.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18a17def9 code=0x7ffc0000 [ 774.677577][ T26] audit: type=1326 audit(1726398198.200:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.4.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff18a17def9 code=0x7ffc0000 [ 774.729594][ T26] audit: type=1326 audit(1726398198.200:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.4.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18a17def9 code=0x7ffc0000 [ 774.756263][ T3978] EXT4-fs (loop4): unmounting filesystem. [ 775.938499][T12860] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.221819][T12860] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.155026][T12860] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.336396][T12860] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.453791][T12900] smc: net device lo applied user defined pnetid SYZ1 [ 777.463234][T12900] smc: net device lo erased user defined pnetid SYZ1 [ 777.518349][T12860] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.552617][T12860] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.578501][T12860] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.614305][T12860] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.753257][T12906] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 778.575191][T12906] siw: device registration error -19 [ 779.257604][T12953] IPv6: Can't replace route, no match found [ 780.098959][T12968] loop4: detected capacity change from 0 to 256 [ 780.760179][T12983] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 782.558081][T12998] device ip6_vti0 entered promiscuous mode [ 782.591265][T12998] device vlan2 entered promiscuous mode [ 782.646856][T12995] xt_CT: No such helper "netbios-ns" [ 782.712304][T12998] device ip6_vti0 left promiscuous mode [ 783.142523][T13018] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2908'. [ 783.151750][T13018] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 783.162554][T13018] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 784.813181][T13033] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.911811][T13033] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.943881][T13040] serio: Serial port pts0 [ 784.961571][T13042] loop3: detected capacity change from 0 to 128 [ 784.968593][T13042] EXT4-fs: Ignoring removed nobh option [ 784.985954][T13042] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 784.996357][T13042] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038 (0x7fffffff) [ 785.030820][T13033] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.104941][T13033] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.687223][T13059] random: crng reseeded on system resumption [ 787.446346][T12299] EXT4-fs (loop3): unmounting filesystem. [ 788.413716][T13074] loop4: detected capacity change from 0 to 164 [ 788.427225][T13075] loop3: detected capacity change from 0 to 256 [ 788.438345][T13074] ISOFS: Bad logical zone size 4096 [ 789.449860][T13081] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 789.938487][T13095] loop4: detected capacity change from 0 to 128 [ 790.179927][T13104] loop3: detected capacity change from 0 to 512 [ 790.204121][T13104] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 790.224786][T13104] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002] [ 790.240440][T13104] EXT4-fs (loop3): orphan cleanup on readonly fs [ 790.261332][T13104] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2935: bg 0: block 361: padding at end of block bitmap is not set [ 790.288125][T13104] EXT4-fs (loop3): Remounting filesystem read-only [ 790.297151][T13104] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 790.317975][T13104] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.2935: attempt to clear invalid blocks 33619980 len 1 [ 790.349947][T13104] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2935: invalid indirect mapped block 1811939328 (level 0) [ 790.393673][T13104] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2935: invalid indirect mapped block 2185560079 (level 1) [ 790.465669][T13104] EXT4-fs (loop3): 1 truncate cleaned up [ 790.474372][T13104] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 790.532783][T13102] Cannot find set identified by id 0 to match [ 790.603489][T12299] EXT4-fs (loop3): unmounting filesystem. [ 791.667384][T13125] loop3: detected capacity change from 0 to 164 [ 791.685665][T13125] ISOFS: Bad logical zone size 4096 [ 791.698272][T13132] loop4: detected capacity change from 0 to 256 [ 792.649221][T13131] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 793.264052][T13033] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.339699][T13033] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.369972][T13155] loop3: detected capacity change from 0 to 256 [ 793.416041][T13033] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.495515][T13033] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.381549][T13165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2958'. [ 794.434361][T13165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2958'. [ 794.473083][T13165] device netdevsim0 entered promiscuous mode [ 794.586186][T13165] device netdevsim0 left promiscuous mode [ 794.790334][T13174] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 795.534486][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 795.534501][ T26] audit: type=1326 audit(1726398220.320:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13177 comm="syz.3.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4c77def9 code=0x7ffc0000 [ 795.625676][ T3636] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 795.635914][ T3636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 795.645225][ T3648] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 795.654935][ T3636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 795.692872][ T3636] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 795.704432][T13184] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2967'. [ 795.705159][ T26] audit: type=1326 audit(1726398220.360:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.0.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 795.714276][ T3636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 795.809226][ T26] audit: type=1326 audit(1726398220.360:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.0.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 795.831850][ T26] audit: type=1326 audit(1726398220.360:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.0.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 795.854481][ T26] audit: type=1326 audit(1726398220.360:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.0.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 795.877123][ T26] audit: type=1326 audit(1726398220.360:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.0.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 795.903995][ T26] audit: type=1326 audit(1726398220.360:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13177 comm="syz.3.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7c4c77def9 code=0x7ffc0000 [ 795.937246][ T26] audit: type=1326 audit(1726398220.360:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13177 comm="syz.3.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4c77def9 code=0x7ffc0000 [ 796.029150][ T26] audit: type=1326 audit(1726398220.360:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13177 comm="syz.3.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4c77def9 code=0x7ffc0000 [ 796.163888][ T26] audit: type=1326 audit(1726398220.360:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13177 comm="syz.3.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c4c77def9 code=0x7ffc0000 [ 797.156158][T13179] chnl_net:caif_netlink_parms(): no params data found [ 797.417369][T13179] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.440072][T13179] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.448466][T13179] device bridge_slave_0 entered promiscuous mode [ 797.798399][T13225] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 797.815346][ T3636] Bluetooth: hci0: command tx timeout [ 798.001979][T13216] device tunl0 entered promiscuous mode [ 798.121458][T13216] netlink: 'syz.0.2977': attribute type 1 has an invalid length. [ 798.139356][T13216] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2977'. [ 798.154131][T13179] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.161811][T13179] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.189243][T13179] device bridge_slave_1 entered promiscuous mode [ 798.407447][T13179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 798.451251][T13179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 798.673389][T13179] team0: Port device team_slave_0 added [ 798.710775][T13179] team0: Port device team_slave_1 added [ 799.420732][T13179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 799.448019][T13179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.528878][T13179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 799.542172][T13179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 799.549208][T13179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.576168][T13179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 799.674256][T13254] device bond1 entered promiscuous mode [ 799.691845][T13254] 8021q: adding VLAN 0 to HW filter on device bond1 [ 799.718401][T13259] loop3: detected capacity change from 0 to 1024 [ 800.391697][T13254] bond1 (unregistering): Released all slaves [ 800.509822][T13179] device hsr_slave_0 entered promiscuous mode [ 800.533450][T13179] device hsr_slave_1 entered promiscuous mode [ 800.572777][T13179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 800.592373][T13179] Cannot create hsr debugfs directory [ 800.832003][T13266] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 801.484735][ T7361] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.670751][ T7361] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.771824][ T7361] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.925898][ T7361] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.865066][T13293] loop3: detected capacity change from 0 to 764 [ 803.194091][ T7361] tipc: Disabling bearer [ 803.329867][ T7361] tipc: Left network mode [ 803.963256][T13310] loop3: detected capacity change from 0 to 128 [ 804.062076][T13312] loop4: detected capacity change from 0 to 256 [ 804.119734][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 804.119754][ T26] audit: type=1326 audit(1726398228.890:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13308 comm="syz.0.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 804.221769][ T26] audit: type=1326 audit(1726398228.890:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13308 comm="syz.0.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 804.362085][ T26] audit: type=1326 audit(1726398228.890:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13308 comm="syz.0.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 804.400879][ T26] audit: type=1326 audit(1726398228.890:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13308 comm="syz.0.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 804.479383][ T26] audit: type=1326 audit(1726398228.890:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13308 comm="syz.0.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 804.561054][ T26] audit: type=1326 audit(1726398228.890:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13308 comm="syz.0.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 804.643796][ T26] audit: type=1326 audit(1726398228.890:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13308 comm="syz.0.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 804.755768][ T26] audit: type=1326 audit(1726398228.890:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13308 comm="syz.0.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 804.855898][ T26] audit: type=1326 audit(1726398228.890:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13308 comm="syz.0.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 804.856696][T13179] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 804.946259][ T26] audit: type=1326 audit(1726398228.890:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13308 comm="syz.0.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 805.033780][T13179] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 805.053104][T13179] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 805.184752][T13179] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 805.890144][T13179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.966960][ T7361] device hsr_slave_0 left promiscuous mode [ 805.986657][ T7361] device hsr_slave_1 left promiscuous mode [ 805.996141][ T7361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 806.013960][ T7361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.029958][ T7361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 806.043428][ T7361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 806.054968][ T7361] device macvlan2 left promiscuous mode [ 806.062987][ T7361] bridge0: port 3(macvlan2) entered disabled state [ 806.074715][ T7361] device bridge_slave_1 left promiscuous mode [ 806.085266][ T7361] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.097721][ T7361] device bridge_slave_0 left promiscuous mode [ 806.106212][ T7361] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.153165][ T7361] device veth1_macvtap left promiscuous mode [ 806.165963][ T7361] device veth0_macvtap left promiscuous mode [ 806.178821][ T7361] device veth1_vlan left promiscuous mode [ 806.193197][ T7361] device veth0_vlan left promiscuous mode [ 807.614620][T13338] loop4: detected capacity change from 0 to 512 [ 807.715491][T13338] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3020: bg 0: block 248: padding at end of block bitmap is not set [ 807.740261][T13338] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.3020: Failed to acquire dquot type 1 [ 807.758615][T13338] EXT4-fs (loop4): 1 truncate cleaned up [ 807.764543][T13338] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 807.777323][T13338] ext4 filesystem being mounted at /608/bus supports timestamps until 2038 (0x7fffffff) [ 807.797350][T13345] loop3: detected capacity change from 0 to 128 [ 807.816780][ T3978] EXT4-fs (loop4): unmounting filesystem. [ 807.987967][T13349] syz.3.3021: attempt to access beyond end of device [ 807.987967][T13349] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 808.243549][T13352] fuse: Bad value for 'fd' [ 808.976435][T13359] loop3: detected capacity change from 0 to 256 [ 809.049753][T13360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3024'. [ 809.355711][ T7361] team0 (unregistering): Port device team_slave_1 removed [ 809.455615][ T7361] team0 (unregistering): Port device team_slave_0 removed [ 809.656001][ T7361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 809.767786][ T7361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 810.300549][ T26] kauditd_printk_skb: 40 callbacks suppressed [ 810.300563][ T26] audit: type=1326 audit(1726398235.090:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.3.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4c77def9 code=0x7ffc0000 [ 810.336180][T13367] loop3: detected capacity change from 0 to 128 [ 810.357655][ T26] audit: type=1326 audit(1726398235.130:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.3.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7c4c77def9 code=0x7ffc0000 [ 810.380905][ T26] audit: type=1326 audit(1726398235.130:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.3.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7c4c77df33 code=0x7ffc0000 [ 810.403500][ T26] audit: type=1326 audit(1726398235.130:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.3.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7c4c77c9df code=0x7ffc0000 [ 810.426012][ T26] audit: type=1326 audit(1726398235.130:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.3.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7c4c77df87 code=0x7ffc0000 [ 810.450790][ T26] audit: type=1326 audit(1726398235.130:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.3.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c4c77c890 code=0x7ffc0000 [ 810.473494][ T26] audit: type=1326 audit(1726398235.130:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.3.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7c4c77dafb code=0x7ffc0000 [ 810.515108][ T26] audit: type=1326 audit(1726398235.140:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.3.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7c4c77cb8a code=0x7ffc0000 [ 810.545475][ T26] audit: type=1326 audit(1726398235.140:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.3.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7c4c77cb8a code=0x7ffc0000 [ 810.582891][ T26] audit: type=1326 audit(1726398235.140:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.3.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7c4c77c797 code=0x7ffc0000 [ 810.699202][ T7361] bond0 (unregistering): Released all slaves [ 810.838943][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 810.860582][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 810.900840][T13358] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3024'. [ 812.646720][T13360] infiniband sy: ib_query_port failed (-19) [ 812.652240][T13179] 8021q: adding VLAN 0 to HW filter on device team0 [ 812.659347][T13360] infiniband sy: Couldn't set up InfiniBand P_Key/GID cache [ 812.659390][T13360] siw: device registration error -19 [ 812.689852][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 812.702819][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 812.711646][ T3728] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.718884][ T3728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 812.794973][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 812.812376][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 812.826156][ T3728] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.833330][ T3728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.886487][T13179] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 812.917269][T13179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 812.986345][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 812.996376][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 813.030313][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 813.050632][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 813.090784][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 813.117340][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 813.145366][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 813.166838][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 813.205426][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 813.228831][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 813.267802][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 813.329468][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 813.439005][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 813.544381][T13410] fuse: Bad value for 'fd' [ 814.516324][T13419] loop3: detected capacity change from 0 to 128 [ 814.624801][T13424] syz.3.3045: attempt to access beyond end of device [ 814.624801][T13424] loop3: rw=2049, sector=145, nr_sectors = 536 limit=128 [ 814.767154][T13419] syz.3.3045: attempt to access beyond end of device [ 814.767154][T13419] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 814.779722][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 814.798752][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 814.812841][T13179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 814.814579][T13419] syz.3.3045: attempt to access beyond end of device [ 814.814579][T13419] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 814.861005][T13419] syz.3.3045: attempt to access beyond end of device [ 814.861005][T13419] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 814.863119][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 814.910295][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 814.912636][T13419] syz.3.3045: attempt to access beyond end of device [ 814.912636][T13419] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 814.953170][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 814.971469][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 814.975752][T13419] syz.3.3045: attempt to access beyond end of device [ 814.975752][T13419] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 815.005491][T13179] device veth0_vlan entered promiscuous mode [ 815.013082][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 815.029743][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 815.042842][T13179] device veth1_vlan entered promiscuous mode [ 815.114433][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 815.134484][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 815.154652][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 815.180396][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 815.196194][T13179] device veth0_macvtap entered promiscuous mode [ 815.235330][T13179] device veth1_macvtap entered promiscuous mode [ 816.463039][T13179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 816.508611][T13179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.538683][T13179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 816.700866][T13450] fuse: Bad value for 'fd' [ 817.216508][T13452] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 817.310973][T13179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.454680][T13179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.479201][ T3862] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 817.497852][ T3862] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 817.527938][ T3862] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 817.536791][ T3862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 817.641099][T13179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.674548][T13179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.709716][T13179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.771129][T13179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.836630][T13179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.868938][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 817.910099][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 817.924504][T13460] loop3: detected capacity change from 0 to 128 [ 817.952234][T13179] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.961547][T13179] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.971117][T13179] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.980154][T13179] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.110762][T13469] syz.3.3060: attempt to access beyond end of device [ 818.110762][T13469] loop3: rw=2049, sector=145, nr_sectors = 200 limit=128 [ 818.133573][ T3862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.411819][T13459] syz.3.3060: attempt to access beyond end of device [ 818.411819][T13459] loop3: rw=524288, sector=145, nr_sectors = 120 limit=128 [ 818.453819][ T3862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.691268][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 818.841742][T13459] syz.3.3060: attempt to access beyond end of device [ 818.841742][T13459] loop3: rw=524288, sector=273, nr_sectors = 72 limit=128 [ 818.922740][ T3703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.951052][ T3703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.960330][T13460] syz.3.3060: attempt to access beyond end of device [ 818.960330][T13460] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 819.013931][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 819.188936][T13488] loop1: detected capacity change from 0 to 2048 [ 819.218024][T13488] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 819.235957][T13488] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 819.327113][T13179] EXT4-fs (loop1): unmounting filesystem. [ 819.546033][T13500] fuse: Bad value for 'fd' [ 819.921698][T13504] loop1: detected capacity change from 0 to 2048 [ 820.062229][T13504] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 820.140345][T13179] EXT4-fs (loop1): unmounting filesystem. [ 820.509094][T13521] overlayfs: missing 'lowerdir' [ 821.365781][T13529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3080'. [ 821.533336][ T3728] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.652972][ T3728] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.727370][ T3642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 822.923397][ T3642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 822.937218][ T3642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 822.948116][ T3642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 823.429734][ T3642] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 823.437362][ T3642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 823.464365][T13552] fuse: Bad value for 'fd' [ 823.473074][ T3728] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.617387][ T3728] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.986198][T13568] overlayfs: missing 'lowerdir' [ 824.724691][T13571] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3093'. [ 824.870604][T13548] chnl_net:caif_netlink_parms(): no params data found [ 825.492393][ T3636] Bluetooth: hci4: command tx timeout [ 826.028797][T13548] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.047361][T13548] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.088500][T13548] device bridge_slave_0 entered promiscuous mode [ 826.180117][T13548] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.187279][T13548] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.191258][T13610] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3107'. [ 826.217642][T13548] device bridge_slave_1 entered promiscuous mode [ 826.295096][T13548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 826.343309][T13548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.518551][T13618] overlayfs: missing 'lowerdir' [ 827.162572][T13548] team0: Port device team_slave_0 added [ 827.208963][T13548] team0: Port device team_slave_1 added [ 827.239452][T11813] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 827.378702][T13548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.399818][T13548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.479584][T13548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.503153][T13548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.510212][T13548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.536342][T13548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.626481][T13548] device hsr_slave_0 entered promiscuous mode [ 827.639263][ T3642] Bluetooth: hci4: command tx timeout [ 827.658481][T13548] device hsr_slave_1 entered promiscuous mode [ 827.794478][T13633] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 827.849431][T11813] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 827.936732][T11813] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 828.152213][T11813] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 828.236431][T11813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 828.435175][T11813] usb 1-1: SerialNumber: syz [ 828.744111][T11813] usb 1-1: 0:2 : does not exist [ 828.818843][T11813] usb 1-1: unit 255 not found! [ 828.890043][T11813] usb 1-1: unit 19 not found! [ 829.346656][T11813] usb 1-1: USB disconnect, device number 20 [ 829.779305][ T3636] Bluetooth: hci4: command tx timeout [ 829.859310][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 829.859326][ T26] audit: type=1326 audit(1726398254.640:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13664 comm="syz.0.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 829.904241][T13665] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3124'. [ 829.940238][T13661] overlayfs: missing 'lowerdir' [ 829.994192][ T26] audit: type=1326 audit(1726398254.640:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13664 comm="syz.0.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 830.062306][ T26] audit: type=1326 audit(1726398254.680:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13664 comm="syz.0.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 830.096958][T13665] netlink: 'syz.3.3124': attribute type 10 has an invalid length. [ 830.134847][ T26] audit: type=1326 audit(1726398254.680:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13664 comm="syz.0.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 830.202308][T13665] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 830.344199][T13672] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 830.541935][ T26] audit: type=1326 audit(1726398254.680:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13664 comm="syz.0.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 830.928464][ T3728] device hsr_slave_0 left promiscuous mode [ 830.948280][ T26] audit: type=1326 audit(1726398254.690:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13664 comm="syz.0.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 830.971144][ T3728] device hsr_slave_1 left promiscuous mode [ 831.004856][ T3728] bridge0: port 3(team0) entered disabled state [ 831.065107][ T3728] device bridge_slave_1 left promiscuous mode [ 831.097302][ T26] audit: type=1326 audit(1726398254.690:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13664 comm="syz.0.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 831.119263][ T3728] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.124909][ T26] audit: type=1326 audit(1726398254.690:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13664 comm="syz.0.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 831.149332][ T26] audit: type=1326 audit(1726398254.690:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13664 comm="syz.0.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 831.183628][ T3728] device bridge_slave_0 left promiscuous mode [ 831.190462][ T26] audit: type=1326 audit(1726398254.690:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13664 comm="syz.0.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 831.371706][ T3728] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.415549][ T3728] device geneve0 left promiscuous mode [ 831.423924][ T3728] device veth1_macvtap left promiscuous mode [ 832.329268][ T3636] Bluetooth: hci4: command tx timeout [ 832.428181][ T3728] device veth0_macvtap left promiscuous mode [ 832.455254][ T3728] device veth1_vlan left promiscuous mode [ 832.475090][ T3728] device veth0_vlan left promiscuous mode [ 832.519226][T13688] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3132'. [ 832.769527][ T14] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 833.898859][ T3728] bond1 (unregistering): Released all slaves [ 833.972349][ T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 833.983001][ T14] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 834.074765][ T14] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 834.083928][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 834.092264][ T14] usb 4-1: SerialNumber: syz [ 834.136619][ T14] usb 4-1: can't set config #1, error -71 [ 834.145284][ T14] usb 4-1: USB disconnect, device number 10 [ 834.355568][ T3728] device team_slave_1 left promiscuous mode [ 834.365363][ T3728] team0 (unregistering): Port device team_slave_1 removed [ 834.413649][ T3728] device team_slave_0 left promiscuous mode [ 834.421796][ T3728] team0 (unregistering): Port device team_slave_0 removed [ 834.468098][ T3728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 834.513465][ T3728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 834.984790][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 834.984810][ T26] audit: type=1326 audit(1726398259.760:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13701 comm="syz.0.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 835.015247][ T26] audit: type=1326 audit(1726398259.760:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13701 comm="syz.0.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 835.111477][ T3728] bond0 (unregistering): Released all slaves [ 835.327402][T13548] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 835.673945][T13548] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 835.875217][T13548] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 836.073069][T13548] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 836.405998][T13722] overlayfs: missing 'lowerdir' [ 837.056791][T13716] xt_CT: No such helper "netbios-ns" [ 837.411108][T13548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 837.460055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 837.473274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 837.508422][T13548] 8021q: adding VLAN 0 to HW filter on device team0 [ 837.522489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 837.536025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 837.545537][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.552701][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 837.576425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 837.588130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 837.597024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 837.605577][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.612708][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 837.627923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 837.664630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 837.708112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 837.736348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 837.760765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 837.777013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 837.787153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 837.796082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 837.805339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 837.817046][T13741] loop1: detected capacity change from 0 to 512 [ 837.826063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 837.835350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 837.846867][T13741] EXT4-fs (loop1): orphan cleanup on readonly fs [ 837.865061][T13741] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3152: bg 0: block 248: padding at end of block bitmap is not set [ 837.883590][T13741] Quota error (device loop1): write_blk: dquota write failed [ 837.892276][T13741] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 837.902480][T13741] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.3152: Failed to acquire dquot type 1 [ 837.911760][T13548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 837.914978][T13741] EXT4-fs (loop1): 1 truncate cleaned up [ 837.927084][T13741] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 838.010609][T13179] EXT4-fs (loop1): unmounting filesystem. [ 838.048996][ T3727] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 838.153017][T13749] xt_CT: No such helper "netbios-ns" [ 838.356925][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 838.382925][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 838.419429][ T3727] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 838.439995][ T3727] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 838.449983][T13766] loop1: detected capacity change from 0 to 256 [ 838.565438][T13548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.520334][ T3727] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 839.529614][ T3727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 839.537639][ T3727] usb 3-1: SerialNumber: syz [ 839.845615][ T3727] usb 3-1: 0:2 : does not exist [ 839.853448][ T3727] usb 3-1: unit 255 not found! [ 839.858256][ T3727] usb 3-1: unit 19 not found! [ 839.912644][ T3727] usb 3-1: USB disconnect, device number 9 [ 840.065607][T13788] xt_CT: No such helper "netbios-ns" [ 840.195438][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 840.205688][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 840.235310][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 840.248665][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 840.267770][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 840.278306][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 840.293506][T13548] device veth0_vlan entered promiscuous mode [ 840.308046][T13548] device veth1_vlan entered promiscuous mode [ 840.386315][T13548] device veth0_macvtap entered promiscuous mode [ 840.445047][T13548] device veth1_macvtap entered promiscuous mode [ 840.492235][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 840.506288][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 842.080325][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 842.132275][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 842.179944][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 842.218746][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 842.304409][ T26] audit: type=1326 audit(1726398267.090:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13818 comm="syz.3.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4c77def9 code=0x7ffc0000 [ 842.348500][T13821] loop1: detected capacity change from 0 to 512 [ 842.480470][T13548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.502615][T13548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.533372][T13548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.548454][T13548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.554037][T13821] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 842.579897][ T26] audit: type=1326 audit(1726398267.130:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13818 comm="syz.3.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4c77def9 code=0x7ffc0000 [ 842.605135][T13548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.632701][T13821] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.3176: invalid indirect mapped block 4 (level 0) [ 842.753277][T13548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.870678][T13821] EXT4-fs (loop1): Remounting filesystem read-only [ 842.907882][T13548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 842.922970][ T26] audit: type=1326 audit(1726398267.130:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13818 comm="syz.3.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f7c4c77def9 code=0x7ffc0000 [ 842.992157][T13821] EXT4-fs (loop1): 1 orphan inode deleted [ 843.077450][T13821] EXT4-fs (loop1): 1 truncate cleaned up [ 843.120964][T13548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.159998][T13821] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 843.244489][ T26] audit: type=1326 audit(1726398267.130:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13818 comm="syz.3.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4c77def9 code=0x7ffc0000 [ 843.267454][T13548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.295972][T13548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.322124][T13548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.360236][T13548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.360571][T13817] EXT4-fs error (device loop1): empty_inline_dir:1862: inode #12: block 7: comm syz.1.3176: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 843.409480][T13548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.428444][T13548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 843.441590][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 843.456078][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 843.467308][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 843.489608][T13817] EXT4-fs (loop1): Remounting filesystem read-only [ 843.527077][T13817] EXT4-fs warning (device loop1): empty_inline_dir:1869: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 843.550399][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 843.608476][T13817] sctp: [Deprecated]: syz.1.3176 (pid 13817) Use of int in max_burst socket option. [ 843.608476][T13817] Use struct sctp_assoc_value instead [ 843.656778][T13548] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.666710][T13548] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.675653][T13548] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.685292][T13548] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.687620][T13817] EXT4-fs error (device loop1): ext4_lookup:1856: inode #15: comm syz.1.3176: iget: bad extra_isize 46 (inode size 256) [ 843.781863][T13842] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3184'. [ 844.500215][T13179] EXT4-fs (loop1): unmounting filesystem. [ 844.549410][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.557626][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.623253][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 844.666471][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.722450][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.735755][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 847.153210][T13861] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 847.344496][ T3636] Bluetooth: hci3: command 0x0406 tx timeout [ 847.395749][ T26] audit: type=1326 audit(1726398272.180:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13862 comm="syz.0.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 847.443016][ T26] audit: type=1326 audit(1726398272.180:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13862 comm="syz.0.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 847.468775][ T26] audit: type=1326 audit(1726398272.180:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13862 comm="syz.0.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 847.494683][ T26] audit: type=1326 audit(1726398272.180:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13862 comm="syz.0.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 847.524899][ T26] audit: type=1326 audit(1726398272.180:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13862 comm="syz.0.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 847.547695][ T26] audit: type=1326 audit(1726398272.190:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13862 comm="syz.0.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 847.628385][ T26] audit: type=1326 audit(1726398272.190:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13862 comm="syz.0.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 847.693992][ T26] audit: type=1326 audit(1726398272.190:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13862 comm="syz.0.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 847.725275][ T26] audit: type=1326 audit(1726398272.190:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13862 comm="syz.0.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 847.751769][ T26] audit: type=1326 audit(1726398272.190:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13862 comm="syz.0.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 847.917338][T13892] device ip6_vti0 entered promiscuous mode [ 847.933822][T13892] device vlan2 entered promiscuous mode [ 847.943439][T13892] device ip6_vti0 left promiscuous mode [ 848.012535][T13886] xt_CT: No such helper "netbios-ns" [ 848.964339][T13902] loop1: detected capacity change from 0 to 128 [ 848.971108][T13905] loop3: detected capacity change from 0 to 2048 [ 848.994653][T13909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 848.994952][T13906] loop4: detected capacity change from 0 to 512 [ 849.020440][T13909] device batadv_slave_0 entered promiscuous mode [ 849.060300][T13905] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 849.061179][T13906] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.3209: inode #1: comm syz.4.3209: iget: illegal inode # [ 849.134896][T12299] EXT4-fs (loop3): unmounting filesystem. [ 849.141831][T13906] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.3209: error while reading EA inode 1 err=-117 [ 849.179148][T13906] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.3209: inode #1: comm syz.4.3209: iget: illegal inode # [ 849.249190][T13906] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.3209: error while reading EA inode 1 err=-117 [ 849.284720][T13906] EXT4-fs (loop4): 1 orphan inode deleted [ 849.304290][T13906] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 849.331081][T13906] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3209: invalid indirect mapped block 234881024 (level 0) [ 849.394717][T13548] EXT4-fs (loop4): unmounting filesystem. [ 850.505733][T13954] loop3: detected capacity change from 0 to 2048 [ 850.632112][T13954] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 850.685119][T12299] EXT4-fs (loop3): unmounting filesystem. [ 850.722123][T13963] loop4: detected capacity change from 0 to 8192 [ 850.734118][T13964] loop1: detected capacity change from 0 to 512 [ 850.761553][T13963] loop4: p1 p2 p3 p4 [ 850.765712][T13963] loop4: p1 start 17760256 is beyond EOD, truncated [ 850.814664][T13963] loop4: p2 size 64053 extends beyond EOD, truncated [ 850.848105][T13963] loop4: p3 start 458496 is beyond EOD, truncated [ 850.854783][T13963] loop4: p4 size 50331648 extends beyond EOD, truncated [ 850.948381][T13964] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 850.994713][T13964] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038 (0x7fffffff) [ 851.015805][T13982] loop3: detected capacity change from 0 to 1024 [ 851.171677][T13983] random: crng reseeded on system resumption [ 851.904091][T13964] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 851.946476][T13964] Cannot find add_set index 0 as target [ 852.017646][T13982] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 852.137011][T12299] EXT4-fs (loop3): unmounting filesystem. [ 854.350293][T14010] loop3: detected capacity change from 0 to 2048 [ 854.415048][T14010] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 854.561915][T12299] EXT4-fs (loop3): unmounting filesystem. [ 855.657746][T13179] EXT4-fs (loop1): unmounting filesystem. [ 855.771141][T14034] loop4: detected capacity change from 0 to 1024 [ 855.822657][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 855.822672][ T26] audit: type=1326 audit(1726398280.610:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 855.862416][ T26] audit: type=1326 audit(1726398280.650:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 855.919344][T14034] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 855.928633][ T26] audit: type=1326 audit(1726398280.650:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f45c597df33 code=0x7ffc0000 [ 855.969381][T14034] EXT4-fs (loop4): too many log groups per flexible block group [ 855.977230][T14034] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 855.990980][T14034] EXT4-fs (loop4): mount failed [ 856.048900][ T26] audit: type=1326 audit(1726398280.650:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f45c597df33 code=0x7ffc0000 [ 856.129129][T14047] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 856.242483][ T26] audit: type=1326 audit(1726398280.650:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 856.695957][T14049] device ip6_vti0 entered promiscuous mode [ 856.736594][ T26] audit: type=1326 audit(1726398280.650:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 856.760061][T14049] device vlan0 entered promiscuous mode [ 856.851412][ T26] audit: type=1326 audit(1726398280.650:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 856.863140][T14045] xt_CT: No such helper "netbios-ns" [ 856.873685][ T26] audit: type=1326 audit(1726398280.650:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 856.915636][T14049] device ip6_vti0 left promiscuous mode [ 856.919818][T14054] syz.2.3259[14054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 856.921319][T14054] syz.2.3259[14054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 856.939544][ T26] audit: type=1326 audit(1726398280.650:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 856.998337][T14056] loop1: detected capacity change from 0 to 2048 [ 857.004986][ T26] audit: type=1326 audit(1726398280.650:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f45c597def9 code=0x7ffc0000 [ 857.096217][T14056] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 857.258416][T13179] EXT4-fs (loop1): unmounting filesystem. [ 857.979124][T14087] loop4: detected capacity change from 0 to 1024 [ 857.994654][T14087] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 858.161874][T14087] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 858.331677][T14103] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 859.771269][T14115] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 859.780148][T14115] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 859.868946][T14122] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3282'. [ 860.623232][T14122] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3282'. [ 860.875293][T13548] EXT4-fs (loop4): unmounting filesystem. [ 861.227858][T14149] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 861.722934][T14145] xt_CT: No such helper "netbios-ns" [ 861.764077][T14147] device ip_vti0 entered promiscuous mode [ 861.779300][T14147] device vlan2 entered promiscuous mode [ 861.821466][T14147] device ip_vti0 left promiscuous mode [ 861.997968][ T3636] Bluetooth: hci6: command 0x0406 tx timeout [ 862.183513][T14161] fuse: Bad value for 'fd' [ 865.122052][T14197] tipc: Enabling of bearer rejected, failed to enable media [ 865.522726][T14201] fuse: Bad value for 'fd' [ 866.451034][T14219] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 866.719169][T14210] xt_CT: No such helper "netbios-ns" [ 867.128930][T14240] device ip_vti0 entered promiscuous mode [ 867.145268][T14240] device vlan0 entered promiscuous mode [ 867.152709][T14233] xt_CT: No such helper "netbios-ns" [ 867.161620][T14240] device ip_vti0 left promiscuous mode [ 868.796676][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 868.796691][ T26] audit: type=1326 audit(1726398293.580:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14239 comm="syz.3.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4c77def9 code=0x7ffc0000 [ 868.986239][ T26] audit: type=1326 audit(1726398293.630:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14239 comm="syz.3.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4c77def9 code=0x7ffc0000 [ 869.008950][ T26] audit: type=1326 audit(1726398293.630:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14239 comm="syz.3.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f7c4c77def9 code=0x7ffc0000 [ 869.049175][ T26] audit: type=1326 audit(1726398293.630:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14239 comm="syz.3.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4c77def9 code=0x7ffc0000 [ 869.231386][ T26] audit: type=1326 audit(1726398293.630:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14239 comm="syz.3.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4c77def9 code=0x7ffc0000 [ 871.503542][T14282] loop1: detected capacity change from 0 to 2048 [ 871.596449][T14282] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 871.737916][ T3884] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 871.774519][ T3884] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 28 [ 871.809296][ T3884] EXT4-fs (loop1): This should not happen!! Data will be lost [ 871.809296][ T3884] [ 871.818985][ T3884] EXT4-fs (loop1): Total free blocks count 0 [ 871.830192][ T3884] EXT4-fs (loop1): Free/Dirty block details [ 871.836167][ T3884] EXT4-fs (loop1): free_blocks=2415919104 [ 871.842161][ T3884] EXT4-fs (loop1): dirty_blocks=16 [ 871.847283][ T3884] EXT4-fs (loop1): Block reservation details [ 871.853463][ T3884] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 871.863416][T13179] EXT4-fs (loop1): unmounting filesystem. [ 873.927566][ T26] audit: type=1326 audit(1726398298.710:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14315 comm="syz.4.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f66d7def9 code=0x7ffc0000 [ 873.989122][ T26] audit: type=1326 audit(1726398298.750:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14315 comm="syz.4.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0f66d7def9 code=0x7ffc0000 [ 874.031990][ T26] audit: type=1326 audit(1726398298.750:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14315 comm="syz.4.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f66d7def9 code=0x7ffc0000 [ 874.055377][ T26] audit: type=1326 audit(1726398298.750:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14315 comm="syz.4.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f66d7def9 code=0x7ffc0000 [ 874.079079][ T26] audit: type=1326 audit(1726398298.750:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14315 comm="syz.4.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f66d7def9 code=0x7ffc0000 [ 874.325446][ T26] audit: type=1326 audit(1726398298.750:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14315 comm="syz.4.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f66d7def9 code=0x7ffc0000 [ 876.644440][T14332] device tunl0 entered promiscuous mode [ 876.680251][T14332] netlink: 'syz.2.3346': attribute type 1 has an invalid length. [ 876.694916][T14332] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3346'. [ 876.749114][ T26] audit: type=1326 audit(1726398298.750:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14315 comm="syz.4.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f66d7def9 code=0x7ffc0000 [ 876.839801][ T26] audit: type=1326 audit(1726398298.750:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14315 comm="syz.4.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f66d7def9 code=0x7ffc0000 [ 876.929171][ T26] audit: type=1326 audit(1726398298.750:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14315 comm="syz.4.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f66d7def9 code=0x7ffc0000 [ 876.931586][T14337] Falling back ldisc for ttyS3. [ 877.023612][ T26] audit: type=1326 audit(1726398298.750:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14315 comm="syz.4.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f66d7def9 code=0x7ffc0000 [ 878.138920][T14368] loop4: detected capacity change from 0 to 256 [ 879.487880][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 879.487896][ T26] audit: type=1804 audit(1726398304.270:1227): pid=14375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3357" name="/newroot/28/file0/bus" dev="hugetlbfs" ino=73253 res=1 errno=0 [ 879.572776][ T26] audit: type=1804 audit(1726398304.290:1228): pid=14375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3357" name="/newroot/28/file0/bus" dev="hugetlbfs" ino=73253 res=1 errno=0 [ 879.615229][T14388] device team_slave_0 entered promiscuous mode [ 879.623493][T14388] device team_slave_1 entered promiscuous mode [ 879.649196][ T26] audit: type=1804 audit(1726398304.360:1229): pid=14375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3357" name="/newroot/28/file0/bus" dev="hugetlbfs" ino=73253 res=1 errno=0 [ 879.671847][T14388] device macvtap1 entered promiscuous mode [ 879.677755][T14388] device team0 entered promiscuous mode [ 879.700588][T14388] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 879.721245][T14388] team0: Device macvtap1 is already an upper device of the team interface [ 879.742808][T14388] device team0 left promiscuous mode [ 879.760060][T14388] device team_slave_0 left promiscuous mode [ 879.766085][T14388] device team_slave_1 left promiscuous mode [ 880.073570][T14393] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.314135][T14393] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.130537][ T14] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 881.221879][T14393] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.347060][T14393] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.382254][T14409] device ip_vti0 entered promiscuous mode [ 881.388080][T14409] device vlan2 entered promiscuous mode [ 881.411517][T14409] device ip_vti0 left promiscuous mode [ 881.493659][ T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 881.543092][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 881.547432][T14393] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.594707][T14393] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.615910][T14393] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.631168][T14393] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.644187][ T14] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 881.663645][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 881.684825][ T14] usb 2-1: SerialNumber: syz [ 881.981493][ T14] usb 2-1: 0:2 : does not exist [ 881.986437][ T14] usb 2-1: unit 5 not found! [ 882.039364][ T14] usb 2-1: USB disconnect, device number 9 [ 882.080407][T14436] syz.3.3383[14436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 882.080514][T14436] syz.3.3383[14436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 882.094641][T14438] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3385'. [ 882.120627][T14436] bridge0: port 3(vlan2) entered blocking state [ 882.136883][T14435] loop4: detected capacity change from 0 to 1024 [ 882.143522][T14436] bridge0: port 3(vlan2) entered disabled state [ 882.156404][T14435] EXT4-fs: Ignoring removed nobh option [ 882.167039][T14435] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 882.225264][T14435] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #2: comm +}[@: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 882.247364][T14435] EXT4-fs (loop4): get root inode failed [ 882.253222][T14435] EXT4-fs (loop4): mount failed [ 882.350976][T14445] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.411449][T14445] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.489039][T14445] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.565681][T14445] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.723176][T14458] loop4: detected capacity change from 0 to 128 [ 883.154403][T14470] netlink: 'syz.2.3397': attribute type 2 has an invalid length. [ 883.661785][T14474] fuse: Invalid rootmode [ 885.018961][ T3642] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 885.036029][ T3642] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 885.046383][ T3642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 885.054438][ T3642] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 885.063464][ T3642] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 885.071060][ T3642] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 885.195946][ T26] audit: type=1326 audit(1726398309.980:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14494 comm="syz.1.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9cb7def9 code=0x7ffc0000 [ 885.279137][ T26] audit: type=1326 audit(1726398309.980:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14494 comm="syz.1.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9cb7def9 code=0x7ffc0000 [ 885.369125][ T26] audit: type=1326 audit(1726398309.980:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14494 comm="syz.1.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b9cb7def9 code=0x7ffc0000 [ 885.541405][T14502] hub 9-0:1.0: USB hub found [ 885.547059][T14502] hub 9-0:1.0: 8 ports detected [ 885.731052][T14503] loop1: detected capacity change from 0 to 512 [ 885.851792][ T26] audit: type=1326 audit(1726398309.980:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14494 comm="syz.1.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9cb7def9 code=0x7ffc0000 [ 885.945102][T14503] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 886.001481][T14503] EXT4-fs (loop1): orphan cleanup on readonly fs [ 886.090943][T14503] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 886.136769][ T26] audit: type=1326 audit(1726398309.980:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14494 comm="syz.1.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9cb7def9 code=0x7ffc0000 [ 886.197334][T14503] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 886.267336][T14503] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.3409: Failed to acquire dquot type 1 [ 886.273789][ T26] audit: type=1326 audit(1726398309.980:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14494 comm="syz.1.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b9cb7def9 code=0x7ffc0000 [ 886.285746][T14488] chnl_net:caif_netlink_parms(): no params data found [ 886.309507][ T26] audit: type=1326 audit(1726398309.980:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14494 comm="syz.1.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9cb7def9 code=0x7ffc0000 [ 886.347118][T14503] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3409: bg 0: block 40: padding at end of block bitmap is not set [ 886.375218][T14503] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 886.385328][T14503] EXT4-fs (loop1): 1 truncate cleaned up [ 886.396425][ T26] audit: type=1326 audit(1726398309.980:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14494 comm="syz.1.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9cb7def9 code=0x7ffc0000 [ 886.427671][T14503] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 886.507255][T14507] netlink: 'syz.2.3410': attribute type 4 has an invalid length. [ 886.529259][T14508] netlink: 'syz.2.3410': attribute type 4 has an invalid length. [ 886.764665][T14488] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.799231][T14488] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.807488][T14488] device bridge_slave_0 entered promiscuous mode [ 886.918863][T13179] EXT4-fs (loop1): unmounting filesystem. [ 886.993702][T14488] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.034370][T14488] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.190727][ T3642] Bluetooth: hci5: command tx timeout [ 887.235454][T14488] device bridge_slave_1 entered promiscuous mode [ 887.747754][T14488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 887.781198][T14488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 887.863843][T14526] device ip_vti0 entered promiscuous mode [ 887.872788][T14526] device vlan2 entered promiscuous mode [ 887.881033][T14526] device ip_vti0 left promiscuous mode [ 887.902307][T14528] loop4: detected capacity change from 0 to 164 [ 887.919629][T14488] team0: Port device team_slave_0 added [ 887.928911][T14488] team0: Port device team_slave_1 added [ 887.938137][T14528] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 887.983593][T14488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.993765][T14488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.039237][T14488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 888.082318][T14488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.096540][T14488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.128303][T14488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 888.174706][T14488] device hsr_slave_0 entered promiscuous mode [ 888.189312][T14488] device hsr_slave_1 entered promiscuous mode [ 888.196074][T14488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 888.203978][T14488] Cannot create hsr debugfs directory [ 888.454229][T14488] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.647250][T14488] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.752182][T14488] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.914512][T14488] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.239242][ T3636] Bluetooth: hci5: command tx timeout [ 889.690783][T14562] device ip_vti0 entered promiscuous mode [ 889.730286][T14562] device vlan2 entered promiscuous mode [ 889.767160][T14562] device ip_vti0 left promiscuous mode [ 889.787328][T14559] xt_CT: No such helper "netbios-ns" [ 889.854600][T14445] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.889594][T14445] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.935768][T14445] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.983847][T14445] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.007075][T14567] loop1: detected capacity change from 0 to 164 [ 890.035926][T14567] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 890.043273][T14488] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 890.073218][T14488] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 890.108595][T14488] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 890.125948][T14488] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 890.151588][T14572] loop4: detected capacity change from 0 to 256 [ 890.235190][T14575] loop1: detected capacity change from 0 to 128 [ 890.256359][T14488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.276028][T14575] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 890.284740][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 890.299878][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 890.307420][T14575] ext4 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 890.344067][T14488] 8021q: adding VLAN 0 to HW filter on device team0 [ 890.365687][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 890.380532][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 890.414810][ T4563] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.421986][ T4563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 890.433264][T13179] EXT4-fs (loop1): unmounting filesystem. [ 890.439888][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 890.450577][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 890.479555][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 890.509732][ T3885] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.509794][ T3885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 890.520123][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 890.522670][T14583] netlink: 'syz.3.3434': attribute type 4 has an invalid length. [ 890.580303][T14583] netlink: 'syz.3.3434': attribute type 4 has an invalid length. [ 890.584809][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 890.585653][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 890.881312][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 890.890188][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 890.900892][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 890.909759][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 890.918452][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 890.934643][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 891.345272][ T26] kauditd_printk_skb: 64 callbacks suppressed [ 891.345305][ T26] audit: type=1804 audit(1726398316.130:1302): pid=14591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3431" name="/newroot/52/file0/bus" dev="hugetlbfs" ino=74010 res=1 errno=0 [ 891.595105][ T26] audit: type=1804 audit(1726398316.360:1303): pid=14591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3431" name="/newroot/52/file0/bus" dev="hugetlbfs" ino=74010 res=1 errno=0 [ 891.720495][ T3636] Bluetooth: hci5: command tx timeout [ 891.723247][T14587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3436'. [ 891.769607][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 891.790004][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 891.844868][T14488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 891.850775][T14594] loop3: detected capacity change from 0 to 128 [ 891.976389][T14599] device ip_vti0 entered promiscuous mode [ 891.994409][T14600] bio_check_eod: 3 callbacks suppressed [ 891.994427][T14600] syz.3.3437: attempt to access beyond end of device [ 891.994427][T14600] loop3: rw=2049, sector=145, nr_sectors = 616 limit=128 [ 892.005908][T14599] device vlan2 entered promiscuous mode [ 892.064140][T14597] xt_CT: No such helper "netbios-ns" [ 892.078097][T14599] device ip_vti0 left promiscuous mode [ 892.267051][T14609] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.308196][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 892.317035][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 892.334185][T14609] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.358798][T14488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 892.387432][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 892.400814][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 892.414978][T14609] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.436952][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 892.446281][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 892.463965][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 892.480546][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 892.491524][T14488] device veth0_vlan entered promiscuous mode [ 892.500341][T14609] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.526288][T14488] device veth1_vlan entered promiscuous mode [ 892.557302][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 892.567625][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 892.582477][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 892.595650][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 892.609088][T14488] device veth0_macvtap entered promiscuous mode [ 892.625727][T14488] device veth1_macvtap entered promiscuous mode [ 892.656601][T14488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 892.674431][T14488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.680030][T14614] loop4: detected capacity change from 0 to 2048 [ 892.686657][T14488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 892.704406][T14488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.714460][T14488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 892.725294][T14488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.737400][T14488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 892.737992][T14614] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 892.745682][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 892.764010][T14614] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038 (0x7fffffff) [ 892.776284][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 892.784775][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 892.794990][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 892.816154][T14488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.827478][T14488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.837489][T14488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.849770][T14488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.859767][T14488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.871156][T14488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.881144][T14488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.892188][T14488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.904485][T14488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 892.914260][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 892.932665][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 892.945402][T14488] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.946803][T13548] EXT4-fs (loop4): unmounting filesystem. [ 892.954252][T14488] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.954280][T14488] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.954306][T14488] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.987623][ T7] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 893.083029][T14618] loop4: detected capacity change from 0 to 512 [ 893.101273][ T4426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.115128][ T4426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.127177][T14618] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 893.142204][T14618] EXT4-fs (loop4): orphan cleanup on readonly fs [ 893.146011][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 893.154069][T14618] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 893.165988][T14618] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 893.176183][ T3699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.184588][T14618] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.3442: Failed to acquire dquot type 1 [ 893.203477][ T3699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.206236][T14618] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3442: bg 0: block 40: padding at end of block bitmap is not set [ 893.218333][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 893.251738][T14618] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 893.279378][ T26] audit: type=1326 audit(1726398318.060:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14624 comm="syz.0.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d5d7def9 code=0x7ffc0000 [ 893.309651][T14618] EXT4-fs (loop4): 1 truncate cleaned up [ 893.315500][T14618] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 893.329118][ T26] audit: type=1326 audit(1726398318.100:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14624 comm="syz.0.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd9d5d7def9 code=0x7ffc0000 [ 893.389290][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 893.411370][ T26] audit: type=1326 audit(1726398318.100:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14624 comm="syz.0.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d5d7def9 code=0x7ffc0000 [ 893.427050][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 893.480650][ T26] audit: type=1326 audit(1726398318.100:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14624 comm="syz.0.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd9d5d7def9 code=0x7ffc0000 [ 893.532662][ T7] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 893.549185][ T26] audit: type=1326 audit(1726398318.100:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14624 comm="syz.0.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d5d7def9 code=0x7ffc0000 [ 893.576779][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 893.598777][ T7] usb 2-1: SerialNumber: syz [ 893.644791][ T26] audit: type=1326 audit(1726398318.100:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14624 comm="syz.0.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9d5d7def9 code=0x7ffc0000 [ 893.799829][ T3636] Bluetooth: hci5: command tx timeout [ 893.891539][ T7] usb 2-1: 0:2 : does not exist [ 893.897097][ T7] usb 2-1: unit 5 not found! [ 893.933541][ T7] usb 2-1: USB disconnect, device number 10 [ 894.009197][ T3642] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 894.022007][ T3642] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 894.032055][ T3642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 894.049022][ T3642] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 894.129488][T13548] EXT4-fs (loop4): unmounting filesystem. [ 894.154591][ T3642] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 894.163214][ T3642] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 894.583015][ T4426] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.026957][ T4426] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.041242][T14631] chnl_net:caif_netlink_parms(): no params data found [ 895.135395][T14631] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.142641][T14631] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.151999][T14631] device bridge_slave_0 entered promiscuous mode [ 895.169668][ T4426] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.186454][T14631] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.195684][T14631] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.204620][T14631] device bridge_slave_1 entered promiscuous mode [ 895.251199][ T4426] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.277656][T14631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 895.310428][T14631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 895.431667][T14631] team0: Port device team_slave_0 added [ 895.468557][T14657] loop1: detected capacity change from 0 to 128 [ 895.496388][T14631] team0: Port device team_slave_1 added [ 895.561783][T14631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 895.576071][T14658] syz.1.3455: attempt to access beyond end of device [ 895.576071][T14658] loop1: rw=2049, sector=145, nr_sectors = 776 limit=128 [ 895.577800][T14631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 895.640790][T14631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 895.645028][T14656] syz.1.3455: attempt to access beyond end of device [ 895.645028][T14656] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 895.693614][T14631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 895.704796][T14631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 895.731938][T14657] syz.1.3455: attempt to access beyond end of device [ 895.731938][T14657] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 895.739316][T14631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.762845][T14657] syz.1.3455: attempt to access beyond end of device [ 895.762845][T14657] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 895.777150][T14657] syz.1.3455: attempt to access beyond end of device [ 895.777150][T14657] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 895.790721][T14657] syz.1.3455: attempt to access beyond end of device [ 895.790721][T14657] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 895.874047][T14631] device hsr_slave_0 entered promiscuous mode [ 895.891866][T14631] device hsr_slave_1 entered promiscuous mode [ 895.898881][T14631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 895.905816][T14665] delete_channel: no stack [ 895.911843][T14631] Cannot create hsr debugfs directory [ 896.199494][ T3642] Bluetooth: hci1: command tx timeout [ 897.236499][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 897.236518][ T26] audit: type=1326 audit(1726398322.020:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14687 comm="syz.0.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9d5d74ea7 code=0x7ffc0000 [ 897.351296][ T26] audit: type=1326 audit(1726398322.020:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14687 comm="syz.0.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd9d5d19869 code=0x7ffc0000 [ 897.409152][ T26] audit: type=1326 audit(1726398322.020:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14687 comm="syz.0.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d5d7def9 code=0x7ffc0000 [ 897.446768][T14692] loop4: detected capacity change from 0 to 1024 [ 897.454747][ T26] audit: type=1326 audit(1726398322.020:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14687 comm="syz.0.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9d5d74ea7 code=0x7ffc0000 [ 897.480781][T14693] loop1: detected capacity change from 0 to 128 [ 897.488803][ T26] audit: type=1326 audit(1726398322.060:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14687 comm="syz.0.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd9d5d19869 code=0x7ffc0000 [ 897.519503][T14692] EXT4-fs error (device loop4): __ext4_fill_super:5399: inode #2: comm syz.4.3470: casefold flag without casefold feature [ 897.553456][T14692] EXT4-fs (loop4): get root inode failed [ 897.562257][T14692] EXT4-fs (loop4): mount failed [ 897.588050][ T26] audit: type=1326 audit(1726398322.060:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14687 comm="syz.0.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fd9d5d7def9 code=0x7ffc0000 [ 897.618137][T14693] syz.1.3468: attempt to access beyond end of device [ 897.618137][T14693] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 897.637524][ T26] audit: type=1326 audit(1726398322.060:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14687 comm="syz.0.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9d5d74ea7 code=0x7ffc0000 [ 897.693002][T14631] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 897.710286][T14631] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 897.714111][ T26] audit: type=1326 audit(1726398322.060:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14687 comm="syz.0.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd9d5d19869 code=0x7ffc0000 [ 897.748209][T14631] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 897.772190][ T26] audit: type=1326 audit(1726398322.070:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14687 comm="syz.0.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d5d7def9 code=0x7ffc0000 [ 897.995320][T14609] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.026544][T14609] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.072912][T14609] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.106160][T14631] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 898.194601][T14709] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3472'. [ 898.320597][ T3648] Bluetooth: hci1: command tx timeout [ 898.545169][T14609] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.068168][ T4426] device hsr_slave_0 left promiscuous mode [ 899.099737][ T4426] device hsr_slave_1 left promiscuous mode [ 899.118657][ T4426] device bridge_slave_1 left promiscuous mode [ 899.136320][ T4426] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.163379][ T4426] device bridge_slave_0 left promiscuous mode [ 899.171908][T14720] loop5: detected capacity change from 0 to 16385 [ 899.196061][ T4426] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.243731][T14720] loop5: detected capacity change from 16385 to 16321 [ 899.266858][ T4426] device geneve0 left promiscuous mode [ 899.298141][ T4426] device veth1_macvtap left promiscuous mode [ 899.314626][ T4426] device veth0_macvtap left promiscuous mode [ 899.341383][ T4426] device veth1_vlan left promiscuous mode [ 899.357567][ T4426] device veth0_vlan left promiscuous mode [ 900.153946][ T4426] team0 (unregistering): Port device team_slave_1 removed [ 900.203816][ T4426] team0 (unregistering): Port device team_slave_0 removed [ 900.251022][ T4426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 900.300858][ T4426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 900.359271][ T3642] Bluetooth: hci1: command tx timeout [ 900.575771][ T4426] bond0 (unregistering): Released all slaves [ 900.665237][T14736] device ip_vti0 entered promiscuous mode [ 900.679459][T14736] device vlan2 entered promiscuous mode [ 900.704749][T14736] device ip_vti0 left promiscuous mode [ 900.757342][T14738] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3483'. [ 900.841654][T14631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.881560][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 900.906367][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 900.936086][ T26] audit: type=1326 audit(1726398325.730:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14747 comm="syz.1.3488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4b9cb74ea7 code=0x7ffc0000 [ 900.943788][T14631] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.037739][T14192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 901.060079][T14192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 901.080113][T14192] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.087327][T14192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 901.109544][T14192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 901.245884][T14748] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.310058][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 901.323183][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 901.347307][ T3699] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.354556][ T3699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 901.369228][T14767] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3496'. [ 901.442896][T14748] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.474565][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 901.492279][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 901.514756][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 901.518603][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 901.525410][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 901.526695][T14769] netlink: 'syz.3.3497': attribute type 5 has an invalid length. [ 901.603036][T14748] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.633886][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 901.634729][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 901.635293][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 901.635747][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 901.636250][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 901.636704][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 901.641097][T14631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 901.766435][T14748] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.946864][T14748] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.978938][T14748] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.986804][T14748] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.017635][T14748] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.108518][T14791] loop4: detected capacity change from 0 to 128 [ 902.148733][T14793] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3507'. [ 902.168670][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 902.168820][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 902.183544][T14631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 902.269964][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 902.285404][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 902.299455][ T26] kauditd_printk_skb: 32 callbacks suppressed [ 902.299469][ T26] audit: type=1326 audit(1726398327.090:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.3.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4c77def9 code=0x7ffc0000 [ 902.301830][T14791] syz.4.3505: attempt to access beyond end of device [ 902.301830][T14791] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 902.320041][ T26] audit: type=1326 audit(1726398327.090:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.3.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4c77def9 code=0x7ffc0000 [ 902.361253][T14800] loop1: detected capacity change from 0 to 512 [ 902.384087][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 902.404127][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 902.411999][T14800] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 902.439304][ T3642] Bluetooth: hci1: command tx timeout [ 902.445890][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 902.458592][T14790] syz.4.3505: attempt to access beyond end of device [ 902.458592][T14790] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 902.478653][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 902.496223][T14800] EXT4-fs (loop1): 1 orphan inode deleted [ 902.526430][T14800] EXT4-fs (loop1): 1 truncate cleaned up [ 902.527355][T14631] device veth0_vlan entered promiscuous mode [ 902.553095][T14800] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 902.568039][ T26] audit: type=1326 audit(1726398327.090:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.3.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c4c77def9 code=0x7ffc0000 [ 902.578430][T14791] syz.4.3505: attempt to access beyond end of device [ 902.578430][T14791] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 902.591629][ T26] audit: type=1326 audit(1726398327.090:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.3.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4c77def9 code=0x7ffc0000 [ 902.629981][ T26] audit: type=1326 audit(1726398327.090:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.3.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4c77def9 code=0x7ffc0000 [ 902.652395][ C1] vkms_vblank_simulate: vblank timer overrun [ 902.664406][T14631] device veth1_vlan entered promiscuous mode [ 902.677749][T14791] syz.4.3505: attempt to access beyond end of device [ 902.677749][T14791] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 902.692124][T14791] syz.4.3505: attempt to access beyond end of device [ 902.692124][T14791] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 902.706717][ T26] audit: type=1326 audit(1726398327.170:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.3.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c4c77def9 code=0x7ffc0000 [ 902.731010][T14791] syz.4.3505: attempt to access beyond end of device [ 902.731010][T14791] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 902.751837][ T26] audit: type=1326 audit(1726398327.170:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.3.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4c77def9 code=0x7ffc0000 [ 902.787618][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 902.814142][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 902.815862][ T26] audit: type=1326 audit(1726398327.170:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.3.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4c77def9 code=0x7ffc0000 [ 902.836989][T14631] device veth0_macvtap entered promiscuous mode [ 902.896733][T14631] device veth1_macvtap entered promiscuous mode [ 902.899644][ T26] audit: type=1326 audit(1726398327.170:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.3.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c4c77def9 code=0x7ffc0000 [ 902.952094][T14631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 902.989163][T14631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.997612][ T26] audit: type=1326 audit(1726398327.170:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.3.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4c77def9 code=0x7ffc0000 [ 903.019184][T14631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 903.024075][T14815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3512'. [ 903.053929][T14631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.087872][T14631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 903.109223][T14631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.121681][T14631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 903.133188][T14631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.145215][T14631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 903.150594][T13179] EXT4-fs (loop1): unmounting filesystem. [ 903.158750][T14810] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3512'. [ 903.170134][T14821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3515'. [ 903.398817][T14815] infiniband sy: ib_query_port failed (-19) [ 903.400147][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 903.411852][T14815] infiniband sy: Couldn't set up InfiniBand P_Key/GID cache [ 903.421348][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 903.423114][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 903.423733][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 903.431671][T14631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 903.440293][T14815] siw: device registration error -19 [ 903.448769][T14631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.474850][T14631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 903.485751][T14631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.495719][T14631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 903.506228][T14631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.506248][T14631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 903.528371][T14631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.538446][T14631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 903.549209][T14631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.560854][T14631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 903.612018][T14822] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.632540][T14192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 903.644421][T14192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 903.657826][T14631] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.670123][T14631] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.679496][T14631] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.688371][T14631] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.735867][T14822] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.852516][T14822] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.912024][T14826] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3518'. [ 903.968182][T14822] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.014606][ T4426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.037813][ T4426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.105181][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 904.156377][ T3699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.180542][ T3699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.239854][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 904.267863][T14822] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.424402][T14833] fuse: Invalid rootmode [ 904.994300][T14822] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.008869][T14822] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.023903][T14822] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.300726][T14842] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3523'. [ 905.350265][T14842] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3523'. [ 905.787001][T14842] device bond_slave_0 entered promiscuous mode [ 905.967512][T14842] device bond_slave_0 left promiscuous mode [ 906.256340][T14858] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3529'. [ 906.328910][T14859] ptrace attach of "./syz-executor exec"[14631] was attempted by "./syz-executor exec"[14859] [ 906.605593][T14869] loop3: detected capacity change from 0 to 128 [ 906.709863][T14871] fuse: Invalid rootmode [ 907.045074][T14869] syz.3.3533: attempt to access beyond end of device [ 907.045074][T14869] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 907.445100][T14874] loop1: detected capacity change from 0 to 128 [ 907.562874][T14876] loop4: detected capacity change from 0 to 512 [ 907.573440][T14876] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 907.750131][T14876] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 907.774872][T14876] EXT4-fs (loop4): 1 truncate cleaned up [ 908.005920][T14876] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 908.522105][T13548] EXT4-fs (loop4): unmounting filesystem. [ 909.072429][ T3638] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 909.224871][T14909] fuse: Invalid rootmode [ 1015.099079][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1015.106076][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4426/1:b..l [ 1015.114536][ C0] (detected by 0, t=10502 jiffies, g=69585, q=69 ncpus=2) [ 1015.121736][ C0] task:kworker/u4:16 state:R running task stack:21824 pid:4426 ppid:2 flags:0x00004000 [ 1015.133513][ C0] Workqueue: bat_events batadv_nc_worker [ 1015.139176][ C0] Call Trace: [ 1015.142464][ C0] [ 1015.145401][ C0] __schedule+0x143f/0x4570 [ 1015.149931][ C0] ? mark_lock+0x9a/0x340 [ 1015.154277][ C0] ? release_firmware_map_entry+0x186/0x186 [ 1015.160177][ C0] ? print_irqtrace_events+0x210/0x210 [ 1015.165642][ C0] ? preempt_schedule_irq+0xec/0x1c0 [ 1015.171275][ C0] preempt_schedule_irq+0xf7/0x1c0 [ 1015.176382][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 1015.182118][ C0] irqentry_exit+0x53/0x80 [ 1015.186532][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1015.192526][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0xc/0x80 [ 1015.199289][ C0] Code: 89 11 48 c7 44 0a 08 03 00 00 00 48 89 44 0a 10 48 89 74 0a 18 4c 89 44 0a 20 c3 0f 1f 00 4c 8b 04 24 65 48 8b 15 94 bc 77 7e <65> 8b 05 95 bc 77 7e 25 00 01 ff 00 74 10 3d 00 01 00 00 75 5b 83 [ 1015.218894][ C0] RSP: 0018:ffffc90005517b80 EFLAGS: 00000246 [ 1015.224962][ C0] RAX: 0000000000000001 RBX: ffff88802e1f8c80 RCX: ffff88807f7c0000 [ 1015.232930][ C0] RDX: ffff88807f7c0000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1015.240902][ C0] RBP: 0000000000000001 R08: ffffffff8a7801ec R09: fffffbfff223b845 [ 1015.248871][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88802e1f8c80 [ 1015.256839][ C0] R13: 1ffff11005c3f2f3 R14: ffff888077d1dbb8 R15: ffffffff8a780320 [ 1015.264806][ C0] ? batadv_nc_process_nc_paths+0x390/0x390 [ 1015.270711][ C0] ? batadv_nc_process_nc_paths+0x25c/0x390 [ 1015.276616][ C0] batadv_nc_process_nc_paths+0x25c/0x390 [ 1015.282343][ C0] ? batadv_nc_process_nc_paths+0xb5/0x390 [ 1015.288158][ C0] batadv_nc_worker+0x426/0x610 [ 1015.293016][ C0] ? process_one_work+0x7a9/0x11d0 [ 1015.298126][ C0] process_one_work+0x8a9/0x11d0 [ 1015.303082][ C0] ? worker_detach_from_pool+0x260/0x260 [ 1015.308717][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1015.314263][ C0] ? kthread_data+0x4e/0xc0 [ 1015.318774][ C0] ? wq_worker_running+0x97/0x190 [ 1015.323800][ C0] worker_thread+0xa47/0x1200 [ 1015.328496][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1015.333362][ C0] kthread+0x28d/0x320 [ 1015.337431][ C0] ? worker_clr_flags+0x190/0x190 [ 1015.342451][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1015.347040][ C0] ret_from_fork+0x1f/0x30 [ 1015.351477][ C0] [ 1015.354494][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g69585 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1015.366807][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=44371 [ 1015.374685][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g69585 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1015.386042][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1015.396001][ C0] rcu: RCU grace-period kthread stack dump: [ 1015.401879][ C0] task:rcu_preempt state:I stack:25816 pid:16 ppid:2 flags:0x00004000 [ 1015.411090][ C0] Call Trace: [ 1015.414365][ C0] [ 1015.417302][ C0] __schedule+0x143f/0x4570 [ 1015.421822][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1015.426685][ C0] ? __mod_timer+0x956/0xee0 [ 1015.431281][ C0] ? release_firmware_map_entry+0x186/0x186 [ 1015.437179][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 1015.442552][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1015.448464][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1015.453321][ C0] schedule+0xbf/0x180 [ 1015.457408][ C0] schedule_timeout+0x1b9/0x300 [ 1015.462260][ C0] ? console_conditional_schedule+0x40/0x40 [ 1015.468153][ C0] ? update_process_times+0x1b0/0x1b0 [ 1015.473528][ C0] ? prepare_to_swait_event+0x329/0x350 [ 1015.479085][ C0] rcu_gp_fqs_loop+0x2d2/0x1150 [ 1015.483952][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 1015.489151][ C0] ? rcu_gp_init+0x15f0/0x15f0 [ 1015.493999][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1015.499898][ C0] ? finish_swait+0xcf/0x1e0 [ 1015.504493][ C0] rcu_gp_kthread+0xa3/0x3b0 [ 1015.509084][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1015.514193][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1015.520092][ C0] ? __kthread_parkme+0x168/0x1c0 [ 1015.525130][ C0] kthread+0x28d/0x320 [ 1015.529197][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1015.534308][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1015.538902][ C0] ret_from_fork+0x1f/0x30 [ 1015.543335][ C0] [ 1015.546350][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1015.552667][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1015.557878][ C1] NMI backtrace for cpu 1 [ 1015.557890][ C1] CPU: 1 PID: 14919 Comm: syz.1.3551 Not tainted 6.1.110-syzkaller #0 [ 1015.557904][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1015.557912][ C1] RIP: 0010:kasan_check_range+0x1ac/0x290 [ 1015.557929][ C1] Code: 4c 89 d5 48 8d 5d 07 48 85 ed 48 0f 49 dd 48 83 e3 f8 48 29 dd 74 12 41 80 39 00 0f 85 a2 00 00 00 49 ff c1 48 ff cd 75 ee 5b <41> 5e 41 5f 5d c3 45 84 f6 75 61 41 f7 c6 00 ff 00 00 75 5d 41 f7 [ 1015.557941][ C1] RSP: 0018:ffffc900001e0bc0 EFLAGS: 00000056 [ 1015.557954][ C1] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: ffffffff816be29d [ 1015.557964][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888027c2a2e8 [ 1015.557973][ C1] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed1004f8545e [ 1015.557982][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888027c2a2e8 [ 1015.557992][ C1] R13: 1ffff9200003c188 R14: ffffed1004f8545e R15: 1ffff11004f8545e [ 1015.558003][ C1] FS: 00007f4b9da6b6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1015.558015][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1015.558025][ C1] CR2: 0000000020003c80 CR3: 000000002788f000 CR4: 00000000003506e0 [ 1015.558037][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1015.558045][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1015.558054][ C1] Call Trace: [ 1015.558059][ C1] [ 1015.558064][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 1015.558078][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1015.558100][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 1015.558115][ C1] ? nmi_handle+0x25/0x440 [ 1015.558143][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 1015.558163][ C1] ? nmi_handle+0x12e/0x440 [ 1015.558184][ C1] ? nmi_handle+0x25/0x440 [ 1015.558203][ C1] ? kasan_check_range+0x1ac/0x290 [ 1015.558217][ C1] ? default_do_nmi+0x62/0x150 [ 1015.558231][ C1] ? exc_nmi+0xa8/0x100 [ 1015.558245][ C1] ? end_repeat_nmi+0x16/0x31 [ 1015.558267][ C1] ? do_raw_spin_lock+0x13d/0x370 [ 1015.558282][ C1] ? kasan_check_range+0x1ac/0x290 [ 1015.558297][ C1] ? kasan_check_range+0x1ac/0x290 [ 1015.558311][ C1] ? kasan_check_range+0x1ac/0x290 [ 1015.558325][ C1] [ 1015.558329][ C1] [ 1015.558334][ C1] do_raw_spin_lock+0x13d/0x370 [ 1015.558348][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 1015.558369][ C1] ? __rwlock_init+0x140/0x140 [ 1015.558383][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 1015.558401][ C1] advance_sched+0x47/0x970 [ 1015.558420][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1015.558435][ C1] ? debug_object_deactivate+0x63/0x380 [ 1015.558459][ C1] ? taprio_free_sched_cb+0x1a0/0x1a0 [ 1015.558477][ C1] ? taprio_free_sched_cb+0x1a0/0x1a0 [ 1015.558495][ C1] __hrtimer_run_queues+0x5e5/0xe50 [ 1015.558521][ C1] ? hrtimer_interrupt+0x980/0x980 [ 1015.558538][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 1015.558561][ C1] hrtimer_interrupt+0x392/0x980 [ 1015.558590][ C1] __sysvec_apic_timer_interrupt+0x156/0x580 [ 1015.558610][ C1] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 1015.558627][ C1] [ 1015.558636][ C1] [ 1015.558640][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1015.558660][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130 [ 1015.558678][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 92 f1 30 f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 c7 37 ad f6 65 8b 05 98 2f 51 75 85 c0 74 3f 48 c7 04 24 0e 36 [ 1015.558689][ C1] RSP: 0018:ffffc9000325fb60 EFLAGS: 00000206 [ 1015.558701][ C1] RAX: 1813832d54d49400 RBX: 1ffff9200064bf70 RCX: ffffffff816af0fa [ 1015.558711][ C1] RDX: dffffc0000000000 RSI: ffffffff8b0c0340 RDI: 0000000000000001 [ 1015.558721][ C1] RBP: ffffc9000325fbf0 R08: dffffc0000000000 R09: fffffbfff223b845 [ 1015.558731][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 1015.558740][ C1] R13: 1ffff9200064bf6c R14: ffffc9000325fb80 R15: 0000000000000246 [ 1015.558754][ C1] ? mark_lock+0x9a/0x340 [ 1015.558778][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1015.558794][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 1015.558817][ C1] clock_was_set+0x177/0x900 [ 1015.558835][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1015.558853][ C1] ? destroy_hrtimer_on_stack+0x20/0x20 [ 1015.558869][ C1] ? memcpy+0x3c/0x60 [ 1015.558884][ C1] ? timekeeping_update+0x3e5/0x450 [ 1015.558904][ C1] do_settimeofday64+0x673/0x7e0 [ 1015.558929][ C1] ? codel_init+0x33e/0x3a0 [ 1015.558940][ C1] ? __x64_sys_clock_settime+0x232/0x270 [ 1015.558955][ C1] ? get_device_system_crosststamp+0x920/0x920 [ 1015.558975][ C1] ? codel_init+0x33e/0x3a0 [ 1015.558988][ C1] ? bpf_lsm_settime+0x5/0x10 [ 1015.559000][ C1] ? security_settime64+0x75/0x90 [ 1015.559024][ C1] __x64_sys_clock_settime+0x232/0x270 [ 1015.559039][ C1] ? print_irqtrace_events+0x210/0x210 [ 1015.559058][ C1] ? exit_itimers+0x690/0x690 [ 1015.559074][ C1] ? rcu_is_watching+0x11/0xb0 [ 1015.559088][ C1] ? syscall_enter_from_user_mode+0x12d/0x230 [ 1015.559106][ C1] do_syscall_64+0x3b/0xb0 [ 1015.559125][ C1] ? clear_bhb_loop+0x45/0xa0 [ 1015.559144][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1015.559163][ C1] RIP: 0033:0x7f4b9cb7def9 [ 1015.559182][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1015.559193][ C1] RSP: 002b:00007f4b9da6b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 1015.559206][ C1] RAX: ffffffffffffffda RBX: 00007f4b9cd35f80 RCX: 00007f4b9cb7def9 [ 1015.559216][ C1] RDX: 0000000000000000 RSI: 0000000020003c80 RDI: 0000000000000000 [ 1015.559224][ C1] RBP: 00007f4b9cbf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 1015.559232][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1015.559240][ C1] R13: 0000000000000000 R14: 00007f4b9cd35f80 R15: 00007fff51678848 [ 1015.559258][ C1]